Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: zw8YEqIoUa8nbJo8LhxnKtScyD/c44zM3QZpaoueD+g=
Subject key identifier: B6:1B:44:18:A0:05:20:3C:F1:52:43:9D:F9:3E:C2:C8:BA:B9:ED:6E
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019E31851C796E232CFA9A9C8B92694E8431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0A51
Signing time: Sat 16 May 2026 16:01:07 +0000
Manifest this update: Sat 16 May 2026 16:01:07 +0000
Manifest next update: Sun 17 May 2026 16:01:07 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: VER6ey+DoM5oHtoLtV0XmqMsVJGz6OpIEvsGEgWVb74=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:1c:79:6e:23:2c:fa:9a:9c:8b:92:69:4e:84:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: May 16 16:01:07 2026 GMT
Not After : May 17 16:01:07 2026 GMT
Subject: CN=b61b4418a005203cf152439df93ec2c8bab9ed6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:6f:07:09:98:a2:ba:29:a6:03:a9:31:07:
25:28:10:3d:fe:d8:49:b1:dd:90:b7:ca:ba:d0:43:
2f:2e:c9:d4:44:e2:e5:ab:51:8a:53:c0:c6:be:fa:
f1:b8:06:b3:3e:e8:14:65:d1:2b:80:49:0f:3a:13:
3c:7f:c9:0d:9e:6f:24:75:78:95:d8:92:b0:24:a2:
a7:24:6d:1a:30:c4:a9:6d:9c:73:b6:b1:f5:23:7e:
2d:c2:d6:fd:c1:88:26:56:ab:5a:21:37:67:72:78:
ea:13:64:31:4e:c8:cf:27:4b:76:5c:e5:c3:1a:a6:
f6:87:9b:5c:7f:fa:19:48:ba:f9:26:de:76:f0:c0:
19:8c:8f:b0:9b:83:79:90:8b:5c:64:0e:f6:81:49:
6d:0c:ab:31:87:41:94:cd:c8:b7:f4:a2:3e:e4:46:
8a:3f:3c:b0:a1:00:9b:10:d7:2b:f3:e3:cc:a6:a0:
c1:cc:e0:61:34:80:6a:7f:11:be:3d:7c:72:b2:a7:
9e:b7:18:56:73:5e:56:b4:5c:79:f7:fc:00:68:d7:
d2:c7:a3:c7:53:28:46:4b:e3:71:2e:3f:2e:8d:47:
93:7c:c7:d6:97:ac:9a:28:1a:1e:d0:b5:2a:87:f2:
d5:6b:55:6e:93:e2:3a:85:22:d7:c5:0c:44:a6:ac:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:44:18:A0:05:20:3C:F1:52:43:9D:F9:3E:C2:C8:BA:B9:ED:6E
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e5:ed:94:a7:3f:36:83:70:80:31:ea:69:a7:25:5d:0d:0c:
ab:21:bd:34:aa:50:5b:ab:2b:02:0d:97:1e:bd:e1:94:c2:f7:
6b:d8:94:ab:22:95:54:d9:2a:ab:39:63:bb:1b:fb:65:c7:5e:
1f:aa:30:5e:57:0c:0c:19:87:07:36:5e:2e:74:43:a7:27:3b:
93:f3:0c:d7:cc:cc:68:87:76:30:dd:f7:43:bf:08:d1:85:e4:
3b:f5:3b:1d:bf:b9:13:b2:d9:eb:3c:55:7a:e8:0f:f3:5e:36:
4d:15:5e:21:29:45:03:25:39:2b:b2:0f:e3:21:47:6e:34:f5:
48:10:63:c3:3b:a2:84:ca:f4:d7:17:2e:a1:b0:06:7a:8a:5f:
a7:06:64:20:bd:77:ac:bb:15:9a:3c:5f:cc:4a:bf:00:e6:b1:
51:83:14:d7:3e:c5:5f:a1:7a:15:e8:1c:b1:eb:3d:f6:8e:3c:
ee:26:55:7e:68:2b:0b:25:5a:ce:6a:22:0c:85:3c:cb:ee:90:
62:92:30:55:74:95:dd:d3:dc:75:cb:e3:a2:bb:9e:07:db:41:
6b:ac:06:fc:d7:8f:ac:de:4d:76:ae:29:fd:42:b5:27:34:dd:
1f:b9:03:62:6d:0b:f9:e6:1e:f4:8a:7f:1a:a2:e0:47:d6:55:
22:30:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:19 2026 by rpki-client