Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: NO43hNfa+escPucOBiCOAwkUY5mELZ/lFBmFwqin75w=
Subject key identifier: 4B:9F:B1:1C:A1:20:AF:17:2F:94:62:46:FD:E9:4B:ED:20:8F:EB:8B
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01A0EBF92ADF0F96405374B25F78E8E9BCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 07:02:50 +0000
Manifest this update: Tue 29 Sep 2026 07:02:50 +0000
Manifest next update: Wed 30 Sep 2026 07:02:50 +0000
Files and hashes: 1: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (hash: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE=)
2: Nr5F-zFvBPkvGpajXkBN81saN98.roa (hash: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo=)
3: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: Ni+oXzZoC9zdC0BR+5g1IlBK/BIrDLFv8y8JSXQ4y50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:2a:df:0f:96:40:53:74:b2:5f:78:e8:e9:bc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Sep 29 07:02:50 2026 GMT
Not After : Sep 30 07:02:50 2026 GMT
Subject: CN=4b9fb11ca120af172f946246fde94bed208feb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:a1:31:66:2f:bd:63:f0:19:90:2a:03:63:
af:6d:79:b9:1b:08:fe:58:de:4d:44:e8:ef:bd:e9:
a8:e3:20:b4:2f:17:96:74:11:74:fc:14:30:62:68:
89:e1:f6:d2:8d:4f:5b:9d:ed:63:1d:5a:b3:04:bf:
38:89:ea:00:f0:d9:a5:e4:aa:49:f5:80:eb:43:c0:
53:c1:76:91:42:9c:ea:c1:6f:5a:f1:1b:27:dc:54:
78:ee:83:ad:37:01:fe:68:5b:27:33:07:b3:73:fe:
e9:94:54:43:28:2b:97:49:c5:f9:91:9f:ee:b3:cb:
de:b3:57:96:c7:16:e2:07:24:97:7e:79:fc:72:9c:
78:9e:62:41:e0:6e:1a:40:2c:a0:85:a0:7d:7d:dc:
41:36:0a:06:f8:c6:92:5a:26:de:c0:ec:c9:19:aa:
9c:fc:fe:d1:63:35:fd:a0:01:c8:1a:00:6f:24:99:
2a:7f:c5:b7:54:aa:8a:bf:ba:62:a7:33:80:30:87:
4c:22:d9:31:c0:98:7a:30:1e:35:1f:ba:87:10:6b:
8b:0e:8e:6a:f2:fd:33:d4:e2:60:6f:a9:42:b2:b3:
a4:11:ff:5b:5a:e9:e3:8b:a9:d7:0a:27:65:17:c4:
ef:a1:9e:68:eb:16:69:80:4e:56:4d:a0:18:bc:95:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:B1:1C:A1:20:AF:17:2F:94:62:46:FD:E9:4B:ED:20:8F:EB:8B
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:63:95:9b:f4:13:62:08:c2:26:04:34:b5:21:63:e0:f3:
3d:8a:2e:31:e3:74:d5:0f:45:2b:71:1b:70:af:ad:d6:82:ff:
f0:a6:be:f2:46:e1:ac:a4:ea:2f:43:a5:d8:e7:7e:d3:96:74:
60:c4:88:15:5c:30:09:a7:54:31:34:09:9f:c6:40:e0:80:4c:
5e:fc:3a:00:c6:66:39:e4:ab:2c:43:6a:bc:45:fd:b1:54:b2:
fc:93:ea:af:cb:e1:5d:9f:39:f2:4d:10:75:d2:06:03:2d:68:
7f:81:6e:ce:de:b3:41:43:c2:29:ec:96:6e:da:2c:44:7c:07:
5e:99:3c:e3:32:a0:e3:2a:d1:f1:5d:14:6a:b3:48:9d:a6:69:
00:d7:c0:57:4e:99:14:19:95:a4:9c:7a:39:a0:fc:77:c5:67:
dc:d8:45:c0:63:7d:fc:e0:bd:6f:a6:b2:bb:f4:19:f5:5d:c6:
10:3a:85:f4:98:28:d4:34:90:7e:f5:ef:1e:96:60:d8:91:48:
6b:2f:1f:0f:c8:16:e4:2a:3a:de:ff:f5:83:c0:ab:35:59:7a:
29:bb:71:7f:dd:23:ff:12:03:d4:b9:17:1d:1f:93:3c:a6:bb:
c7:88:d0:9d:3d:d3:b5:8b:1d:fe:cd:d6:8b:e8:2a:95:a2:fe:
5d:73:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:11:14 2026 by rpki-client