Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
File: Sv9B3ejOR9Ry174skEhFBIwwqWA.mft (raw, json)
Hash identifier: g5YkYDU9952eu26uEtCvTiFw2/9Bp4k9hTMmMXB4FzA=
Subject key identifier: 2C:19:9E:22:DF:E9:A0:F2:FC:54:A6:E9:9F:A5:AB:30:33:AD:CF:A9
Authority key identifier: 4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
Certificate issuer: /CN=4aff41dde8ce47d472d7be2c904845048c30a960
Certificate serial: 019E216DE7DAFF5200B3A081F1B60D0F8547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
Manifest number: 87
Signing time: Wed 13 May 2026 13:01:51 +0000
Manifest this update: Wed 13 May 2026 13:01:51 +0000
Manifest next update: Thu 14 May 2026 13:01:51 +0000
Files and hashes: 1: 64rZ1l1fxnqrXjonOeV1eeEvkjc.roa (hash: RKliE8vgwX94fwVvTWqD6n+wasJnNrBVuMdqT01fLuw=)
2: Sv9B3ejOR9Ry174skEhFBIwwqWA.crl (hash: zhet4FlEpzwu0GPCGEtVQOOI7bpM+XW0xw5+8dCYokE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:e7:da:ff:52:00:b3:a0:81:f1:b6:0d:0f:85:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aff41dde8ce47d472d7be2c904845048c30a960
Validity
Not Before: May 13 13:01:51 2026 GMT
Not After : May 14 13:01:51 2026 GMT
Subject: CN=2c199e22dfe9a0f2fc54a6e99fa5ab3033adcfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:d7:c9:c3:c8:69:8a:62:69:13:62:39:68:
3d:2b:2b:28:a9:59:80:7a:1d:09:aa:7e:0d:6b:e4:
35:99:73:dd:41:43:a5:dc:5b:7a:e4:18:6f:d9:0d:
74:e5:18:4e:00:2c:bb:7a:45:06:02:80:f0:f1:f2:
a2:14:b1:22:e2:ae:41:cf:93:35:a8:1b:e0:d8:c0:
c2:d1:81:65:bc:e1:b9:e7:64:de:54:72:ff:7f:e4:
22:36:ca:0c:07:1f:d7:e0:7c:53:a0:75:6e:b8:fd:
fa:ae:b9:a8:1a:dc:12:7f:8d:c4:4e:4d:3e:4a:c2:
77:56:3d:c8:2c:c9:82:7f:de:73:78:94:e2:ef:af:
a0:e8:c7:62:50:e7:da:19:79:bc:85:c2:58:86:59:
53:16:8d:23:2c:95:ac:36:6d:33:92:b5:7f:71:12:
c6:e5:8c:90:2c:83:79:65:06:2d:be:4b:71:a7:f2:
ff:27:6f:7c:61:de:18:1b:56:29:b7:83:16:42:86:
73:6f:67:0e:de:50:c6:8d:c2:0a:be:78:52:ef:62:
23:44:0a:1e:3b:00:e0:19:b0:b9:2e:48:66:97:78:
61:0e:c0:cf:3b:0a:f9:84:c0:8e:9d:ae:de:09:7c:
05:d1:06:6c:f6:62:71:31:98:c8:aa:50:67:aa:bb:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:9E:22:DF:E9:A0:F2:FC:54:A6:E9:9F:A5:AB:30:33:AD:CF:A9
X509v3 Authority Key Identifier:
keyid:4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:23:f7:5c:a9:48:bb:59:69:a5:a5:e8:52:d7:17:b3:f6:6c:
8c:7b:38:d7:06:04:83:e2:57:10:4c:14:16:22:90:1e:69:e3:
