Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
File: S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft (raw, json)
Hash identifier: lB6Hnet4rTI6VkKrS+rS+epkuK1uQrJk5Zlp24KYIvY=
Subject key identifier: 67:76:1C:61:58:F9:44:86:92:B4:53:0A:74:14:C8:51:C8:2F:C5:14
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 01A0889F21D6FE756B8D9A4E1257660CD6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:02:05 +0000
Manifest this update: Thu 10 Sep 2026 00:02:05 +0000
Manifest next update: Fri 11 Sep 2026 00:02:05 +0000
Files and hashes: 1: 2g3g_d2cbfXZVdPZvllR7ko9tq4.roa (hash: qrpCT5b4Pl5PHRJkUsaii3h3DkJ//XJSoI+D6opqI3Y=)
2: DZRRAdctSa4CVUBsnqANHKo8DbA.roa (hash: dNAFaUwzL63hmLrib+niPT9WNwhu3ti4JBM4gbkcCtk=)
3: S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl (hash: 3E5MFi1lPG9TfmhCWyPukwUdcGRux5K+2m31rOpO4+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:21:d6:fe:75:6b:8d:9a:4e:12:57:66:0c:d6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Sep 10 00:02:05 2026 GMT
Not After : Sep 11 00:02:05 2026 GMT
Subject: CN=67761c6158f9448692b4530a7414c851c82fc514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:f9:21:1d:50:06:b0:d6:1c:e1:a5:c4:b2:
6a:5c:e9:f9:7f:de:ac:f1:dc:f2:ed:40:1f:28:e5:
65:9a:1a:8a:e2:d6:ec:dd:cd:ab:69:42:05:2f:e9:
7b:53:08:5b:dc:e6:10:f3:b8:b9:d2:1d:ab:13:5f:
28:4b:1d:33:9f:87:6e:9e:f3:86:95:94:d4:48:ee:
72:11:b5:e2:0f:13:6e:8b:60:54:21:df:88:7a:12:
83:df:80:35:41:86:18:bc:fa:d1:e2:f9:a8:77:bf:
6b:71:69:93:52:d0:ff:b4:8b:63:9a:06:10:eb:37:
0a:1f:5c:83:4f:b7:d0:58:2e:3a:7e:6c:aa:98:82:
9d:49:ee:44:dc:8f:21:2e:cc:f4:05:91:f9:40:4a:
19:0b:43:92:15:16:6a:6d:c3:fd:78:cf:c4:e6:a7:
1e:bf:19:f3:62:9c:1a:5e:e8:f0:66:70:d1:bd:a3:
7c:e5:80:ed:59:2e:e2:58:53:30:89:9e:5f:18:47:
c8:59:c7:e2:68:4f:e5:b6:e7:45:bb:77:00:ff:62:
26:bf:52:aa:46:7f:c1:fa:84:82:05:22:64:13:0f:
de:d5:e0:84:38:0e:5f:4a:0d:63:7e:33:6b:6f:2b:
45:71:f0:ce:15:fc:a5:e4:23:d7:6d:08:4f:20:b6:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:1C:61:58:F9:44:86:92:B4:53:0A:74:14:C8:51:C8:2F:C5:14
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:13:cb:9c:11:5e:cc:7d:58:38:d6:8b:9d:a5:1f:fb:27:c4:
6b:78:a4:6c:85:80:49:ac:a3:82:e5:04:0e:8f:b3:b3:15:96:
62:fa:b7:5b:90:84:d2:80:8b:ea:a4:06:43:77:fc:54:ff:be:
44:75:05:ab:e8:29:c8:eb:6b:00:ff:65:7a:21:fd:a8:1a:5e:
7e:25:7c:cc:c8:bd:ba:6f:d7:f4:26:34:4b:de:ee:78:14:29:
8e:60:e4:dd:ed:09:a1:95:60:11:d3:5a:d8:7c:1a:c5:1a:1c:
a7:25:f0:43:8f:3c:5f:0a:84:33:e7:82:78:34:11:f6:36:20:
38:a9:25:2c:59:a0:22:39:51:88:7c:09:2b:3d:30:64:52:3f:
a6:88:a5:c7:b9:df:e4:5f:31:2c:f2:4f:01:4f:33:76:87:8e:
16:b9:25:ff:a0:20:b6:8e:ae:08:d3:00:78:35:92:55:83:0d:
91:56:89:83:bf:f7:85:74:43:c1:c9:06:99:3c:86:9b:7b:04:
0a:d0:7f:99:e7:32:66:18:cf:85:f0:a2:af:d7:f1:24:20:8b:
6f:67:e5:04:b0:15:b5:8e:1b:ca:02:f3:de:74:9a:7a:f5:72:
30:70:4d:fd:26:9d:61:08:17:c2:bb:6b:55:51:1a:37:e0:ab:
50:68:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:31:29 2026 by rpki-client