Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: N0tqwYDer1secuNsUjF4y0Eoyam9zvUNdl8Kp2ggAqY=
Subject key identifier: 24:A5:E5:03:D0:78:E1:18:D9:7D:7B:67:41:B1:C0:CB:C0:CC:EE:8A
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019D28F319DB50CF01B5E96F8123257CA439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 107D
Signing time: Thu 26 Mar 2026 07:01:53 +0000
Manifest this update: Thu 26 Mar 2026 07:01:53 +0000
Manifest next update: Fri 27 Mar 2026 07:01:53 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: xyYR+c7ytVirdSZ7wkjfQPWxyrLmsDXXsu14GVMr2B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:19:db:50:cf:01:b5:e9:6f:81:23:25:7c:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Mar 26 07:01:53 2026 GMT
Not After : Mar 27 07:01:53 2026 GMT
Subject: CN=24a5e503d078e118d97d7b6741b1c0cbc0ccee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:3c:1e:b3:67:e2:e5:61:9e:d2:30:07:a0:
f8:86:91:bf:67:b8:95:9e:08:b3:a1:cc:d3:ab:ba:
b7:db:d1:54:f3:33:8b:7a:05:e5:b8:9f:d6:22:64:
a3:de:12:b7:f9:43:55:bb:81:0a:48:1f:39:c4:d0:
5d:62:e3:58:da:23:9a:08:0b:48:07:56:79:44:16:
fb:bc:e3:d3:bb:aa:44:01:d4:f0:aa:79:bb:5c:c0:
4d:9d:12:45:7b:b9:d1:3c:e1:07:79:b3:de:e9:4c:
9e:48:cb:6c:94:0d:ed:3d:58:54:1a:e2:9e:6a:de:
cb:47:76:ed:7f:2a:55:29:66:1b:90:a6:28:7b:50:
3d:25:d4:92:ba:a3:f3:ad:49:b0:3e:a1:99:09:03:
d3:41:d4:6d:a8:c0:8f:96:de:0d:6e:0a:50:6c:00:
f0:85:4d:cb:b1:66:4c:2b:95:40:14:42:1f:14:46:
d2:3e:e9:ba:60:c3:98:f9:cb:b1:2a:de:35:47:cb:
2b:5d:e8:78:3c:6a:d3:c8:70:19:ac:6e:90:e0:dd:
a0:b0:67:0d:36:67:22:3c:2a:4d:3a:f9:c5:80:2d:
9f:2e:06:41:ca:e5:f3:59:a7:13:21:41:be:3e:e1:
97:55:c7:35:3d:97:e6:79:22:50:9d:36:9c:24:b3:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:E5:03:D0:78:E1:18:D9:7D:7B:67:41:B1:C0:CB:C0:CC:EE:8A
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:f1:38:25:b8:2c:6a:32:1e:c5:15:e3:e3:77:79:43:e9:
df:6b:d9:73:6e:b2:50:55:a2:54:6c:86:74:7a:c3:b8:bc:c5:
8f:1f:e6:c1:a8:83:67:dc:6c:e0:1e:ac:ab:32:46:f0:29:b6:
a1:6f:87:cf:4a:e3:9b:ff:6a:54:e1:2d:8d:fa:0f:c7:4b:20:
1f:c3:db:82:87:de:11:37:86:f6:03:fb:f1:3f:20:9f:48:ce:
ff:c5:18:a4:9b:32:db:86:36:2d:62:76:9f:cc:25:d9:37:a9:
95:f6:3b:0c:bb:df:b1:d5:e2:c1:34:20:dd:0f:9e:be:a6:c5:
8c:38:d8:0f:a3:30:9f:e3:0d:d7:5d:76:07:12:8a:77:a4:07:
75:17:c7:47:f8:fa:95:97:a5:55:18:0c:9e:40:08:de:83:b8:
f8:3d:19:3a:f9:23:1e:56:7d:a5:c2:5c:3b:97:a7:d8:51:a2:
42:78:37:bd:b7:aa:72:9b:6a:8d:22:4e:80:4a:30:d5:4e:99:
5c:8e:fc:75:7c:d7:4c:36:b8:2c:ec:dd:aa:82:4f:75:36:de:
f0:b8:2c:f9:a3:0b:12:fd:a6:b2:59:f0:a8:e6:46:8e:d0:cd:
5d:b8:ec:36:51:bf:e3:2e:75:fa:7a:6a:b3:5c:ec:6c:98:06:
eb:51:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:30 2026 by rpki-client