Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: dQni5Mszlf75jz1wOau/OBGafdAldrjtvaC5TDOoef8=
Subject key identifier: D5:62:92:6E:6D:85:FC:11:94:DA:23:88:4F:16:4B:05:80:A5:A4:06
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 019D265F8968264DA76D74B8EF44F8E2EA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (hash: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE=)
2: Nr5F-zFvBPkvGpajXkBN81saN98.roa (hash: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo=)
3: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: uCMrsLOpBiUUjl+T0mr4g686NUb9N3MWcCFPheDKAaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:89:68:26:4d:a7:6d:74:b8:ef:44:f8:e2:ea:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=d562926e6d85fc1194da23884f164b0580a5a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:b5:ba:66:f9:d4:f4:30:fa:45:0d:32:1f:
7f:7b:58:0c:ca:ec:aa:9b:0d:66:c7:86:36:b4:1f:
7d:84:7a:0a:77:ce:1b:e5:cd:41:56:67:90:3b:36:
72:59:ee:9e:44:7f:14:6d:4d:67:32:62:b7:e6:a0:
0d:14:ba:fb:24:97:fc:eb:40:83:97:ee:1d:a0:f8:
dc:e4:8c:a1:88:b8:92:ee:20:aa:13:f4:66:44:0f:
2e:e8:b7:ea:c6:fd:03:65:53:1c:aa:b2:79:42:52:
c9:e4:7d:92:ad:8f:20:0c:32:7d:23:c5:3b:b9:01:
0b:99:15:31:fe:c3:1f:0c:2c:09:af:44:29:3c:c4:
0b:24:4a:41:ab:1f:9d:3e:15:6d:0b:e2:29:74:b0:
21:55:dd:e8:7f:56:7d:99:b4:4b:ae:24:90:58:fb:
98:80:12:82:15:f2:2c:57:d5:37:24:99:25:45:6e:
1f:9e:b4:1e:d1:7e:51:4f:44:66:5b:47:6b:fe:12:
ca:bd:c8:e6:fe:27:9d:96:20:e7:74:8c:f3:32:40:
83:02:5e:2a:9d:03:c5:a1:a8:80:35:f0:8b:42:88:
64:ad:13:ee:27:d5:83:e3:9f:9d:60:db:fe:bd:e0:
f2:dc:66:d7:ee:e6:c6:1d:7a:e6:fd:b3:53:11:e1:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:92:6E:6D:85:FC:11:94:DA:23:88:4F:16:4B:05:80:A5:A4:06
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:44:f2:e4:15:9c:d5:16:10:9b:54:db:65:9e:59:b2:4b:5c:
87:5e:97:68:6e:63:f3:d9:80:c1:90:cc:d2:05:59:b0:35:22:
b7:40:50:0b:a0:ab:af:4d:7c:5f:65:c0:3e:15:c5:af:70:50:
c1:90:41:af:91:c9:9e:af:91:17:cd:0b:1e:a4:50:13:1a:c1:
89:a1:36:6f:09:b1:b1:ec:c3:1a:77:84:2e:51:b6:ea:83:df:
e9:8b:3e:ed:7b:cd:95:9a:93:96:18:91:dd:39:fa:a3:13:3a:
e7:eb:71:13:c6:56:f0:27:e6:43:b5:7a:b4:d4:7a:71:2a:e8:
40:fa:95:b7:08:9d:53:92:8f:a0:75:09:a6:ef:db:78:e1:ca:
5a:08:49:79:f3:08:ac:11:80:af:8d:21:8f:bc:65:e5:59:1d:
47:f3:33:75:ad:cd:43:93:d3:f0:f6:b5:3c:28:7a:9e:74:84:
82:c5:0c:eb:e9:8f:ba:0a:49:4d:f5:d1:e6:cc:ee:39:73:7c:
fd:87:61:e0:c1:54:1b:8d:04:ae:e7:fa:63:a1:4f:d7:b4:db:
37:80:9a:30:e8:44:de:7d:8e:2a:99:40:b4:34:ee:a0:a8:32:
94:5c:8c:77:28:8e:35:d6:30:62:ba:d0:8f:21:cd:e8:bf:26:
ed:16:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:57 2026 by rpki-client