Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: FPToA92bypr1EXaadTUmzd3qEXxYloc8W2p1V2IgNoY=
Subject key identifier: 29:14:FF:B5:7C:2E:A4:67:99:32:75:34:6E:A3:7E:BD:86:FC:7B:6C
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 01A17DA9DBBE52855D15AEBBF6553FA52D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 1AF4
Signing time: Tue 27 Oct 2026 14:00:46 +0000
Manifest this update: Tue 27 Oct 2026 14:00:46 +0000
Manifest next update: Wed 28 Oct 2026 14:00:46 +0000
Files and hashes: 1: KWcbx273ZHAayKfn1OKexVZlWvQ.roa (hash: PaeeJ1l/Ji5ydWz0jBTUhtGKXbVfabdrj21ewU0oRmo=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: Vv54Sk0E4f6tAc2ZaWn0NRsWzdDtioM0Wz50Bn2p8lA=)
3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a9:db:be:52:85:5d:15:ae:bb:f6:55:3f:a5:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Oct 27 14:00:46 2026 GMT
Not After : Oct 28 14:00:46 2026 GMT
Subject: CN=2914ffb57c2ea467993275346ea37ebd86fc7b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:88:ff:c6:1b:c8:f3:d4:f8:d4:9b:91:c8:
7b:75:28:ad:37:41:97:cb:8d:c7:e5:9f:dd:06:a5:
ed:3b:88:dc:de:b5:52:81:de:63:6c:3f:3a:32:e3:
a5:36:58:86:c3:2f:e4:e6:0e:05:d1:2f:3b:a1:d9:
10:92:35:3f:57:d3:c6:70:88:e5:dc:6a:2e:ba:0a:
bc:41:8d:2b:b8:cc:3e:38:e7:c8:2a:cb:2e:06:02:
3a:df:10:8e:a5:78:92:30:27:12:00:46:c4:8d:5d:
8d:de:cb:54:64:d8:bc:f6:f4:db:1c:1e:fa:ff:fc:
75:35:fc:72:b8:2e:c7:ea:9d:d9:55:58:c0:85:d7:
5f:5f:0b:db:02:19:4b:a5:23:8a:8e:b1:07:d8:5c:
e5:93:47:2a:01:8e:0d:46:dd:9b:72:c5:8b:5a:85:
6a:04:a2:6b:86:52:58:76:f7:df:f2:85:2c:7a:46:
aa:b0:25:12:47:2f:90:a1:f6:33:a3:3d:03:33:b1:
90:40:a7:0e:83:04:58:e4:f7:b8:03:29:cb:2f:f9:
3b:36:2a:6b:ed:8a:94:a6:6f:00:3b:cf:39:c3:77:
19:32:64:d2:78:59:31:0f:a6:f3:f1:76:1f:70:b8:
9e:97:dd:68:8e:25:6d:7f:15:d8:27:27:02:66:19:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:FF:B5:7C:2E:A4:67:99:32:75:34:6E:A3:7E:BD:86:FC:7B:6C
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:00:65:91:26:ef:de:00:43:81:d5:f7:db:14:ad:af:8e:74:
d4:4e:49:b5:e5:b9:26:8b:33:e9:8f:98:c4:e3:49:e7:f6:af:
6d:55:85:44:19:3f:57:df:50:74:2d:5c:02:dc:69:73:53:1f:
a9:98:46:5d:24:52:c8:53:ea:2c:8a:14:1e:25:3d:e7:c0:14:
6e:a7:88:23:25:ce:e0:ee:3b:da:2b:42:ae:9f:1f:b2:2c:29:
31:43:7f:b9:92:6d:7d:16:89:79:a1:8e:eb:4e:0c:28:ab:fd:
c2:0e:b2:b1:ad:bc:31:00:34:36:27:ed:7c:1e:da:19:01:b6:
28:da:25:9b:0c:01:57:de:c6:c5:fc:bd:0e:ad:30:6f:a8:e5:
00:f7:59:a0:06:c0:5e:d1:b5:3a:9d:3e:77:ed:5c:9f:80:dd:
65:15:11:01:9a:10:29:04:05:ba:5e:c7:7c:97:38:78:c4:75:
24:28:64:32:79:92:2b:43:30:cc:d3:d9:e2:6d:33:c7:bd:e4:
3e:b2:8c:49:1b:d0:50:69:34:34:9b:7c:30:ff:c4:e4:a4:ec:
6d:0c:1c:74:88:6d:ae:a4:49:ca:73:e0:c5:e1:17:7e:a1:cb:
37:c8:4f:94:ab:ee:f8:ba:60:f0:65:55:57:7f:bf:7a:9f:88:
98:32:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:50:59 2026 by rpki-client