Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: 6kQ4jaSzGyIzIqwIFP2KALxZHk9cbq4QLwHhKLoIinI=
Subject key identifier: 1B:8F:25:3E:50:1B:BE:37:D3:D9:AC:A2:08:B0:E2:18:AE:AF:28:7F
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 019E1F7E853B7528EFF86A98B99F66B920E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:00:45 +0000
Manifest this update: Wed 13 May 2026 04:00:45 +0000
Manifest next update: Thu 14 May 2026 04:00:45 +0000
Files and hashes: 1: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (hash: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE=)
2: Nr5F-zFvBPkvGpajXkBN81saN98.roa (hash: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo=)
3: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: 5qsMmVj0TIvdDJGZOVAPleirU60DdpWLosbgG0AoFLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:85:3b:75:28:ef:f8:6a:98:b9:9f:66:b9:20:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: May 13 04:00:45 2026 GMT
Not After : May 14 04:00:45 2026 GMT
Subject: CN=1b8f253e501bbe37d3d9aca208b0e218aeaf287f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:54:8e:ea:af:3c:b3:ca:a0:2c:d7:0e:69:
c0:a7:eb:cf:51:e0:80:ef:41:f1:c2:b5:df:8e:36:
a2:f0:79:38:37:8b:b4:24:93:55:a8:b0:51:73:4a:
3b:c4:23:c8:39:9a:85:b3:a2:1c:f9:b8:11:bc:91:
72:9b:2a:1a:17:ee:8c:dc:4d:54:77:cd:eb:af:de:
0b:34:4d:15:a1:6b:b2:d5:3e:85:a5:5c:64:40:83:
0a:3c:26:66:2c:27:68:a0:b1:17:d4:23:40:f1:d7:
4d:dc:75:f4:fe:ac:57:ac:9c:c6:f6:31:4d:da:cf:
cb:71:fc:fa:e1:32:03:39:0a:6a:4b:e5:e9:c8:97:
cf:3a:5e:52:63:55:6e:80:bd:0f:d0:94:47:f7:9e:
36:24:a3:c9:64:63:e8:e1:cb:b3:bc:68:5e:5d:51:
ec:1f:5c:b4:0f:57:62:23:9c:7e:59:4a:ae:70:59:
e0:41:9f:29:22:af:dd:7c:9f:ac:c1:40:23:e4:7e:
2c:d7:81:47:a6:2b:7f:68:c2:75:6c:0f:50:b1:fa:
c4:fc:a7:ed:54:92:ef:e1:7b:06:ee:64:1d:59:cb:
86:3a:57:8b:c0:60:20:9f:01:18:25:00:56:49:14:
19:df:82:4e:09:13:e4:f0:0a:39:16:da:c6:63:69:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8F:25:3E:50:1B:BE:37:D3:D9:AC:A2:08:B0:E2:18:AE:AF:28:7F
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2f:21:8c:80:c1:1f:ff:d4:1c:2b:f8:a1:d2:6c:4d:0e:a5:
29:86:6f:93:20:f8:5b:7f:47:d1:19:27:5d:ae:1e:91:04:1b:
2f:f4:fd:bc:80:6b:f7:49:45:b8:9c:f2:82:14:1f:e9:cb:46:
ec:3f:0d:77:91:4d:61:d6:84:60:80:6b:b1:03:04:bf:08:d6:
68:73:cd:ad:4a:55:e6:61:57:a6:ac:f5:10:f9:6f:4a:5b:45:
40:4c:84:8b:0f:4b:2b:67:3e:36:2c:8a:6f:e2:6e:54:89:94:
d9:0b:33:40:e9:b5:29:33:71:00:ec:0a:2c:43:f0:e5:a7:9d:
7a:b9:d7:09:3d:4c:8b:a2:59:e9:33:c6:f9:fe:ce:cd:a2:c6:
31:28:5f:7f:58:fa:64:3b:35:e6:46:24:e0:f1:ca:26:4d:fd:
69:ad:3c:04:71:8d:3f:f3:48:54:eb:55:f1:5a:2e:02:02:e6:
f6:fc:e7:db:7b:a9:41:42:19:35:4e:69:8b:9f:2d:90:e5:b6:
83:3a:cc:50:eb:d4:55:51:ad:07:13:14:20:06:14:db:28:f6:
f4:a5:7c:f7:ae:b9:ba:38:ba:7a:73:ff:c4:29:f8:a4:f4:01:
e8:4b:1e:86:d5:20:62:f9:35:98:56:2c:88:32:d6:c5:5c:b0:
b1:a3:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:42 2026 by rpki-client