Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: W/B5qVWwIvpvXYDZ2X+vsUZ/bFouqMITnncQM6xSTJs=
Subject key identifier: 8A:F7:8A:8D:AC:D1:30:3D:D9:F9:A7:4C:5A:75:07:98:1D:20:16:62
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019F92ED8B4A67847777C4F6D71FF2B0F0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 11BD
Signing time: Fri 24 Jul 2026 07:01:08 +0000
Manifest this update: Fri 24 Jul 2026 07:01:08 +0000
Manifest next update: Sat 25 Jul 2026 07:01:08 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: QomyVtEc4FjEdJRBKBJBj2spaO5I8QCgOAynO+C5BzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:8b:4a:67:84:77:77:c4:f6:d7:1f:f2:b0:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jul 24 07:01:08 2026 GMT
Not After : Jul 25 07:01:08 2026 GMT
Subject: CN=8af78a8dacd1303dd9f9a74c5a7507981d201662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:a7:b7:a9:35:3b:98:11:e6:b9:fa:c4:56:
25:30:5f:bf:bd:e6:b0:bd:c5:c4:04:b4:07:08:26:
fb:23:a5:8a:63:8a:f1:85:7f:9d:0a:6a:af:62:2e:
f9:e9:93:29:c4:5b:63:34:c2:e4:d2:dc:f4:ba:cd:
d0:40:58:73:50:b3:00:11:a8:f1:83:e2:00:43:8d:
05:2f:77:d7:6e:a1:6a:fc:34:cf:51:72:22:ef:d3:
39:ee:34:8a:f0:3c:e2:f4:2e:29:d5:18:ae:53:b5:
ce:a9:7d:a5:3e:10:92:a8:96:2b:58:3b:a7:3a:c2:
77:a2:b7:a5:4a:25:20:4c:44:d4:40:a9:e4:f6:e3:
0d:89:07:b8:ce:e9:dc:93:51:c4:a8:67:f2:f4:8e:
6b:42:31:b8:82:35:e8:a8:6f:94:48:41:6d:c6:73:
83:ab:be:bb:6a:16:b6:59:d5:a9:36:a2:5b:14:a2:
63:aa:41:56:63:53:aa:82:40:1e:3e:12:c5:6d:1f:
c1:7e:02:22:a2:37:7e:58:b1:a4:2e:50:24:ad:68:
99:31:95:3a:b8:4e:82:b6:ea:cb:d9:22:1b:b4:2d:
8a:9b:e4:05:99:70:06:f0:f6:6f:76:00:fd:50:40:
9b:5d:1c:ce:ff:45:1f:fb:81:e4:79:79:33:29:a5:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:8A:8D:AC:D1:30:3D:D9:F9:A7:4C:5A:75:07:98:1D:20:16:62
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:69:ac:7e:21:79:52:83:c4:dd:bb:e4:50:e6:56:cb:c5:96:
d9:9f:27:b2:1e:a4:93:a0:17:40:30:53:c0:60:16:e3:01:be:
d1:09:95:46:d4:85:d8:f4:a1:c5:b2:57:82:9a:b4:07:7e:8b:
a2:ac:af:9d:e8:41:cb:5e:af:2b:f3:23:d2:ad:f7:78:86:d1:
0c:1e:61:ef:f8:9b:0d:72:18:0d:fc:de:01:e1:dc:c2:ba:0b:
c2:fd:90:b4:b4:b8:dd:24:b2:70:47:55:a7:9e:40:ad:47:9e:
68:a5:40:1c:15:e5:1d:5a:94:e5:2d:91:e0:8c:bc:1d:e5:d6:
ba:9c:0b:b2:d0:b0:fc:f6:fd:cc:ab:00:d4:1d:23:f1:4b:26:
d8:b7:fd:a1:0f:45:c0:b6:21:29:63:b3:a3:69:47:f6:76:53:
47:d9:de:88:55:5e:04:fb:9f:9c:4a:70:2f:f1:be:c5:14:8a:
8c:8a:17:f0:65:43:cb:e5:49:8e:45:8e:f4:b3:53:f0:40:3f:
29:93:09:b3:fc:19:37:6f:de:61:9f:40:bf:8d:01:66:0d:de:
fd:6a:20:41:c1:a4:85:72:62:7c:8c:df:5e:ba:5a:b0:54:e2:
d5:14:6e:e5:0f:f0:4b:9e:57:78:73:b5:55:2e:02:5a:11:b6:
b8:ef:39:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7YtKZ4R3d8T21x/ysPDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy
ODFmMTQwHhcNMjYwNzI0MDcwMTA4WhcNMjYwNzI1MDcwMTA4WjAzMTEwLwYDVQQD
Eyg4YWY3OGE4ZGFjZDEzMDNkZDlmOWE3NGM1YTc1MDc5ODFkMjAxNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rqnt6k1O5gR5rn6xFYlMF+/veaw
vcXEBLQHCCb7I6WKY4rxhX+dCmqvYi756ZMpxFtjNMLk0tz0us3QQFhzULMAEajx
g+IAQ40FL3fXbqFq/DTPUXIi79M57jSK8Dzi9C4p1RiuU7XOqX2lPhCSqJYrWDun
OsJ3orelSiUgTETUQKnk9uMNiQe4zunck1HEqGfy9I5rQjG4gjXoqG+USEFtxnOD
q767aha2WdWpNqJbFKJjqkFWY1OqgkAePhLFbR/BfgIiojd+WLGkLlAkrWiZMZU6
uE6CturL2SIbtC2Km+QFmXAG8PZvdgD9UECbXRzO/0Uf+4HkeXkzKaXxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr3io2s0TA92fmnTFp1B5gdIBZiMB8GA1UdIwQY
MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt
MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk
LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGmsfiF5
UoPE3bvkUOZWy8WW2Z8nsh6kk6AXQDBTwGAW4wG+0QmVRtSF2PShxbJXgpq0B36L
oqyvnehBy16vK/Mj0q33eIbRDB5h7/ibDXIYDfzeAeHcwroLwv2QtLS43SSycEdV
p55ArUeeaKVAHBXlHVqU5S2R4Iy8HeXWupwLstCw/Pb9zKsA1B0j8Usm2Lf9oQ9F
wLYhKWOzo2lH9nZTR9neiFVeBPufnEpwL/G+xRSKjIoX8GVDy+VJjkWO9LNT8EA/
KZMJs/wZN2/eYZ9Av40BZg3e/WogQcGkhXJifIzfXrpasFTi1RRu5Q/wS55XeHO1
VS4CWhG2uO85Fg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:52 2026 by rpki-client