Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: oAAExfbL0WoMWgw+fF89DsANN4bglSXY4AU/Gz7K1wE=
Subject key identifier: B5:DD:A6:EA:D0:03:EB:87:A5:11:DC:FA:B7:2B:5C:74:D6:9E:C7:B5
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019E80E9A413FF0194236A379301E2EB6808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0D1D
Signing time: Mon 01 Jun 2026 02:00:55 +0000
Manifest this update: Mon 01 Jun 2026 02:00:55 +0000
Manifest next update: Tue 02 Jun 2026 02:00:55 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: pphtMbtCsBcOylkDhXEPeGNhVF2Mmw8BjZOiV8mtOWo=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:80:e9:a4:13:ff:01:94:23:6a:37:93:01:e2:eb:68:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jun 1 02:00:55 2026 GMT
Not After : Jun 2 02:00:55 2026 GMT
Subject: CN=b5dda6ead003eb87a511dcfab72b5c74d69ec7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:88:e0:3f:61:cd:91:5a:f2:18:02:fe:a9:
b9:92:32:d1:df:a5:a3:48:ef:df:db:a1:a7:dd:ee:
ed:92:87:3f:b4:33:9b:d4:4a:a8:ab:52:25:72:5e:
49:94:20:ad:a8:7c:99:d5:c0:92:c3:d9:96:b4:13:
fe:b9:23:25:bc:54:86:66:65:9c:23:d6:cb:ed:e0:
77:66:09:3f:d2:f7:20:c0:0c:ba:41:05:eb:1f:e8:
d3:c8:68:37:97:45:36:1b:38:bc:d7:58:0d:f0:65:
3b:1b:d1:c3:56:6f:b5:75:51:9c:af:f3:c0:ca:54:
91:7d:6b:a3:b7:9d:1b:46:4a:bd:ca:e7:27:cf:3e:
02:2b:95:c0:3a:c1:0a:d5:de:f3:bc:10:68:cb:2d:
00:26:11:97:78:45:a4:22:d6:66:ee:e9:53:d9:a3:
f1:da:ff:50:9b:a9:df:7f:6d:cf:6f:97:0c:17:34:
f5:3f:04:85:54:55:48:3e:ca:7e:cf:5c:9d:35:28:
0a:9d:fb:e1:55:64:4a:75:83:19:da:82:1a:4e:e4:
7f:36:3c:92:a3:1a:cf:dc:01:b2:01:7e:d3:95:7a:
58:12:6e:8a:04:b1:43:06:1e:ce:23:58:a6:a3:f8:
d3:2e:06:39:82:48:f5:d7:9c:42:f5:9f:c1:b5:60:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:A6:EA:D0:03:EB:87:A5:11:DC:FA:B7:2B:5C:74:D6:9E:C7:B5
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:58:9a:e2:4c:9c:6d:03:92:2b:99:fc:47:30:31:04:51:45:
af:8a:d9:e5:dd:7d:6d:ce:ba:7a:bf:c0:c4:c9:7d:a9:1e:0e:
4e:5e:b9:84:af:34:d1:e4:a6:42:44:50:77:e6:89:f7:71:d5:
03:f9:22:9f:fc:f0:90:9d:1a:ec:26:69:c7:89:ca:71:32:82:
bc:3c:60:48:a4:f6:7d:37:17:0a:17:99:01:16:4e:01:0c:6d:
23:8b:f5:a7:22:0f:5f:dc:69:f1:8f:42:c7:73:f9:4e:9a:9d:
e7:47:be:da:c1:71:3f:2a:d2:97:3b:26:be:de:8d:18:3f:99:
a7:75:bb:2e:60:3c:c6:95:fa:a3:7e:1c:27:b2:ad:c1:52:fd:
0a:c3:16:9f:23:c5:66:7d:3c:22:f5:62:6a:b5:60:ad:8d:17:
95:4a:e1:55:9e:ac:55:6f:d4:56:0c:04:98:17:40:b9:3d:2f:
3e:ce:d8:f8:bc:c1:c7:f7:4a:49:01:a7:48:a8:bf:c5:c1:1d:
f8:83:7b:90:b4:c1:56:03:53:c0:5f:cf:63:2f:d4:14:46:7d:
13:3d:66:3f:04:94:49:9a:a5:08:7c:4a:95:76:21:6d:fe:1a:
4b:0b:22:d3:33:c7:76:28:7b:dc:ea:da:75:9c:fa:25:64:c1:
2f:a8:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 04:40:23 2026 by rpki-client