5d:ac:47:bf:ae:08:58:f7:47:27:cd:0b:4c:75:20:a8:e6:b7:
be:09:83:96:e3:f9:c2:94:17:0e:76:25:8d:7c:80:da:5d:4e:
9d:7e:24:90:e0:1c:bd:66:34:83:b3:22:61:b5:c2:7c:72:cd:
21:85:90:3a:6b:a5:02:99:b4:dd:84:8c:8d:17:85:31:14:29:
d9:03:f0:96:aa:cb:2a:64:0d:f7:66:54:e5:05:48:57:92:cf:
a5:6b:3c:5c:fc:71:de:6a:45:ad:d6:49:0b:5e:90:d9:8b:a9:
bb:94:67:8d:ea:01:3d:dd:15:48:45:ff:fe:e1:2e:d0:ec:fa:
a0:b2:c5:75:4f:0f:fb:91:0f:96:de:bc:e6:33:66:78:0c:91:
63:dc:5d:5e:57:6f:b9:26:39:44:4d:8d:3e:36:0b:b3:1d:87:
62:5d:f4:01:a4:30:fa:3d:10:b5:01:8b:8d:e4:a4:5a:ad:74:
93:d1:a4:84:9a:c9:48:e6:2d:0c:58:4c:31:b5:8d:9a:72:54:
fa:aa:66:84:e4:ef:d8:6c:87:b3:bd:16:2d:b1:87:f4:e7:af:
87:4c:03:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbefa/1IAs6CB8bYND4VHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmY0MWRkZThjZTQ3ZDQ3MmQ3YmUyYzkwNDg0NTA0OGMz
MGE5NjAwHhcNMjYwNTEzMTMwMTUxWhcNMjYwNTE0MTMwMTUxWjAzMTEwLwYDVQQD
EygyYzE5OWUyMmRmZTlhMGYyZmM1NGE2ZTk5ZmE1YWIzMDMzYWRjZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvTXycPIaYpiaRNiOWg9KysoqVmA
eh0Jqn4Na+Q1mXPdQUOl3Ft65Bhv2Q105RhOACy7ekUGAoDw8fKiFLEi4q5Bz5M1
qBvg2MDC0YFlvOG552TeVHL/f+QiNsoMBx/X4HxToHVuuP36rrmoGtwSf43ETk0+
SsJ3Vj3ILMmCf95zeJTi76+g6MdiUOfaGXm8hcJYhllTFo0jLJWsNm0zkrV/cRLG
5YyQLIN5ZQYtvktxp/L/J298Yd4YG1Ypt4MWQoZzb2cO3lDGjcIKvnhS72IjRAoe
OwDgGbC5Lkhml3hhDsDPOwr5hMCOna7eCXwF0QZs9mJxMZjIqlBnqrsNIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwZniLf6aDy/FSm6Z+lqzAzrc+pMB8GA1UdIwQY
MBaAFEr/Qd3ozkfUcte+LJBIRQSMMKlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Y5QjNlak9SOVJ5MTc0c2tFaEZCSXd3cVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YTM5ZjQtZjgzNy00YzQ2LWJlNmUt
ZDkzMDY1YmIyYTZhLzEvU3Y5QjNlak9SOVJ5MTc0c2tFaEZCSXd3cVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85YTM5ZjQtZjgzNy00YzQ2LWJlNmUtZDkzMDY1YmIyYTZh
LzEvU3Y5QjNlak9SOVJ5MTc0c2tFaEZCSXd3cVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSP3XKlI
u1lppaXoUtcXs/ZsjHs41wYEg+JXEEwUFiKQHmnjXaxHv64IWPdHJ80LTHUgqOa3
vgmDluP5wpQXDnYljXyA2l1OnX4kkOAcvWY0g7MiYbXCfHLNIYWQOmulApm03YSM
jReFMRQp2QPwlqrLKmQN92ZU5QVIV5LPpWs8XPxx3mpFrdZJC16Q2Yupu5RnjeoB
Pd0VSEX//uEu0Oz6oLLFdU8P+5EPlt685jNmeAyRY9xdXldvuSY5RE2NPjYLsx2H
Yl30AaQw+j0QtQGLjeSkWq10k9GkhJrJSOYtDFhMMbWNmnJU+qpmhOTv2GyHs70W
LbGH9Oevh0wDuQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:54:00 2026 by rpki-client