Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: ZIflgmkEX2sJQO/yWPLJAsWvNoGPgQJvCnxJOyh1McY=
Subject key identifier: F0:F6:21:CF:55:BF:6A:8B:8B:36:82:C5:7D:CE:1E:E2:9D:F4:F2:94
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 01A05630876B0C1570548F255D1FB7189113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0E10
Signing time: Mon 31 Aug 2026 05:00:15 +0000
Manifest this update: Mon 31 Aug 2026 05:00:15 +0000
Manifest next update: Tue 01 Sep 2026 05:00:15 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: DzxeDjG+3AHT/NshskAZBDRTsx+0vUNAmAY3WJGflvg=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:30:87:6b:0c:15:70:54:8f:25:5d:1f:b7:18:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Aug 31 05:00:15 2026 GMT
Not After : Sep 1 05:00:15 2026 GMT
Subject: CN=f0f621cf55bf6a8b8b3682c57dce1ee29df4f294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:ed:f4:3a:61:4c:66:e3:c8:55:17:f5:20:
e4:75:4f:68:65:a6:a0:3b:8f:52:d4:16:3d:a1:7d:
1a:ff:e4:8b:68:88:20:25:e0:82:86:94:6c:ec:52:
e7:e1:f2:ac:de:df:1c:33:eb:36:1c:da:bc:bc:3b:
4d:7f:a8:4e:4b:a6:d2:25:7d:08:5c:77:9d:2b:66:
22:36:ce:fc:6c:ad:b1:89:13:9b:c0:06:b3:59:ae:
fc:43:4c:4d:53:d6:40:10:4f:01:10:b7:7d:26:e7:
b5:d5:f7:ae:9b:be:75:67:0e:be:57:b1:55:2d:02:
28:3d:a1:72:f3:36:a1:2b:b8:cf:a9:f7:03:c7:ac:
31:47:7a:70:6e:93:87:25:e6:d0:b2:04:2a:01:9f:
ef:a2:d5:53:39:73:96:37:f5:b0:84:b6:ca:53:d3:
06:61:d5:d7:85:af:a3:c1:bc:20:06:6e:85:e5:3c:
51:99:5b:b3:75:dc:2c:f1:b3:43:c4:01:de:6f:ef:
56:75:ec:4d:52:1b:df:ae:91:df:70:37:9c:3e:de:
46:84:3c:f9:30:f6:b2:0d:50:53:4d:9d:df:82:bd:
4a:30:10:3c:68:a8:96:17:76:79:b4:22:ed:7f:b3:
40:a3:38:e6:f5:88:4d:ce:21:6f:ba:f3:e1:65:dc:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:21:CF:55:BF:6A:8B:8B:36:82:C5:7D:CE:1E:E2:9D:F4:F2:94
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:b7:ca:e6:f5:3c:85:ed:5c:6b:5b:ef:8e:14:36:bd:d0:
ee:67:c0:1c:5e:34:f5:94:9a:21:51:f1:3c:47:44:54:92:65:
74:64:2e:a8:9b:30:ef:79:e5:7e:d3:a6:e8:7e:4d:1c:3b:7f:
a4:34:6a:d9:df:65:71:a0:53:46:d3:96:26:9e:cc:1c:57:f6:
ab:a1:4d:d8:27:46:03:21:25:79:cf:04:2b:62:8e:bc:e0:ca:
aa:4a:73:5f:b1:67:5e:01:c7:00:c9:87:f6:68:2e:33:17:16:
67:44:f2:b4:ca:d5:35:76:e0:77:6b:af:ed:87:0b:78:7f:72:
bf:4d:a0:6e:f0:06:76:38:76:28:f0:89:4c:72:0c:3a:f7:a6:
3a:7f:51:3c:ec:1c:f2:78:8a:ab:00:63:0d:2a:5d:bf:c8:3d:
93:ef:f9:c6:e5:c6:4a:87:81:da:2b:43:9f:a2:3a:37:63:d8:
23:28:ed:0c:cf:31:9a:83:93:16:17:c3:56:3d:33:84:b2:28:
72:2a:6d:c4:0b:8a:d7:65:5b:df:cb:60:c2:85:f4:be:80:57:
9e:6d:a8:8b:c3:e9:ed:ce:56:81:59:29:36:0b:1e:85:63:93:
9b:25:ab:47:44:14:5a:d7:6e:9c:b0:69:d6:68:a4:2a:9d:ab:
83:0c:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 08:37:04 2026 by rpki-client