Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: iJg7DEk7e2TCi2T2hmKtg5ThnVb/VSFEQXgQzRGasSw=
Subject key identifier: 95:DF:A9:AA:81:28:54:DB:C2:4B:8B:7D:65:89:71:B7:41:2C:CD:95
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 019D25F1FB0DF18A20CB716F3098E4B2E85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 13F5
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: hwKtF/W9PTQyMh7nR2tjOxcXhq1dSfFflY5hAVbFRu0=)
2: WSR87e3Ee1tCNbfum8rM02_xB8c.roa (hash: qVtjtU8RmU9TX2RXNkWcIFQwTFAnao/WjTXbBMNqj5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fb:0d:f1:8a:20:cb:71:6f:30:98:e4:b2:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=95dfa9aa812854dbc24b8b7d658971b7412ccd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:b2:d3:22:32:dd:f0:d1:a2:d7:94:e9:5e:
68:25:84:14:98:ff:2b:fc:67:ff:62:e4:7d:32:02:
54:aa:5a:2a:1b:ae:cd:74:6f:21:99:82:fb:ea:07:
60:be:29:42:4b:15:5d:4d:e6:ac:0d:96:13:57:75:
22:9a:1a:c5:f9:2b:5e:96:30:82:fb:ae:a9:16:44:
a8:89:07:e7:98:13:b1:21:f3:6b:fc:f3:80:0a:de:
3e:73:46:0f:c4:b0:60:d5:99:a8:79:b8:5f:d4:37:
93:2c:b2:93:28:54:b3:b8:7a:0f:72:7f:f6:08:a3:
25:06:ac:58:e1:53:cd:ec:7c:47:67:7b:84:00:43:
09:04:c9:e1:41:21:f3:7a:9a:14:db:51:af:d6:00:
3b:5a:fa:9c:c1:5f:78:7a:f3:35:7b:45:49:b3:c9:
10:ca:9e:0f:df:c5:91:7f:e3:e2:ec:d1:04:64:c7:
3e:c9:88:84:89:3e:16:74:d9:28:bb:00:fb:7d:22:
62:40:91:63:2e:dd:b5:4e:69:2b:ee:60:ac:8c:e9:
52:4f:a9:f8:8f:15:fc:5b:c1:55:5f:00:a5:cf:32:
8a:27:7a:38:7e:9e:c9:98:b8:1c:63:a8:55:23:3c:
46:39:3a:a1:e5:fd:12:a0:23:15:b6:3a:8f:21:d8:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:A9:AA:81:28:54:DB:C2:4B:8B:7D:65:89:71:B7:41:2C:CD:95
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:50:53:b0:e8:ab:c2:58:2c:6c:93:ca:ac:0f:05:1e:98:b3:
57:24:d0:44:01:71:08:47:b8:bb:7d:cc:2c:48:38:31:04:04:
e6:81:1f:3a:7c:d9:3d:13:66:b7:7c:3d:10:c5:75:ec:2a:e2:
5f:25:cc:46:ae:27:98:9a:ab:ad:0b:63:aa:7d:3c:10:a3:28:
a9:aa:35:e1:f0:30:ca:74:7f:d7:5a:2e:77:cc:62:88:3b:dc:
27:c0:13:c5:88:66:1d:9d:68:4a:a0:b5:04:92:76:36:ca:55:
5d:a9:d6:0c:e0:c3:04:26:99:72:b4:65:d3:4b:58:7b:35:7f:
41:1d:25:40:01:f6:86:c9:fe:d2:c2:9d:ef:0b:bf:3e:94:9b:
48:a8:65:92:4e:6d:c2:a0:93:2d:f0:70:6c:e7:de:0f:a7:12:
e6:f2:3b:c8:3b:79:68:a9:92:54:71:cf:8c:63:52:e2:5b:b2:
0a:4b:e9:dc:b7:f8:bd:91:48:79:fe:b2:b9:21:49:da:95:5f:
cc:6f:a1:98:ea:a6:fa:d9:8c:fa:46:6e:86:e5:8f:12:29:49:
60:0b:c0:a5:a9:a2:8a:d3:3b:76:cc:86:63:98:7f:01:90:90:
29:ac:8a:10:31:47:ec:61:85:ef:02:6c:db:c1:9a:90:9b:a3:
97:2d:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:19 2026 by rpki-client