Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: xp9wn2LbPfmMTnjTTfcPZqTRxY536o2+KsU7fbddwKE=
Subject key identifier: B3:BC:9F:13:02:09:BE:B8:37:BF:A5:90:75:08:92:2B:3C:BA:86:91
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 019D269609D1CD00FC3872945D2D7BDB941B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0E33
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: FCs4RR3tACyoHePgVJTbEfdnHP065CB4au7+AACueZA=)
2: i98BdSWrylmIpwd0WO9-Lb6hQBo.roa (hash: 83hgwfdE90Sqn7kTtBLvA4AFMcG3JNT7E8mAR3Newj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:09:d1:cd:00:fc:38:72:94:5d:2d:7b:db:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=b3bc9f130209beb837bfa5907508922b3cba8691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:3b:0b:36:79:73:fd:50:39:f9:16:d0:e0:
e4:6b:41:c3:e9:4b:df:93:6f:d4:05:a9:1c:b7:f2:
70:3f:bb:72:26:e5:ba:c9:99:e0:16:a2:4b:cd:34:
8f:8d:30:fe:cc:fb:c3:d0:92:ff:ba:e7:b0:e7:d9:
52:b7:50:6d:77:0a:2c:68:6f:d4:6e:b7:5e:c4:b6:
ee:66:c5:35:b8:a6:9a:ed:7a:fe:4b:9b:53:c4:0d:
4d:ec:9a:74:9e:d0:b7:60:a0:11:fe:7d:3f:68:40:
72:f4:28:53:87:28:b6:2c:47:75:7a:d5:36:4b:8b:
a5:82:f0:ca:51:1e:39:1c:d5:bf:7f:c7:59:c7:8e:
d9:63:f6:07:77:be:bb:5e:6c:b3:d4:9e:c2:cb:0d:
1a:23:38:11:88:92:a4:2b:00:dc:cd:80:aa:3b:6a:
5c:94:a8:3f:0b:29:b1:80:00:09:6c:61:8a:b7:da:
ce:58:d5:bf:55:80:53:1c:3f:fc:cd:f6:f7:4c:c7:
f9:e5:66:ee:33:a4:31:bf:46:52:af:cd:70:ba:ae:
ba:19:68:29:f9:ba:04:e7:aa:c2:4e:50:09:f8:a9:
45:92:68:c5:67:01:81:c6:52:cf:d0:cc:75:3b:45:
f4:af:95:4a:5e:8b:5c:4e:90:10:33:0a:cf:ea:4a:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:9F:13:02:09:BE:B8:37:BF:A5:90:75:08:92:2B:3C:BA:86:91
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:04:47:c5:42:b5:66:bc:d5:1c:dc:42:ae:1e:c3:e4:64:cb:
be:4c:16:46:f8:fc:ab:7f:a9:87:04:db:82:be:83:7f:ef:64:
5b:7a:8d:b7:46:02:7a:39:7d:56:72:e9:61:2e:bb:07:06:d2:
93:0e:c9:8b:1d:f4:00:75:3c:11:f9:ab:3e:e3:af:dc:18:e6:
0e:2d:99:61:e2:06:01:6a:8b:ca:7b:af:7e:59:bf:63:e0:4b:
bf:42:69:27:8a:95:83:67:87:e8:dd:9d:69:17:9a:89:83:e5:
98:30:7e:53:eb:3b:07:2a:d0:51:6a:09:7a:86:d5:4a:44:7e:
34:2c:cb:c5:67:52:4f:3b:77:4d:5f:96:57:54:9c:a9:a5:93:
54:65:a6:57:d8:c0:1f:d0:01:95:7e:56:79:58:3d:6b:81:55:
16:33:76:01:5d:43:69:cc:60:cf:c8:c7:0f:17:16:62:5f:1f:
f6:e1:a1:4f:bd:e0:7c:06:87:45:4a:eb:af:a9:b2:38:84:f7:
d6:6f:b1:a6:dd:21:5a:c9:47:1b:b1:78:64:18:ef:98:e9:26:
5d:4f:d7:17:07:25:b2:72:7d:66:6f:4f:9e:7e:cf:6d:56:47:
0a:84:ad:88:0e:58:79:05:96:dc:f1:61:40:b5:45:f1:5e:1d:
44:2f:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:11 2026 by rpki-client