Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: +WpopRq9GpgIHIEPYXXr+zBuCFhmkwvhwTXF3p4AA6w=
Subject key identifier: AD:3C:AF:8B:DD:AA:A3:9D:9C:5B:13:04:84:A0:AD:0B:41:15:02:0A
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 01A0D315E486A98D28823C0CFD4945EC0790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 101A
Signing time: Thu 24 Sep 2026 11:03:42 +0000
Manifest this update: Thu 24 Sep 2026 11:03:42 +0000
Manifest next update: Fri 25 Sep 2026 11:03:42 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: otIcJi2vvVOkXk4x6Og6ERdboloxCm6yY8Ly2tng5Fg=)
2: i98BdSWrylmIpwd0WO9-Lb6hQBo.roa (hash: 83hgwfdE90Sqn7kTtBLvA4AFMcG3JNT7E8mAR3Newj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:e4:86:a9:8d:28:82:3c:0c:fd:49:45:ec:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Sep 24 11:03:42 2026 GMT
Not After : Sep 25 11:03:42 2026 GMT
Subject: CN=ad3caf8bddaaa39d9c5b130484a0ad0b4115020a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:54:4a:61:0d:b7:71:f1:93:25:bc:f8:da:
4a:e2:66:1c:0d:4d:b3:a3:6d:e8:22:78:22:6b:00:
f4:bd:17:48:fb:ea:01:66:94:5a:88:a3:cf:e6:06:
25:3c:95:a4:f0:b2:fa:94:b1:db:2c:d0:85:2c:5a:
73:d8:a7:a0:cd:12:2b:a0:92:35:68:56:04:7c:4a:
04:dd:8c:f7:b3:08:c7:0b:f1:39:09:fe:3a:14:bf:
24:21:6a:6a:63:5a:42:af:12:08:2e:69:eb:6c:4f:
eb:48:22:f1:f8:92:ea:dc:2a:bd:52:f3:72:51:c6:
03:06:15:dd:0b:8e:f1:64:cf:6c:2b:d7:c8:f7:e1:
4b:77:89:e1:46:01:f0:cf:67:7e:6c:86:26:7e:0f:
c4:bf:39:38:a8:a1:1d:aa:d5:7f:f9:50:85:27:a1:
bb:2a:69:b6:10:3c:09:67:37:4a:da:28:48:d8:13:
29:87:0f:24:48:f4:e3:13:fd:66:fe:fe:a9:a3:5a:
a9:c8:cd:0c:d6:24:ca:b3:63:42:9b:4c:c5:d0:86:
7e:61:25:7a:9b:85:f5:89:c7:28:56:e5:c7:52:79:
ea:61:36:9f:e5:24:75:36:db:d2:e8:48:e8:42:bf:
42:ab:d7:04:24:48:33:80:ec:33:3d:e3:b0:c9:a5:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:AF:8B:DD:AA:A3:9D:9C:5B:13:04:84:A0:AD:0B:41:15:02:0A
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:81:b6:76:d7:84:a1:40:6b:3e:28:c5:09:8d:64:2f:5d:bd:
f3:ac:e7:e2:2f:b7:cd:bc:59:dd:86:b8:2a:e2:0c:a2:0e:45:
b4:37:71:6f:b3:a3:b4:2f:0b:57:60:45:36:c4:9b:a4:50:3e:
a1:07:aa:e9:4e:a9:32:93:53:f4:33:d2:5c:31:4b:a2:d7:46:
fb:52:d1:a6:65:24:c1:61:eb:0f:7d:56:0a:b2:55:f3:b1:f5:
b7:10:44:36:61:47:ec:0b:86:2d:02:cb:72:ec:a2:ff:b9:20:
42:02:df:e7:ab:82:0c:64:c4:da:dd:6b:e5:60:6b:b4:59:82:
6a:e5:ce:84:81:3c:7b:1f:93:96:37:a3:8b:36:dc:43:47:87:
17:69:db:aa:ab:6b:68:c9:0d:db:a1:3f:96:f1:6e:0e:14:8a:
ad:a7:4e:e4:08:5b:85:d1:e8:9d:6e:8b:60:2f:7f:9b:c9:09:
33:f3:b3:e9:36:23:be:e1:28:a0:6d:0c:ee:67:a1:cd:a8:7c:
3f:36:b2:85:32:54:97:73:3b:9c:84:8b:cb:7a:25:1b:f6:ec:
3f:76:c7:08:9e:97:21:69:3a:f0:33:29:24:db:dd:08:b6:db:
82:27:9e:30:38:c3:dd:d4:fe:67:62:e0:2e:7e:1a:df:98:43:
be:d5:4e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:35:49 2026 by rpki-client