Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
File: S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft (raw, json)
Hash identifier: If1/VmS4Pn7icYlp0SH/eyrDxAhC52WnvmAb6Ak3Lf8=
Subject key identifier: C0:70:60:92:ED:C0:0C:5E:F1:2D:C1:5A:01:D7:E0:47:F7:51:1F:BE
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 019F9EF1CD35B88702AD7FAFF69155926DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:01:14 +0000
Manifest this update: Sun 26 Jul 2026 15:01:14 +0000
Manifest next update: Mon 27 Jul 2026 15:01:14 +0000
Files and hashes: 1: 2g3g_d2cbfXZVdPZvllR7ko9tq4.roa (hash: qrpCT5b4Pl5PHRJkUsaii3h3DkJ//XJSoI+D6opqI3Y=)
2: DZRRAdctSa4CVUBsnqANHKo8DbA.roa (hash: dNAFaUwzL63hmLrib+niPT9WNwhu3ti4JBM4gbkcCtk=)
3: S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl (hash: n+emIVVP1V7HLcAT2tkSZXJIXiQxeEmcHtb54ijW4N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:cd:35:b8:87:02:ad:7f:af:f6:91:55:92:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Jul 26 15:01:14 2026 GMT
Not After : Jul 27 15:01:14 2026 GMT
Subject: CN=c0706092edc00c5ef12dc15a01d7e047f7511fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:8e:dc:c6:9a:cf:dd:6a:c9:d3:97:36:92:
cc:2e:7c:b2:d4:42:fb:62:e4:68:15:1b:a6:a1:a7:
ee:09:57:73:db:c0:0c:97:14:d1:5e:81:eb:a9:ff:
54:fe:ce:6e:d2:d4:33:3b:07:6b:d4:9d:2e:d1:fc:
e1:72:f6:e1:d8:06:06:93:0c:81:5a:97:d8:15:fc:
d6:fa:de:bf:5d:fe:46:57:6e:b8:e3:8f:07:a3:c5:
7e:98:62:09:f1:f2:f1:c9:b3:ae:f4:1a:18:81:8b:
95:5f:a7:c0:a4:b3:8e:e1:3c:2e:b7:ec:3a:b3:bc:
53:40:a6:cd:90:4b:d6:42:fd:19:21:4f:38:0f:69:
3a:44:eb:b2:d0:15:8f:93:71:15:bc:e2:67:eb:4a:
18:45:ea:c1:44:41:ae:a6:d3:bc:08:a0:40:85:01:
0d:1c:5a:54:6a:63:55:bc:d2:a1:fb:02:23:63:10:
0f:fc:81:42:12:38:1b:50:56:2a:c8:cf:e9:d2:c1:
be:e9:fd:af:56:52:44:d5:6f:5e:33:8c:98:72:72:
68:d4:68:dc:bc:e3:d7:9c:95:f8:0a:b4:f7:8a:4e:
40:a0:51:b4:8b:6d:08:95:76:ab:c6:75:9a:62:b6:
d3:43:ca:71:16:2a:da:22:14:45:bf:40:12:13:63:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:60:92:ED:C0:0C:5E:F1:2D:C1:5A:01:D7:E0:47:F7:51:1F:BE
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:ae:d1:3b:fe:6f:08:94:80:70:7e:74:f9:3b:4e:ee:2b:
df:fa:87:e4:bf:a1:2b:96:cf:ee:cc:81:8c:96:4f:87:56:0a:
11:f5:43:38:94:7b:13:4f:5c:c7:a3:c3:71:1a:5f:cd:64:9b:
7c:44:b2:04:1f:69:f2:bd:d4:7f:2c:d6:65:f3:a1:af:12:7e:
c4:59:4d:1c:da:75:dc:65:1e:73:d4:26:e4:9e:b3:71:9e:92:
5e:aa:ef:69:54:f3:e8:34:e2:84:fb:7a:a4:d5:57:d5:21:48:
be:5a:9e:fb:fb:99:87:ad:54:8e:85:84:a2:2d:3f:42:ae:da:
91:94:d9:01:5f:59:9b:96:45:24:ea:6f:a8:45:cd:e8:f2:71:
8e:da:b2:89:4f:00:21:d7:e0:6b:db:a0:7c:d7:70:90:29:6e:
14:76:37:ce:42:ef:38:38:0c:a9:01:2d:e2:db:33:af:5f:cf:
5d:c8:c6:c4:42:70:3e:3a:6c:97:21:9d:76:3f:96:6f:e5:a7:
e3:c9:7b:e0:0c:34:83:ef:bb:d7:18:05:c8:f3:1c:a9:22:43:
01:b5:ec:03:93:8f:ac:54:08:30:46:7a:f1:95:70:8a:e1:11:
e4:ec:03:aa:a3:27:a9:ef:cf:23:44:81:a4:50:9a:0a:99:aa:
df:a4:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:23:27 2026 by rpki-client