Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: JUeIMQW1VDP7WOAbk6seeqqL6RCd4yzH5Id0zn+fd2o=
Subject key identifier: 61:28:66:DC:A8:6D:CE:25:34:74:4B:32:A8:73:54:9C:38:DF:18:33
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 019E1DC719356C5A17C6A73BFEBBA9623354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0EB3
Signing time: Tue 12 May 2026 20:00:47 +0000
Manifest this update: Tue 12 May 2026 20:00:47 +0000
Manifest next update: Wed 13 May 2026 20:00:47 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: lUUW7d6cR6dC1MglGkCr+tTlUv68xcgAnyNlenZFCaw=)
2: i98BdSWrylmIpwd0WO9-Lb6hQBo.roa (hash: 83hgwfdE90Sqn7kTtBLvA4AFMcG3JNT7E8mAR3Newj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:19:35:6c:5a:17:c6:a7:3b:fe:bb:a9:62:33:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: May 12 20:00:47 2026 GMT
Not After : May 13 20:00:47 2026 GMT
Subject: CN=612866dca86dce2534744b32a873549c38df1833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:5e:8a:a8:d6:91:d3:30:39:3e:eb:92:9f:
bf:b1:3d:37:c0:76:db:10:6b:56:db:c9:de:74:ba:
cb:73:8d:fa:41:0f:63:e9:31:31:00:d2:f4:d7:2a:
09:28:97:8d:a3:75:41:3a:3a:77:6b:b0:c3:fc:e0:
12:ad:84:3a:06:fd:b9:e9:8d:72:0f:a1:97:76:a4:
1f:78:5e:6e:63:64:cc:73:27:e2:5d:a0:58:4b:3d:
dc:a1:54:9e:26:54:47:1c:a9:65:79:8e:ba:a7:6a:
a2:af:10:32:54:1c:3a:f1:49:60:b1:8e:1b:15:cc:
6d:f1:5c:06:fe:4a:ad:a0:56:8c:08:d9:3c:f4:8d:
ad:e0:82:40:21:04:28:62:86:60:3c:5b:2f:c5:c7:
b8:e1:89:1b:ee:7f:d6:60:eb:83:70:cc:db:02:ca:
ff:ca:94:2a:cb:92:7d:cb:af:b4:d7:2c:65:12:0d:
14:6c:94:87:b9:25:3a:47:d9:3e:82:32:89:52:b8:
85:67:d7:ec:af:fb:38:e1:05:32:3e:64:f1:0b:ca:
fe:1f:61:0e:8c:08:45:7c:ee:d6:b8:b8:75:a1:72:
49:6a:9a:c0:c6:d5:80:cd:c7:ae:0f:1c:3d:cc:c0:
55:bc:42:78:f9:84:18:31:fe:2b:5d:9d:fd:97:aa:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:66:DC:A8:6D:CE:25:34:74:4B:32:A8:73:54:9C:38:DF:18:33
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:91:4b:8e:6e:04:96:bd:50:cc:d3:68:94:d2:88:a4:6f:89:
98:ef:03:b6:d6:af:b9:14:93:ad:f5:31:eb:1d:6b:ef:b0:90:
28:19:89:a7:63:c6:11:29:37:d1:f6:c8:00:22:82:42:54:8c:
d8:ab:d7:34:fb:09:0f:a9:ae:83:af:0b:78:4c:8b:3c:77:9f:
44:71:cb:a4:f9:cc:7a:e5:ea:8a:25:e3:c7:bf:18:43:6b:be:
b5:8f:2b:d0:f8:87:78:c9:54:48:3d:36:4d:83:9f:5a:0b:30:
11:d0:e2:dd:ea:6d:fc:26:7e:d4:3a:08:16:a6:de:1c:c0:94:
ea:55:41:bf:7e:45:c5:48:6d:7a:b2:3b:ce:44:4c:50:19:45:
80:47:6e:2f:d4:bd:7a:0e:ab:14:4c:25:b2:c6:f2:02:6a:c5:
d5:87:40:bc:77:5c:6e:d9:10:3e:64:c4:a2:4b:a9:64:cd:3b:
98:39:3a:52:a6:08:83:80:24:4c:40:e0:73:77:8a:6e:fa:47:
fc:16:61:d2:e5:67:85:44:d7:75:5f:e7:e7:2d:bd:55:3d:10:
fa:27:f3:73:56:3a:a5:f5:17:f5:1d:7e:c8:76:de:95:c8:e2:
99:1f:7e:d5:ff:82:d3:b1:e7:49:63:be:57:11:0a:5e:0e:40:
87:ed:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:55 2026 by rpki-client