Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: V/k2bwhLpGqeDrEXf8YRSDuqPzZuRg8PocHIFnKtWnA=
Subject key identifier: 1F:6E:EF:92:DB:FD:E9:B3:51:8E:F1:AA:43:48:BA:B1:6B:07:4B:6D
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019D3865DFE609F50D5903647AA10423DDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 09D0
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: A81HSw1zJIhtK1hn9MLeR+zE6u/1bkHTQ3KYMN+d7eI=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:df:e6:09:f5:0d:59:03:64:7a:a1:04:23:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=1f6eef92dbfde9b3518ef1aa4348bab16b074b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:9e:71:2c:39:b4:f0:3d:3f:f4:89:b9:38:
87:63:35:f0:d7:54:51:ad:ae:f7:9a:a6:24:77:ab:
69:36:3d:21:82:f9:50:8c:de:57:cc:62:e1:e6:cb:
9e:33:4c:d5:9b:39:a1:54:c9:8e:45:8c:c0:1a:c1:
55:5f:96:b5:48:36:e5:b5:df:2a:a9:4a:cf:29:aa:
e7:01:36:a3:cf:b0:59:bf:80:0c:ec:a1:57:47:c0:
9f:06:3f:64:fe:b3:e5:04:cb:b5:6d:eb:fa:3b:d3:
14:8f:b8:fe:1b:61:2e:1d:6a:7c:f3:3b:04:fe:72:
18:78:f8:77:e2:97:45:e8:28:8a:f6:47:cc:cf:87:
54:de:de:26:86:be:68:7e:df:b4:2e:4b:ab:52:25:
d2:d4:98:b4:40:8f:3f:de:c4:e7:fc:63:3d:e6:e8:
2c:b1:00:2e:0a:2f:dc:74:27:e2:5f:98:c8:33:68:
da:cc:85:a9:5b:67:0a:7a:64:8e:62:bc:c5:bf:8f:
5e:3f:27:28:c1:a0:4e:58:4a:0b:31:05:b8:cf:71:
ee:7b:ff:bb:d5:15:ae:e1:33:d3:0a:f4:31:bf:02:
e7:b1:1e:c1:45:0f:4f:9d:68:76:c0:50:34:52:d9:
c1:2e:ba:37:6a:41:a8:b3:14:09:c5:e5:eb:ab:c3:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6E:EF:92:DB:FD:E9:B3:51:8E:F1:AA:43:48:BA:B1:6B:07:4B:6D
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:67:31:50:cf:ed:33:f4:70:10:c6:1f:68:cc:73:92:a4:
ed:d7:1d:42:9d:be:31:ca:92:a9:88:59:34:cb:48:1f:02:12:
be:a9:eb:2b:ef:d1:16:3a:7a:eb:53:13:bb:98:9a:b9:87:dc:
88:de:a7:a9:69:0c:35:8e:ad:5e:4b:3f:b5:ec:3f:fc:70:9d:
ef:50:5d:cc:f7:0d:8a:e5:00:38:5d:43:c3:5a:88:49:34:ee:
01:a1:6c:0d:d3:66:04:09:b4:6a:06:f6:bf:c3:ca:64:0b:d7:
8f:cb:8d:d8:11:3a:2d:e7:42:6c:7a:9f:3d:9f:02:e3:db:13:
9e:de:ce:51:1b:a5:aa:66:49:82:d0:cf:7a:be:0f:5c:ea:1d:
fa:99:83:a1:26:1e:4c:83:45:75:bb:92:c6:e1:f8:97:43:c0:
b5:e6:32:ba:7d:5b:f4:d9:60:e0:c2:b2:30:69:e4:25:e4:e9:
5a:0d:e1:b4:f0:a8:e2:71:dc:02:b3:ad:0c:e1:aa:91:94:39:
be:76:ea:68:62:b4:02:8e:f5:89:f9:bf:67:dc:af:c3:10:cb:
25:b6:7a:8f:da:a8:63:fa:f6:57:1a:c0:f9:c7:40:da:c9:50:
84:73:f9:5e:b2:6b:c0:c5:7c:ab:bc:32:20:71:98:9c:0b:30:
db:bd:ab:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:37 2026 by rpki-client