Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: tQEJJkW5HSYQcThS080EkRlPQk8OsUGyRc71bY2VS8I=
Subject key identifier: E3:64:CF:FB:C2:A6:B5:54:06:1E:D6:31:EF:99:9E:67:28:B2:97:25
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019D3865A8ABA0A68ED2BF9B12A13732152E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 1085
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: DsjMrn83GXd1MpSfuFjHMg+zZffRUeyfZ5ym1JCQZkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a8:ab:a0:a6:8e:d2:bf:9b:12:a1:37:32:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=e364cffbc2a6b554061ed631ef999e6728b29725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:d9:c1:6a:30:94:67:92:9b:d3:3f:9b:df:
1f:27:78:bc:53:79:cf:1a:d2:ca:cf:9a:cc:87:f1:
3e:eb:11:fb:7d:63:cc:c7:d6:44:f8:30:30:af:ba:
d8:3c:21:2d:69:08:c1:8d:c9:f6:87:6a:a7:a2:7f:
c3:cf:be:5b:29:d7:c9:7a:ce:b5:78:a2:0b:90:9b:
0b:72:58:a0:82:29:5e:b2:03:5b:f0:f4:27:e8:97:
ff:00:5e:9e:65:07:58:fc:4e:17:cf:b0:e0:f5:bb:
f2:df:0d:57:a4:af:94:d6:5f:4e:22:15:6f:1a:2d:
ae:1a:5f:cb:0b:e0:31:16:64:a0:c6:41:3c:7f:9c:
c2:8d:89:a8:1b:08:ef:be:4b:f9:b7:0f:be:17:e3:
93:60:4f:96:71:5a:d8:d4:fd:5d:88:69:73:42:86:
de:09:93:8b:45:65:e4:af:20:25:41:ae:1e:d4:88:
8f:e7:0c:19:fd:78:cc:c1:ea:2f:7f:0c:d4:88:89:
99:46:3a:5a:fa:50:d5:ca:24:bb:64:e5:55:24:43:
e8:6a:d0:2c:02:85:14:d1:3b:67:21:9a:1e:fa:70:
45:85:27:5a:a2:a6:fa:ff:01:ea:78:7a:3b:4e:96:
f1:a1:44:c1:90:fb:aa:5f:bf:e3:a0:4a:b0:a5:65:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:CF:FB:C2:A6:B5:54:06:1E:D6:31:EF:99:9E:67:28:B2:97:25
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:59:7d:a7:c8:29:5d:ad:fd:af:2b:11:a0:88:5a:fd:20:bd:
3b:64:32:e3:8e:1e:49:a9:a0:8f:8e:b2:95:43:e9:6a:66:11:
a0:ee:60:4b:a0:fc:46:7c:8e:5c:5b:92:dd:ad:65:57:73:5e:
49:38:90:a8:08:1d:2b:57:3b:bd:13:46:e7:79:75:c5:d7:da:
c8:72:b4:2a:06:53:58:c1:f9:4a:19:4c:f0:83:5b:f5:fb:82:
8a:b2:76:e3:fc:7c:d2:66:15:22:40:40:45:95:e4:2a:8f:7d:
69:93:a2:a2:47:88:b6:e1:fe:c9:a5:ff:0b:fc:b8:6c:53:50:
4b:7a:ed:0d:b0:d0:aa:26:da:f2:d0:5c:32:3c:0f:13:de:40:
c5:96:e2:89:f9:22:11:c6:3c:f6:a7:cb:45:c1:16:19:ed:24:
c2:0c:3a:8a:9a:30:51:20:46:25:30:3e:5f:25:a5:64:0f:f7:
8b:d9:1b:55:86:04:27:4b:17:45:00:bf:6d:38:ca:40:4b:8b:
8f:8f:e6:3a:85:0b:57:f2:20:c7:70:46:c5:7a:57:4b:b7:1b:
6b:30:63:92:fc:59:da:9f:5f:49:3e:26:b8:d7:1a:8f:b9:f7:
2b:01:30:70:cb:50:c2:78:6f:63:40:c1:fe:44:a8:df:62:d4:
03:92:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:15 2026 by rpki-client