Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: nvXFLtKOWaIJlPpsYv5a4/seriLwKhPOdYB0rmI59E4=
Subject key identifier: 58:74:2E:32:EB:81:41:4B:9E:CA:AC:33:55:9D:7E:59:EB:9C:21:F2
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 01A0DD299F3EAB1CD7AA4882A44E64DF3EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0BB3
Signing time: Sat 26 Sep 2026 10:01:27 +0000
Manifest this update: Sat 26 Sep 2026 10:01:27 +0000
Manifest next update: Sun 27 Sep 2026 10:01:27 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: tRNSpR5b80BDmjiXhHrtQtL2LWfEAVs/Q/OW2saHpLo=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:9f:3e:ab:1c:d7:aa:48:82:a4:4e:64:df:3e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Sep 26 10:01:27 2026 GMT
Not After : Sep 27 10:01:27 2026 GMT
Subject: CN=58742e32eb81414b9ecaac33559d7e59eb9c21f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:76:69:2f:c5:77:cc:c3:0a:c5:ff:c3:6a:
d3:46:9a:70:2c:f3:8f:6c:c7:3f:ea:88:49:54:cc:
71:32:67:d3:03:fc:25:26:3d:0b:30:fd:2a:44:97:
49:2a:f5:93:82:f9:a0:c3:a8:76:ca:ed:76:09:81:
38:c5:25:fb:1e:be:fa:6f:3f:67:7c:44:1b:e6:c2:
11:3e:53:04:7f:75:69:31:cf:69:6f:33:86:2c:d8:
15:ea:db:a8:b8:ed:5d:45:56:25:ae:7a:44:3a:56:
d4:aa:e4:0f:f3:bc:77:5f:23:8a:54:55:51:a4:5b:
e9:0c:16:b8:87:72:c7:2d:44:8c:4e:45:42:e0:f2:
5c:91:2e:29:f8:97:d8:b9:54:cf:e2:67:f8:51:8a:
81:e0:db:5e:e9:78:8a:87:1c:68:08:65:62:c1:f3:
7f:d1:ef:61:ff:58:65:fa:d3:1c:88:ff:a0:e5:96:
9d:f3:00:6c:95:d1:9a:e4:1e:7f:f8:95:63:ec:21:
af:dd:88:e3:94:1d:bd:e6:58:f1:b6:e7:5d:15:bf:
9d:a1:ce:4f:84:fa:b6:af:bb:cf:49:41:33:78:6d:
48:23:32:41:96:55:b3:4a:9d:4d:a7:06:cb:68:a8:
6c:d0:88:f3:0c:1d:91:9e:51:39:27:6f:cc:85:26:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:2E:32:EB:81:41:4B:9E:CA:AC:33:55:9D:7E:59:EB:9C:21:F2
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4c:33:09:d4:17:73:98:df:45:51:1e:5b:9c:9f:cb:69:68:
e5:04:17:7a:59:ca:4a:22:46:b5:de:67:e2:f9:c1:74:f7:46:
f2:47:4e:12:97:91:41:57:2c:ed:ed:c4:82:7b:b3:c1:98:8e:
de:a3:b1:a8:52:94:d8:1b:41:ae:7d:c8:74:7e:a0:fa:00:1f:
83:b0:39:1e:9d:a8:90:66:63:c9:cd:02:3e:9f:af:85:95:4c:
fb:23:ac:02:3f:b8:dd:b4:36:09:1d:b3:82:0a:01:38:d0:d0:
8c:72:1e:4e:51:18:54:20:98:0c:08:dd:3a:94:4d:ef:49:04:
17:2f:6e:78:c3:3d:ca:ed:cf:ee:8e:b9:02:88:99:25:8c:e1:
4f:3d:9f:d1:a4:a7:5f:c8:7f:3a:50:1f:d7:ef:86:a9:27:0d:
cb:a8:90:f4:ba:9d:43:da:14:60:e0:88:cf:ab:5e:ad:f3:95:
1e:88:a3:95:dd:00:ae:e4:63:4a:c5:28:e7:87:70:ab:05:46:
39:2e:7a:1a:7b:49:d9:a8:04:e4:a0:59:e5:d1:d7:b2:36:e7:
d6:eb:1c:44:39:ac:33:5a:8b:7f:9e:55:f7:94:50:e5:48:b7:
c9:ac:8c:5e:5c:53:25:d6:ba:ca:a7:ed:ff:0e:31:ae:f9:5f:
b3:2b:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:59:59 2026 by rpki-client