Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: k4zFMXEBLRjkxwb3qNdPQSm1ZXvtWBLTCpLZ2Yb+2ZI=
Subject key identifier: E2:3B:14:D6:EA:7E:1D:3F:05:27:BD:4C:C0:5A:FA:CF:9F:D0:09:8C
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 01A0D94CA7E703775F116C1DA6598105A08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 1266
Signing time: Fri 25 Sep 2026 16:01:14 +0000
Manifest this update: Fri 25 Sep 2026 16:01:14 +0000
Manifest next update: Sat 26 Sep 2026 16:01:14 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 0qZMn/GsoThLPn6qMKUK+cgtY4FKXGMUtGEGJf9JpJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:a7:e7:03:77:5f:11:6c:1d:a6:59:81:05:a0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Sep 25 16:01:14 2026 GMT
Not After : Sep 26 16:01:14 2026 GMT
Subject: CN=e23b14d6ea7e1d3f0527bd4cc05afacf9fd0098c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:cb:a7:64:6a:b9:04:67:3b:66:03:49:56:
f7:15:1d:4d:02:4b:65:77:91:c6:d5:1c:4e:bb:90:
8c:9e:80:41:7c:d8:ce:e1:be:ac:7d:c2:c8:c3:db:
65:bb:d7:f1:9d:39:76:7b:d7:30:c9:83:bc:61:b4:
3d:4f:bf:be:ac:f5:83:54:53:a6:fc:82:08:7d:dd:
5d:6a:77:9d:fb:77:4a:5d:c0:c3:8e:92:5c:5b:63:
54:86:17:cc:bb:3f:58:38:a2:8b:3a:be:ae:2c:c1:
bd:9b:60:b9:7d:dd:02:13:c0:93:be:92:be:2b:51:
89:5a:01:29:76:ff:33:26:20:f4:fe:3f:b3:c9:f5:
88:44:6f:32:55:3c:6f:0d:a6:66:ff:d3:da:57:f7:
a3:d0:fe:83:d5:3d:32:df:ec:ac:f1:22:18:d7:70:
fb:dd:14:ee:06:0e:8b:14:75:ac:06:b5:99:c6:47:
83:db:e1:d3:3f:6a:ba:a3:2c:1d:37:04:ac:81:03:
95:63:08:7e:90:09:25:a9:4f:b2:3f:2d:bc:ee:88:
7b:b0:a5:06:91:21:8b:e8:13:56:da:b8:68:c3:68:
aa:00:1b:03:dc:40:82:9b:1b:c1:a5:00:70:ca:1a:
f0:12:91:12:5c:12:ea:04:d7:f9:d0:20:34:a2:39:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:14:D6:EA:7E:1D:3F:05:27:BD:4C:C0:5A:FA:CF:9F:D0:09:8C
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f7:56:34:20:d9:b6:58:f5:39:34:7e:76:79:ef:4f:75:d7:
3f:d9:cc:a8:22:df:f3:d3:2a:cf:0f:1a:43:f0:ce:63:0d:13:
8a:0f:3b:5f:eb:ea:d6:14:62:ce:0b:0f:6c:6e:64:1a:9f:80:
83:7e:e2:dc:41:bc:d0:85:ef:57:5f:ee:76:40:f0:81:9c:e5:
27:1c:3c:76:f7:03:87:cb:0c:e4:29:77:e5:03:ee:d8:1e:1a:
35:b6:18:11:7b:7b:1d:16:96:a9:e1:4d:c9:ed:bc:f7:8c:32:
ac:71:27:41:8d:54:33:3d:0a:11:7f:6e:a8:6b:cb:2a:53:ed:
bc:7e:4b:54:2f:cb:53:c4:04:3f:83:d7:23:92:69:9d:63:ea:
b4:f4:ce:b3:e2:d0:79:00:3f:46:ef:16:3b:f9:8b:9b:a5:eb:
da:1d:1d:85:01:85:c6:fc:57:45:b7:a1:a5:ef:1d:33:f7:c6:
76:26:49:b6:5e:ec:15:09:57:68:a6:86:c7:9a:2a:90:dd:1d:
22:50:41:bd:38:11:27:5e:e5:40:c7:0b:70:3a:07:a8:1a:18:
62:f3:78:cc:43:8f:c0:5e:6f:fb:05:7f:62:2e:8c:6a:b5:c9:
c2:84:ec:47:bc:fe:63:9e:da:64:67:74:11:cd:20:43:2a:a7:
50:bc:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:22:53 2026 by rpki-client