Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: 5R3jFh28FhnEqxo7K3+tW5Nb9PWibdzN2S07T53YSoQ=
Subject key identifier: F8:51:64:32:3B:22:13:79:A3:29:8B:9D:5C:74:8B:FB:17:14:23:25
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 01A002F00AC65898A18A422446E8B2D5B805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 11F7
Signing time: Sat 15 Aug 2026 01:01:20 +0000
Manifest this update: Sat 15 Aug 2026 01:01:20 +0000
Manifest next update: Sun 16 Aug 2026 01:01:20 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: Mn6NBtxH5+UyodZu7NlN2gbTyZ6it2A92TqsxDkl6EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:0a:c6:58:98:a1:8a:42:24:46:e8:b2:d5:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Aug 15 01:01:20 2026 GMT
Not After : Aug 16 01:01:20 2026 GMT
Subject: CN=f85164323b221379a3298b9d5c748bfb17142325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:f3:e3:eb:cc:56:90:1d:25:9a:9c:63:03:
df:21:b5:ca:49:43:7f:d0:bc:fe:b3:15:82:d3:e3:
12:f7:00:2e:f8:64:dc:16:45:b7:35:70:5b:7a:04:
41:90:9d:cd:a4:74:7d:5c:49:af:a1:84:68:ea:09:
d2:18:22:46:16:66:70:7e:62:e7:4f:51:a0:2f:d6:
51:5d:c8:21:08:62:70:a4:ff:e3:cc:0c:cb:5b:4e:
08:4a:29:c4:03:a0:b6:11:cc:64:e8:69:97:c9:58:
7b:fd:6a:c0:80:a9:d4:52:a3:2a:99:7a:13:28:bd:
ea:79:54:69:3d:f7:e7:15:c5:3c:bb:9b:8e:79:8d:
12:a3:66:51:89:42:04:83:ca:92:b3:aa:1c:bc:ea:
c9:0f:69:58:0b:ff:27:67:61:e6:07:83:e1:4d:5d:
87:12:e8:68:26:c1:fc:72:b2:39:42:0a:62:0c:25:
2e:d5:b9:c9:7f:fb:93:de:75:06:a4:a2:e4:7d:dd:
ba:d6:02:36:8f:b8:7a:86:db:47:11:ea:84:3b:b0:
8c:46:a9:22:7b:83:64:64:a3:08:fd:f0:cc:c0:e7:
e5:b6:6e:2a:9c:7c:30:4a:e4:27:32:0a:ec:de:55:
0d:97:c8:01:57:d6:8d:3d:d3:35:fc:33:19:21:2f:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:64:32:3B:22:13:79:A3:29:8B:9D:5C:74:8B:FB:17:14:23:25
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a0:39:87:e4:84:b2:f3:35:24:9e:c8:08:d5:58:51:53:56:
4b:0c:26:0e:b2:1b:b2:09:27:67:8b:7a:50:24:db:04:65:14:
3c:1b:2c:0e:63:e5:01:50:b4:35:72:28:78:01:99:ed:af:85:
0a:1a:63:14:2a:7f:84:2c:ec:3d:13:9e:77:59:16:fb:a9:42:
d8:f0:f9:68:ae:3e:f4:07:4e:77:a2:1a:79:5d:ef:b4:99:db:
be:26:85:51:f5:d3:6f:da:f9:6e:4f:21:28:e9:24:48:58:0a:
f6:fb:b8:59:c1:a3:91:b7:01:c3:4e:9c:c6:d0:92:49:ed:93:
06:d9:23:77:16:57:98:a3:24:23:a9:e4:51:39:fc:88:3d:30:
25:12:05:c9:58:e2:2f:c0:14:58:0f:8e:77:2c:84:32:90:c5:
db:a7:ac:79:4a:54:76:82:80:da:9c:e1:ad:95:79:d7:65:72:
90:87:ae:08:7c:7b:a1:62:4c:d1:69:51:d5:e9:df:92:ab:0b:
cb:9c:d8:e0:e1:cd:97:bd:b8:d9:d1:9c:54:14:58:28:ab:a8:
bb:ed:61:a0:08:72:2d:1f:61:a0:89:04:17:2f:23:8f:75:73:
cc:8b:f2:f8:67:7e:22:04:f0:0d:b0:4d:37:f0:ed:4d:1e:41:
f3:90:54:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:44 2026 by rpki-client