Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: mjwfdK+NxelgYNnNn9iFPZodqrTFbyau+rnToyuv3n8=
Subject key identifier: 12:8C:D9:85:25:17:4C:0A:3A:EB:C7:BC:F2:8E:A9:51:91:2E:60:54
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 01A11AF59B3E1F1763E23BDC7C707E616DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 1288
Signing time: Thu 08 Oct 2026 10:01:05 +0000
Manifest this update: Thu 08 Oct 2026 10:01:05 +0000
Manifest next update: Fri 09 Oct 2026 10:01:05 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: o5H6TcdGMZzH5aErFXE3PPpaomvqsWxibQhog9+Q8Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:9b:3e:1f:17:63:e2:3b:dc:7c:70:7e:61:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Oct 8 10:01:05 2026 GMT
Not After : Oct 9 10:01:05 2026 GMT
Subject: CN=128cd98525174c0a3aebc7bcf28ea951912e6054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:ae:04:d2:36:88:ac:90:ec:e0:fb:85:3d:
da:30:12:33:fd:c8:f3:8c:14:e3:cc:5d:80:f6:c2:
0f:59:8a:82:9c:46:b3:12:64:11:2e:78:77:7e:5e:
c7:d2:15:24:1e:a6:98:f0:eb:4a:17:c5:3d:98:23:
02:a7:5f:78:b7:88:9f:63:a1:83:ec:f6:2a:33:6d:
84:26:30:2f:8e:6e:d2:36:65:ad:ff:95:a2:10:09:
36:70:56:c3:22:b2:0e:b5:61:db:08:24:ac:07:c8:
30:a4:33:07:df:c7:71:25:21:01:ac:4c:51:f9:0b:
4a:74:94:4c:9c:45:90:68:e7:75:cd:40:5a:a9:eb:
cc:a3:ce:7c:97:9c:3e:5d:52:a0:d8:c6:24:f7:2c:
03:7f:98:e3:31:24:22:e8:00:f3:9c:db:16:bb:21:
85:52:57:ad:d1:c6:fe:85:da:af:69:a6:91:9c:cd:
9f:fb:ec:30:77:bd:23:6b:68:db:0b:50:4c:61:5c:
40:86:05:2c:d8:06:26:d3:a5:47:c3:2e:97:a3:1b:
74:b2:52:2b:fe:9a:91:76:f5:ff:a1:e7:28:68:2a:
43:66:e8:41:0f:14:fd:6d:c9:29:37:55:d4:8c:a5:
10:d2:9d:73:6a:d4:88:2f:2d:b3:11:51:93:53:71:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8C:D9:85:25:17:4C:0A:3A:EB:C7:BC:F2:8E:A9:51:91:2E:60:54
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:69:5e:b4:c6:77:6d:15:e9:0e:d8:df:1b:87:97:4e:12:9a:
b1:6c:6d:23:3e:df:f2:28:48:10:d7:6c:a1:9a:3e:e2:27:61:
aa:8d:a3:2c:af:34:b8:53:26:54:5a:62:cf:f7:1e:0a:f7:54:
c8:28:51:a6:2c:ac:65:4b:0f:97:50:22:16:93:11:4e:93:55:
75:05:66:11:78:48:dd:c9:6c:12:84:2e:b8:9f:b0:5e:ba:44:
1d:4e:e3:69:9c:23:2f:33:e6:ad:98:01:b3:01:ac:52:32:a1:
ab:7f:9c:bf:27:ec:18:ef:8a:ae:07:bb:e6:11:e7:57:80:55:
ab:24:b6:6c:9b:31:4b:01:b7:ba:70:88:a7:77:ac:84:6a:b7:
25:41:35:67:2b:5a:1a:aa:2a:61:31:ff:d0:cc:41:fd:3d:98:
12:bd:2b:1b:27:b8:53:2c:c5:41:29:16:69:40:2f:b9:c9:6a:
b5:1d:1f:e2:e3:0f:10:e6:25:86:83:81:ae:bd:21:1f:45:23:
b9:e4:db:6d:94:20:24:b9:7e:6f:fc:2a:40:79:e2:49:6e:05:
59:99:2a:f0:18:55:9b:01:1c:93:75:b0:f6:40:de:cd:ac:d6:
19:a2:7b:4f:b9:e3:2d:98:77:ad:82:82:75:3a:38:38:41:53:
dd:3e:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:02 2026 by rpki-client