Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: HTyic1FM5hTsi/HriovzwZdIQGR91/h57Gfsdys2kaE=
Subject key identifier: D4:98:98:7A:F9:20:46:28:EA:50:CC:97:1E:8B:3B:96:45:D7:40:D9
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 01A10F5F3CCA7153FA53E4BA81FBD4AA9805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0BCD
Signing time: Tue 06 Oct 2026 04:01:01 +0000
Manifest this update: Tue 06 Oct 2026 04:01:01 +0000
Manifest next update: Wed 07 Oct 2026 04:01:01 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: pBrLJTSViy6nN9a0C7guMoEBWPKCg4VnukIBt2T2LvI=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5f:3c:ca:71:53:fa:53:e4:ba:81:fb:d4:aa:98:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Oct 6 04:01:01 2026 GMT
Not After : Oct 7 04:01:01 2026 GMT
Subject: CN=d498987af9204628ea50cc971e8b3b9645d740d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:2e:5c:25:d7:bc:8e:61:6d:69:3a:4f:df:
7e:4b:dd:e9:4a:7c:2c:3b:c2:39:1e:1d:71:74:99:
97:eb:07:e5:6e:20:79:2e:9a:f6:c6:a6:7c:0a:51:
9f:89:38:66:d9:cd:3f:19:a5:eb:49:92:e6:f7:f8:
16:96:43:3f:ea:49:38:7c:ee:5d:ee:27:b3:b7:6c:
5e:ed:71:71:3d:df:b5:f4:cc:b5:29:1a:08:9c:b8:
d3:65:0b:6a:c1:05:ac:35:fa:14:d5:a1:3d:09:69:
22:50:61:48:4a:9d:b4:6f:43:f8:81:20:e4:6d:1e:
20:4e:9a:cb:99:58:4c:91:8d:dd:0c:45:6e:2f:ff:
ea:cc:82:88:aa:31:53:7a:00:43:78:40:40:03:28:
ce:51:8b:9c:4b:b8:d0:5c:51:52:61:cd:bf:62:08:
80:fa:c5:69:85:1e:80:51:42:7d:95:53:3e:23:95:
ba:26:94:0d:51:98:99:bf:24:cc:bf:11:19:5b:ff:
04:04:74:1c:4f:a5:8c:6f:e7:b9:84:9a:df:d4:30:
37:77:a2:cc:1b:7e:e4:08:4a:85:0f:7a:03:cf:40:
46:47:65:fd:1b:5c:db:08:7e:dd:ef:db:fa:e2:82:
97:d3:2e:a1:83:2a:62:4d:6d:6c:be:54:98:fa:7e:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:98:98:7A:F9:20:46:28:EA:50:CC:97:1E:8B:3B:96:45:D7:40:D9
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e2:d6:17:55:7e:68:ad:e1:d0:bb:a0:53:3f:cd:c2:f9:8d:
ef:37:1e:09:23:df:04:c4:ef:d4:5c:b5:ce:59:84:6c:52:36:
34:dc:0c:31:08:72:5b:c7:92:c1:dc:c4:68:0d:1e:07:39:6f:
f9:8a:91:d1:08:e3:6a:fb:95:22:fb:18:8f:23:06:55:4c:04:
f9:cc:97:27:7f:0c:33:b8:0e:63:0f:14:07:fe:c1:60:cb:56:
32:ff:55:b3:d6:c5:8c:2f:fe:06:1a:c5:8e:00:d3:8a:ec:2e:
7d:db:ea:78:b7:7f:27:56:e0:8a:53:0b:ee:84:64:b6:11:45:
7b:ae:6b:e7:1e:50:09:c1:16:1a:bb:0f:9d:34:4e:cd:69:f4:
9f:f7:24:f6:bd:9a:ee:55:5c:f1:a6:a6:a4:24:53:74:56:3f:
a4:c1:de:93:3f:87:63:22:a1:6e:78:93:b0:6d:a7:82:1c:26:
cd:7c:51:d7:38:ea:36:9b:bb:fd:55:c0:5b:3d:69:0c:d7:c8:
2f:c9:a3:e4:5d:04:e1:a0:6f:ef:67:93:9f:bf:59:88:9b:64:
a7:91:f5:c0:ae:98:d6:a3:ea:d6:b3:03:5b:08:40:0e:bf:a8:
5a:7b:c7:b7:5c:21:30:a2:a3:43:fe:55:a5:8d:e9:ed:c6:f2:
7c:2b:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:54:51 2026 by rpki-client