Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: bGfDni6yynN6ThKALhBLdXEg2TD6WrTfn1o7uDtsY9U=
Subject key identifier: B0:A2:15:61:A7:94:3A:67:4C:7F:B4:68:41:A4:4A:F2:7F:01:31:52
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019F6C84E1A622E579902B5FC6D404CFE730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0D97
Signing time: Thu 16 Jul 2026 20:01:15 +0000
Manifest this update: Thu 16 Jul 2026 20:01:15 +0000
Manifest next update: Fri 17 Jul 2026 20:01:15 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: rF86ktOpxvdjbX000xS0W74DorPfCLMDbmR1JBNJpdg=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 16:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:84:e1:a6:22:e5:79:90:2b:5f:c6:d4:04:cf:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jul 16 20:01:15 2026 GMT
Not After : Jul 17 20:01:15 2026 GMT
Subject: CN=b0a21561a7943a674c7fb46841a44af27f013152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:ec:27:09:e5:15:aa:06:71:91:bf:cb:f4:
c2:e3:91:83:e8:e7:9f:fe:39:c8:ab:df:a6:d6:13:
4f:f0:4d:2d:ba:61:81:fb:04:9e:d0:ff:36:c7:c5:
e4:3a:55:12:d1:4d:a8:90:6e:83:4a:7c:74:3c:b6:
5a:5a:20:3f:4f:88:c1:25:cc:5c:e4:e7:05:f3:44:
ed:20:60:89:24:65:32:20:1f:b8:ed:33:13:1d:da:
cb:04:85:ba:0f:c8:ba:94:cc:ac:a6:6f:91:16:e0:
96:31:cc:aa:c0:42:23:6c:f2:f2:00:e7:17:20:b0:
07:b2:ee:41:a2:45:78:71:13:f6:b0:a4:4f:d6:3c:
c1:29:9a:9a:71:d5:56:ca:cb:ab:ff:42:fc:d2:48:
f6:a0:a8:0a:0d:0e:12:6c:38:b8:a1:ee:93:b3:b5:
1f:84:62:5c:f8:24:a1:38:12:7a:b7:1a:a8:66:d6:
68:14:50:a7:31:aa:ed:c8:e8:b5:ef:5c:be:89:25:
f3:8e:f8:bd:a7:60:e2:e6:a2:fa:76:73:a9:20:d3:
7b:2b:63:05:a6:b9:22:c2:41:49:b6:30:20:b8:3c:
e7:dc:f0:b0:9b:9c:2d:86:0e:a6:cc:a4:bf:ea:43:
b6:67:3e:df:b0:2e:50:11:40:04:47:97:0e:f9:f6:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:15:61:A7:94:3A:67:4C:7F:B4:68:41:A4:4A:F2:7F:01:31:52
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4d:9d:58:d2:6b:1b:62:26:f1:30:ee:c8:6c:f5:45:cf:7c:
2c:9c:35:67:84:d3:e1:c7:4a:ba:05:89:7d:c7:bd:0f:2e:50:
3d:9b:26:9b:3f:18:1e:4c:25:54:76:24:d5:e2:61:d2:ad:0c:
9a:b4:6d:f2:68:ad:11:4d:fb:e1:d4:f8:04:88:f1:5d:18:d4:
db:b6:9f:a1:3c:fd:0e:37:02:3b:8c:13:78:a2:75:0e:48:07:
6a:20:ee:5b:1e:09:ed:f9:28:93:3c:e2:a0:ee:18:68:c6:52:
c2:69:10:17:30:1d:3c:9a:e2:b6:d0:fc:43:2b:9d:ed:9b:b8:
ce:53:79:87:1d:0e:e8:b1:b4:49:d9:d5:d1:7d:29:bd:c6:79:
73:a0:0b:a6:c6:6c:f0:3b:15:9b:66:83:90:b9:c3:65:ff:e4:
3d:6d:d0:65:de:75:83:50:59:e1:bc:49:cd:0e:da:28:89:67:
a6:d9:e9:2b:19:21:54:c3:e2:41:1a:d1:5f:7f:b3:38:05:53:
93:62:5c:67:70:ba:b1:54:39:c1:74:ec:4c:5b:10:e5:c7:38:
60:bf:65:34:55:5d:0d:86:33:38:37:19:21:d8:e3:e8:f9:0e:
9e:5d:7e:ce:17:79:82:73:24:11:4c:40:de:b8:a3:54:6f:11:
72:40:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 02:06:01 2026 by rpki-client