Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
File: Sv9B3ejOR9Ry174skEhFBIwwqWA.mft (raw, json)
Hash identifier: Fyl+EZjAC6ONv/E2tQr9T94h0gZN58ciuOOex3K/XcM=
Subject key identifier: C0:D8:96:C8:88:E2:B4:D2:70:24:88:38:0F:93:EA:EC:F3:EF:1F:EC
Authority key identifier: 4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
Certificate issuer: /CN=4aff41dde8ce47d472d7be2c904845048c30a960
Certificate serial: 019D39AF156085FE7FBB6E9B8D5728A24AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
Manifest number: 0F
Signing time: Sun 29 Mar 2026 13:01:08 +0000
Manifest this update: Sun 29 Mar 2026 13:01:08 +0000
Manifest next update: Mon 30 Mar 2026 13:01:08 +0000
Files and hashes: 1: 64rZ1l1fxnqrXjonOeV1eeEvkjc.roa (hash: RKliE8vgwX94fwVvTWqD6n+wasJnNrBVuMdqT01fLuw=)
2: Sv9B3ejOR9Ry174skEhFBIwwqWA.crl (hash: 3kpCapqmLQb7CB8DN86cQrARulKnD17QEN/RsYhEMzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:15:60:85:fe:7f:bb:6e:9b:8d:57:28:a2:4a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aff41dde8ce47d472d7be2c904845048c30a960
Validity
Not Before: Mar 29 13:01:08 2026 GMT
Not After : Mar 30 13:01:08 2026 GMT
Subject: CN=c0d896c888e2b4d2702488380f93eaecf3ef1fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:14:4d:05:b2:91:c1:41:9e:d4:d6:0d:42:
14:f3:f0:c6:b7:af:ac:5e:6a:1b:33:f2:e9:f7:c5:
60:15:be:bb:d4:e3:5f:09:3e:91:c7:53:d8:1b:0f:
10:31:c8:b5:cf:94:19:a0:de:f3:04:06:ad:a2:cc:
ba:fa:d9:99:bf:e7:22:13:03:80:3d:dd:2f:40:2c:
ff:0e:1a:54:5e:2e:b5:92:d6:ee:2b:03:25:06:3d:
7f:47:cf:0a:9d:a7:16:34:3e:e9:25:98:70:fb:91:
34:d6:34:8e:12:e7:8f:63:06:1d:3f:d0:4c:a1:75:
c8:1e:dd:6e:f8:5d:92:5b:a6:0f:e5:eb:0a:3c:4a:
d4:fe:ab:c7:4f:1e:b0:f1:70:f7:69:80:d1:e3:19:
11:63:e7:21:a0:58:56:f2:64:0d:5a:4f:32:10:29:
20:f5:61:dd:ec:d8:20:e5:04:d5:73:12:8c:12:9d:
9c:df:cb:bf:b7:f5:5b:f9:84:f9:0f:20:35:f9:82:
7a:3c:c5:6b:32:ab:06:7d:50:44:b1:7a:cb:c4:c1:
a7:14:3a:b3:b5:50:33:db:02:9b:6c:8c:92:10:8e:
e2:e2:b7:ac:94:29:38:42:85:00:a9:3b:97:c8:15:
0c:a8:91:ce:7f:e9:e6:4d:2a:93:40:d0:7b:79:4f:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:96:C8:88:E2:B4:D2:70:24:88:38:0F:93:EA:EC:F3:EF:1F:EC
X509v3 Authority Key Identifier:
keyid:4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:b2:0a:7d:2c:0c:47:31:28:c6:20:04:7c:73:53:2f:1d:
5e:82:d4:36:1b:92:e9:e9:c4:aa:a1:de:d4:df:44:d0:2f:6e:
04:03:3f:9b:ba:b6:72:6d:5a:6b:12:84:54:3b:fe:38:50:5f:
14:e7:c1:1a:24:61:44:9e:c5:ed:bf:91:0d:6e:0d:4a:00:58:
94:f3:b7:16:af:4e:43:8c:ff:52:25:73:95:6b:7e:32:dd:24:
76:47:2b:3e:f1:6d:cf:a9:dd:04:05:14:85:c5:57:df:6e:d7:
36:55:68:15:f9:da:f0:ad:c5:8b:e0:f1:e3:f5:18:2a:8c:e9:
c9:2a:66:64:c3:35:e3:2f:fe:65:b5:27:2d:c6:56:d3:8b:9e:
da:44:6e:eb:42:57:2c:d6:ac:5f:6f:e1:cb:60:02:f8:07:0b:
38:e4:0d:61:09:35:1c:f3:5a:74:d6:76:b1:ef:8c:5a:75:bf:
6a:ff:3c:96:f3:25:f3:3d:42:68:df:e7:de:7e:1d:f3:dc:16:
eb:6a:b0:77:b0:67:36:e3:ab:98:fb:c3:2e:6e:a7:3b:c5:56:
55:6e:ab:76:ec:5a:50:7a:f9:87:f7:ce:c1:33:92:3d:68:4a:
fa:0d:2f:ee:67:ed:9a:aa:7c:90:bd:6d:2a:cc:86:21:1d:4d:
46:f8:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client