Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: Ob/fsJiwk3ShO09wOUcVl+Ed3vGgxX+oppLmF+eYrW8=
Subject key identifier: 31:DC:DB:C7:41:6E:82:79:ED:3B:5F:70:5F:19:C5:4D:2B:45:D4:B2
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019E2BBA02F01D02FD9E03CEDD948B7A420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 1103
Signing time: Fri 15 May 2026 13:01:11 +0000
Manifest this update: Fri 15 May 2026 13:01:11 +0000
Manifest next update: Sat 16 May 2026 13:01:11 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: edWujINrXt02xV7XP49surZZAOC7/sSWZ5Ri53Djju4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:ba:02:f0:1d:02:fd:9e:03:ce:dd:94:8b:7a:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: May 15 13:01:11 2026 GMT
Not After : May 16 13:01:11 2026 GMT
Subject: CN=31dcdbc7416e8279ed3b5f705f19c54d2b45d4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:bb:56:58:8c:1e:ff:e0:e2:91:2c:d5:f1:
70:3d:fe:49:17:18:8a:ec:4f:3b:d4:bd:cd:f9:f9:
f0:c1:c5:8c:51:01:fe:54:72:a4:86:04:06:63:40:
4b:d7:98:3c:74:b5:0a:5e:0c:0d:58:c2:84:5a:80:
38:4a:45:02:3e:e8:23:8d:38:4d:a2:05:7c:16:ac:
ad:24:b8:f5:dc:06:0d:69:1c:9b:77:88:68:01:33:
4b:7b:87:d7:55:3c:10:c9:da:b0:5c:86:37:3f:10:
b4:34:ac:e4:b0:6e:c9:eb:fb:c6:ae:c6:35:10:84:
d5:cb:38:64:ee:41:18:0b:03:88:06:99:6e:a3:15:
ed:a7:e4:d0:97:e5:c1:75:df:46:f1:00:c2:fc:65:
f7:b2:49:9e:b2:01:0d:c6:fa:dd:00:2d:ba:c0:29:
fa:37:16:dd:ed:10:d1:48:71:0c:61:97:74:cd:07:
fe:79:1e:65:7f:42:27:92:4f:9b:de:fc:0a:42:8c:
98:b4:e5:ab:a1:88:d8:b2:68:15:a5:67:e8:54:c8:
f0:57:21:17:96:f6:9a:1d:9f:91:ee:fa:dd:5a:66:
b0:5e:0d:81:85:4b:48:6b:1b:39:d7:08:0a:21:bb:
b3:c3:f7:50:0e:49:d7:ef:30:65:23:ca:d7:a5:67:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:DB:C7:41:6E:82:79:ED:3B:5F:70:5F:19:C5:4D:2B:45:D4:B2
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:36:b5:b5:69:0b:b3:be:44:e2:bf:94:4f:23:04:af:c4:63:
a5:83:1f:4e:f1:bf:0a:6c:5a:72:57:e1:9c:41:e0:e8:8c:ae:
78:c6:5d:fe:81:5a:34:1e:b8:3d:4a:69:d2:3c:22:43:b4:e5:
95:76:da:3a:0e:31:40:45:11:f3:26:21:51:19:83:db:da:30:
01:44:76:c7:b1:b2:0c:95:a2:db:11:d2:a9:82:68:33:99:8d:
6a:04:02:d6:a5:03:61:fb:7c:70:2f:a6:31:85:96:54:04:9b:
be:8b:45:16:e9:3e:46:43:0a:72:90:77:e2:92:03:45:51:b0:
11:01:7c:37:60:38:f2:ce:14:de:9a:cd:3d:43:c0:b7:c1:54:
4b:7b:38:7e:45:da:82:05:d8:5c:cd:e1:23:5a:03:63:06:a0:
05:ff:bf:54:23:e1:bd:bb:16:3d:35:47:9f:93:ec:b6:34:99:
aa:0d:3b:3f:d1:e9:04:6a:32:97:6c:ae:66:50:42:de:0b:d4:
93:25:3b:05:c0:d0:41:46:59:2c:bd:33:15:96:e9:c4:5c:f2:
45:61:e3:d1:fe:a0:0a:b4:f6:bd:94:c6:bb:8f:bf:69:7d:ba:
7d:1c:bc:66:c4:ff:c6:6e:a0:1c:51:af:b5:53:93:26:7c:04:
52:ef:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:02:56 2026 by rpki-client