Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: MSnjrIIpjZMGLt9KHJ1ivgK+eRIGrU52qX8PIyiUWng=
Subject key identifier: 59:2C:4E:69:4C:B1:E0:24:E2:61:78:00:12:75:F5:31:EB:4E:F4:5B
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019E1E35EED4290BD3C3379B7B01F8D92FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0A47
Signing time: Tue 12 May 2026 22:01:51 +0000
Manifest this update: Tue 12 May 2026 22:01:51 +0000
Manifest next update: Wed 13 May 2026 22:01:51 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: ciBLQeHRGIVvht8MGrdaydwHp5te9fJYWaybL+lIKRY=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ee:d4:29:0b:d3:c3:37:9b:7b:01:f8:d9:2f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: May 12 22:01:51 2026 GMT
Not After : May 13 22:01:51 2026 GMT
Subject: CN=592c4e694cb1e024e26178001275f531eb4ef45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:60:09:91:66:ab:50:b1:2b:9d:ee:e2:68:
84:bc:51:ed:4e:96:7e:53:88:6e:70:e7:bc:92:13:
3b:ca:15:69:47:31:58:b2:a2:ef:7a:eb:8e:fc:ee:
82:65:50:9f:6e:ee:66:7f:1e:2e:5d:9d:ce:44:6d:
59:67:ca:52:ed:b8:62:f8:d1:fe:90:37:bb:57:f5:
f1:a5:6d:1c:b2:62:63:7c:d3:91:4b:40:08:4c:0d:
c0:16:5a:44:ac:15:c3:71:83:d2:9d:f3:e9:af:19:
db:f6:12:e4:83:9e:00:3e:4c:46:72:12:34:65:dd:
52:cf:b8:ee:66:32:14:01:51:ce:50:2e:6a:93:8b:
da:08:24:8c:92:08:0e:ca:ef:b5:88:ac:2d:c5:eb:
b4:9f:61:1d:90:9d:61:30:cb:65:c0:1b:ab:c9:67:
1a:e2:3f:24:6f:6d:67:82:6f:a2:f6:ee:84:16:39:
26:3d:7c:08:3e:e7:a9:e9:8b:d9:30:79:90:94:24:
21:2b:16:e2:17:59:68:d4:03:5a:76:8f:bc:e6:ee:
3d:78:a2:05:a2:e1:e2:85:9e:a1:2e:ee:c4:f6:19:
87:ea:f6:0e:a2:94:ea:37:23:bb:e0:9d:02:3a:86:
ea:fc:49:f6:92:9e:63:8e:bb:ac:ae:dd:2a:b7:e8:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:4E:69:4C:B1:E0:24:E2:61:78:00:12:75:F5:31:EB:4E:F4:5B
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:06:c8:c7:b6:6b:9b:d2:f1:9d:14:2a:5e:79:bf:11:91:
34:08:e0:c3:f0:53:b9:5b:13:a5:d0:bd:e5:72:f9:fa:ec:da:
6d:8d:88:f9:b3:12:9e:51:18:d2:e0:10:a8:94:82:bd:df:40:
88:a3:6b:70:b0:da:c9:d3:21:d1:42:6e:33:a7:3c:a2:3f:c0:
d6:91:22:bd:78:89:c8:09:a0:13:67:14:b1:b5:1f:51:7e:f7:
6d:23:8e:49:d3:56:75:a8:c5:49:e6:e2:b4:81:83:b2:b1:7b:
57:58:22:a4:e7:98:c5:02:24:4a:76:89:f2:d6:e4:04:e8:8b:
6b:f6:76:5f:99:93:96:d3:6f:2d:ab:63:e4:3e:f4:b8:23:01:
1c:73:65:bd:fc:d1:62:00:0f:7a:b4:e8:3c:47:91:3a:44:f5:
8e:16:c8:d9:63:cb:c4:df:6b:7b:12:80:d1:5f:a4:52:b7:ab:
ff:29:fa:ef:4d:05:f1:c3:6a:12:aa:36:49:08:48:0a:f0:c4:
42:7c:2e:e6:aa:ad:85:53:eb:40:89:34:65:9f:d4:a1:e1:20:
e6:4e:f2:92:32:81:1e:53:dd:e7:23:a8:1c:c1:61:50:c6:c5:
cd:f5:1b:d2:33:b6:f0:86:76:12:ad:05:bd:73:fb:fb:bd:6d:
36:bb:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:52 2026 by rpki-client