Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
File: S5IeM_-6Ocahgd1C7jwK-gwiINA.mft (raw, json)
Hash identifier: M4DxZcWOZ0w9B8wbzZT9GREvObj3dobqwIiSX6H9yBM=
Subject key identifier: D4:CA:E2:A7:CA:90:AD:E2:79:22:6B:76:28:23:0D:CE:99:41:1D:3B
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 01A1344815FE512B415EA2B05EEFDFF5908C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
Manifest number: 0189
Signing time: Tue 13 Oct 2026 08:01:41 +0000
Manifest this update: Tue 13 Oct 2026 08:01:41 +0000
Manifest next update: Wed 14 Oct 2026 08:01:41 +0000
Files and hashes: 1: S5IeM_-6Ocahgd1C7jwK-gwiINA.crl (hash: DNAjuAWmdkMCyk7zR+JA31cIfHz5XiAAODGiDPOvk8E=)
2: zf1amWZL0cYfq5OOLtTUd15GvWM.roa (hash: 7dLn8t0rA8E+ONSoVaPUp6Xkm/L/m2vJVtWRafaGu5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:48:15:fe:51:2b:41:5e:a2:b0:5e:ef:df:f5:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: Oct 13 08:01:41 2026 GMT
Not After : Oct 14 08:01:41 2026 GMT
Subject: CN=d4cae2a7ca90ade279226b7628230dce99411d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:16:43:d9:1d:fb:5d:69:55:5e:b8:ee:d4:
19:bd:75:6e:47:e8:45:33:07:f9:b4:3b:6a:fd:5e:
76:c4:2e:b2:7f:51:64:1f:c6:e0:2f:33:44:eb:64:
78:38:82:4f:18:92:53:e4:8e:25:17:a3:59:4c:f4:
a0:09:5e:dd:14:bb:11:db:88:66:63:39:5c:95:d4:
46:8c:02:7f:19:03:51:fa:31:83:46:d4:1f:a9:eb:
55:b3:b6:6b:7f:56:c3:67:d1:9b:2f:62:e2:79:05:
7e:25:97:a5:ea:a3:5d:1c:83:30:06:53:6f:a7:2a:
29:a3:56:50:42:f1:f6:b3:2c:8d:cf:50:ed:b6:7f:
bc:cf:87:33:dc:32:0c:6e:c9:c5:9f:90:c1:8d:b7:
b6:1f:4a:30:25:2b:4a:07:da:e5:af:29:b1:1c:43:
9b:32:3d:9b:aa:27:fe:98:0c:97:e5:b2:e0:75:a9:
99:c3:e0:6f:2f:91:5e:91:7f:8a:1b:d1:18:43:3a:
f1:ea:f5:d6:02:4a:b6:c1:0d:56:00:bb:5a:2c:6d:
24:d7:6e:8c:ac:2f:78:1b:b8:6d:87:13:f5:a0:3b:
28:1b:e8:86:3e:b5:24:2f:4a:cc:cd:85:3a:13:26:
75:aa:15:61:91:3e:c6:d2:49:cb:e9:b1:1e:42:19:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:E2:A7:CA:90:AD:E2:79:22:6B:76:28:23:0D:CE:99:41:1D:3B
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:03:2c:42:49:a4:58:7f:a2:b3:15:5a:e2:75:a1:57:fe:
ab:c3:bd:c4:e6:65:29:69:6f:8c:85:02:12:df:73:60:01:14:
e9:b3:a8:19:42:da:0a:41:f5:2d:0c:64:05:b2:07:b5:13:8b:
f1:14:dc:ca:95:2e:db:02:26:1f:c7:60:83:be:9f:25:a8:d9:
b6:fc:3c:7d:df:12:ab:31:78:40:f0:d1:a0:13:ce:97:da:09:
01:22:1e:31:8d:19:71:e6:54:30:3f:85:6e:2e:e1:4c:ae:94:
93:a6:82:e3:78:b2:08:2e:a1:a7:46:9b:1d:1c:7f:51:bb:76:
b0:0a:5d:bf:dc:a4:3c:42:8a:f2:ca:af:8e:31:36:6c:b1:18:
c8:a9:52:da:df:39:4a:46:ec:6f:bc:66:8b:61:2a:78:50:2f:
f3:fe:f2:e5:9a:91:91:7a:cf:6b:78:33:67:07:fa:3d:4a:a5:
16:77:40:9f:f6:f5:2c:f5:67:e9:ca:72:2c:32:39:ca:52:ac:
51:c7:6e:6b:1e:db:39:c0:26:8b:e9:0c:a1:f3:f1:c1:a7:5b:
12:7d:f6:54:f8:c0:a6:66:d0:fa:3f:02:cb:ff:5b:79:95:90:
99:a6:70:89:dc:73:d5:e1:95:bb:cb:62:86:74:dd:8f:2b:fe:
f4:54:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:01:27 2026 by rpki-client