Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: xtpxZ1Qbrdoxg/UK40HqMuP4b0IpbjifkyMIEg53Auo=
Subject key identifier: CE:D3:4D:91:15:DC:53:71:E4:C3:04:3E:D9:0D:0C:A0:7C:E9:66:AE
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 01A181F4E748D59FDB50F1EED85250F3A9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 10:01:13 +0000
Manifest this update: Wed 28 Oct 2026 10:01:13 +0000
Manifest next update: Thu 29 Oct 2026 10:01:13 +0000
Files and hashes: 1: 2_wCqEw8GddDou0kZW8e_OaYD-Y.roa (hash: jjHwHZbG+GUWLcD8cL/6tiQl9nk7+E15Y7xl904tgmA=)
2: FZP0qnMU98q0kSnM0Y7a2dQIups.roa (hash: F2I7NyVWwkoVb+PwDC36i4TLCjQA6IVa44WyV4KoqdE=)
3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: lPZErwrxrVGxrtUH9D6O60r1YXFI2Yz9FN4t+qJgf8c=)
4: a-x6eM06-S3ToMMPNzVnCccJ_0A.roa (hash: llcid5NErLNnpgu+7VTqgT/2o1JfflGSyuP3ZqonSuk=)
5: fwJb8-jhU9FPP5mFjgyO3uAZ7W0.roa (hash: HXqX6pFclK626D8/+3kEYMPmqF/qpQmRvVZYEHowAb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:e7:48:d5:9f:db:50:f1:ee:d8:52:50:f3:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Oct 28 10:01:13 2026 GMT
Not After : Oct 29 10:01:13 2026 GMT
Subject: CN=ced34d9115dc5371e4c3043ed90d0ca07ce966ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:29:a0:24:85:ef:1a:b4:01:9b:5f:1e:d1:
4e:99:1e:94:2f:9f:a7:94:2f:db:7c:f3:af:5f:6b:
0b:79:51:f8:f4:ac:ef:1f:bf:08:0d:de:f0:e2:12:
20:e9:8c:85:a1:73:24:1e:63:ef:22:7b:b0:c2:33:
50:57:79:12:fb:f3:83:0d:79:c4:93:fa:35:e5:7b:
3d:11:62:16:7e:3f:c0:d3:3f:82:d5:4b:35:7c:fb:
a9:83:70:7f:c1:04:80:84:df:5b:b5:cc:44:8d:9c:
38:03:e8:09:cd:e4:a7:fe:f1:83:f2:ff:89:b9:6b:
27:a1:76:1a:ff:cd:32:49:41:b9:11:ae:eb:26:8b:
05:91:ff:4f:a9:85:6a:ff:23:7a:c5:e9:3c:92:88:
78:f2:7c:4f:5c:60:9d:07:b5:8d:66:d8:e2:17:ee:
6c:0e:44:28:a9:e2:e3:5f:3f:6f:aa:b8:12:4c:ac:
8c:af:c8:52:2d:37:a1:48:18:91:85:d3:21:28:48:
e2:cc:5a:a2:84:de:55:57:02:4c:3a:83:bb:8f:af:
b6:cc:e6:91:76:cf:0c:c9:4a:6a:9d:81:a3:bf:6f:
02:53:e2:af:74:68:da:fc:42:54:ca:36:36:84:cb:
a0:7b:53:9e:5d:e3:36:e3:66:75:8e:81:9d:ee:7f:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D3:4D:91:15:DC:53:71:E4:C3:04:3E:D9:0D:0C:A0:7C:E9:66:AE
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:f5:a5:3a:15:83:f8:34:e0:57:67:59:a0:63:29:6b:97:
dc:7a:f8:4b:bb:1e:19:50:ac:05:f7:cf:08:48:07:db:ad:21:
0b:c8:40:93:31:ee:bd:d3:f4:b2:bf:48:0c:3d:2d:06:d2:5a:
fc:67:2e:72:5b:c4:53:e5:f9:d6:c8:a4:2e:e5:29:10:5e:c9:
02:1c:60:50:59:28:fb:a3:f2:8f:e6:60:32:e1:07:d2:90:4f:
80:ad:87:01:87:b7:2f:64:d8:52:bc:54:94:b3:d4:f3:70:fb:
70:54:63:60:e0:e1:f8:5f:49:25:d7:d0:bf:e8:0b:7b:0c:80:
23:a1:1b:8b:0e:6d:ae:2a:a6:25:2d:ea:ac:bd:4e:88:d8:36:
9c:2a:b6:4c:c0:8b:fc:4a:2b:2c:1e:93:22:75:1f:d5:7c:b0:
da:d8:c9:d4:9e:cb:5d:9d:95:a7:3c:38:9d:55:ec:e6:f1:ee:
15:8e:e3:e8:5a:fe:c2:4a:c7:4e:45:9e:19:97:e6:c8:02:12:
5b:75:17:dc:80:a0:c7:27:8e:71:ee:a0:36:31:3a:f1:c5:a6:
35:b6:3b:e7:0a:0b:50:1a:d2:82:0d:b6:00:3c:f9:be:fa:21:
de:ca:64:07:47:55:5f:4c:48:11:46:b6:1b:e3:c2:b1:4d:a5:
e2:42:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:39:48 2026 by rpki-client