Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
File: S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft (raw, json)
Hash identifier: KABrCbS0gy0ePhHa8JxZHgsdIaPcAXM0/rE+ogAOuLM=
Subject key identifier: 81:C8:37:D9:60:15:33:53:06:9C:FE:CA:4B:43:2B:6A:83:AC:7B:85
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 01A11598822027FD18582E0F9627B1460DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
Manifest number: 0109
Signing time: Wed 07 Oct 2026 09:01:18 +0000
Manifest this update: Wed 07 Oct 2026 09:01:18 +0000
Manifest next update: Thu 08 Oct 2026 09:01:18 +0000
Files and hashes: 1: 2g3g_d2cbfXZVdPZvllR7ko9tq4.roa (hash: qrpCT5b4Pl5PHRJkUsaii3h3DkJ//XJSoI+D6opqI3Y=)
2: DZRRAdctSa4CVUBsnqANHKo8DbA.roa (hash: dNAFaUwzL63hmLrib+niPT9WNwhu3ti4JBM4gbkcCtk=)
3: S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl (hash: ucFdUdDEgtcMcGhu7y9j+U+oGT2kYU4gVjh+hJ0P6nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:82:20:27:fd:18:58:2e:0f:96:27:b1:46:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Oct 7 09:01:18 2026 GMT
Not After : Oct 8 09:01:18 2026 GMT
Subject: CN=81c837d960153353069cfeca4b432b6a83ac7b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:18:8c:5f:3f:99:b5:f9:7d:76:1c:c3:34:
5c:09:1a:a8:3c:be:38:0f:a3:d8:13:5a:19:a3:5c:
66:e0:fb:a2:7c:49:99:07:f2:e4:42:9a:33:c9:ca:
29:71:dd:3d:90:4a:b3:72:3b:d4:4e:14:9b:80:d1:
5a:82:db:ac:5e:f1:98:5d:d8:57:89:b8:0c:41:49:
ca:7c:31:3a:59:55:70:d7:d0:56:7e:f1:7e:aa:7c:
6d:ca:7b:0a:7a:67:48:ca:45:11:55:ef:7f:7c:4c:
f3:ea:ef:8a:59:64:ec:8d:20:36:a0:a4:0b:8c:eb:
82:32:b1:ad:17:9f:84:ac:e6:91:d9:a9:17:5a:b4:
64:a4:40:71:05:5f:06:2f:10:22:af:f6:87:35:82:
98:4a:22:aa:09:e8:31:b3:45:7e:a3:47:6a:ae:6b:
9a:92:2c:49:60:26:f3:8c:52:b7:c5:19:d7:2d:f2:
98:c2:d1:c1:a5:01:4e:f9:a9:e9:73:11:b5:8d:f0:
2d:00:0b:58:dd:49:68:c7:ba:67:69:c9:40:b5:ea:
76:29:e9:96:5f:e5:44:d5:1a:87:3c:ca:57:c4:5a:
a2:56:ba:07:77:41:91:e8:ae:9a:6c:02:3d:f8:6a:
0c:c4:a8:db:07:a9:eb:bb:4d:69:56:51:55:10:ca:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C8:37:D9:60:15:33:53:06:9C:FE:CA:4B:43:2B:6A:83:AC:7B:85
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:28:3c:4a:fd:3f:32:a4:c4:ff:7c:6e:00:8d:a2:c6:ed:b7:
2e:3b:bd:84:7e:5b:fd:b4:6b:2e:70:f1:87:dc:1b:8a:23:da:
84:05:e8:6f:0c:e2:6e:d6:58:c6:ca:aa:bf:83:f1:12:f5:55:
83:ac:eb:25:ed:29:47:d8:fa:04:56:39:65:1e:18:ca:ca:a8:
d3:d4:33:27:b7:f7:f9:de:3f:23:64:43:7d:42:a8:ee:32:b2:
32:8b:00:b2:fa:9e:45:59:a9:68:e1:1b:b6:a9:f9:a7:e2:ee:
88:d3:72:ba:18:e5:f3:2c:89:b0:a1:4e:26:9b:5c:eb:96:3e:
3e:ca:33:f9:77:25:e6:6e:26:01:05:fa:75:8e:96:a3:4f:98:
e5:51:7c:6e:6c:2a:74:4c:c7:52:a4:1b:45:77:62:57:db:26:
e8:f3:c6:73:58:05:62:bd:39:0d:b5:61:5a:43:5e:8f:01:7a:
85:63:a0:27:95:e6:44:6d:d7:f2:c9:15:eb:52:a4:14:52:b8:
f4:68:ac:f4:d4:1c:91:3d:c6:4e:a5:d2:98:fa:1e:b9:95:fb:
b3:6e:ac:18:68:97:dd:1f:15:f9:f0:bf:44:d3:d6:3a:7f:90:
98:7b:8e:a5:64:63:80:ab:2a:cb:29:39:c2:f2:db:43:1a:1d:
6c:40:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 12:16:14 2026 by rpki-client