Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: LAkqoMum1ANHitO8MCL54k2Um9bowKXwuCEiOV5Lj40=
Subject key identifier: 49:78:52:C5:32:F3:AA:00:F5:64:00:54:6C:A5:A2:57:58:D0:A0:50
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019D98F529877C80F44A8404BC83278034D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0A02
Signing time: Fri 17 Apr 2026 01:01:36 +0000
Manifest this update: Fri 17 Apr 2026 01:01:36 +0000
Manifest next update: Sat 18 Apr 2026 01:01:36 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: u3FNT5oWKpzzuz1dI9EA3NFkWq39QfRkQp2npWwpEvs=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:29:87:7c:80:f4:4a:84:04:bc:83:27:80:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Apr 17 01:01:36 2026 GMT
Not After : Apr 18 01:01:36 2026 GMT
Subject: CN=497852c532f3aa00f56400546ca5a25758d0a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:64:51:4c:bb:76:44:32:96:63:84:a8:f9:41:
a1:47:dd:7f:35:f0:48:d5:55:a6:cb:a4:12:66:29:
fc:ba:e9:16:e3:a6:da:eb:c6:c4:ed:16:74:2d:f6:
2a:2a:c2:7c:ba:05:d4:63:96:98:dc:12:cd:69:6d:
4c:ce:59:c9:9f:62:60:2b:88:88:2a:7b:94:36:13:
de:fe:92:31:0b:e1:f6:a5:00:44:59:95:a1:fd:66:
9c:f9:61:bf:22:9d:d8:76:13:42:51:79:53:d9:fb:
be:65:7c:d4:2f:4e:f2:6f:85:10:b4:0b:cb:ec:e7:
ac:b9:b4:68:31:82:54:37:19:04:52:f3:b0:94:9b:
be:4e:4b:7e:4d:82:14:6d:53:80:d1:58:4d:6f:3e:
84:23:52:73:6e:da:8b:b2:16:41:0c:ad:39:e9:b8:
83:9c:5b:20:0b:d3:af:03:a5:8f:24:69:fa:2e:42:
2d:f9:7d:75:cc:b7:7c:1d:32:e9:77:1e:57:91:fd:
60:35:c2:78:32:61:df:9c:a6:c9:e8:72:8e:fe:eb:
a3:24:9f:c2:0f:64:e2:5b:5c:a8:64:85:81:16:4a:
52:a8:53:17:cb:78:a0:6f:96:37:e0:37:01:3c:a9:
6e:44:90:5c:33:22:5a:7f:39:d3:5f:c8:b9:fc:66:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:52:C5:32:F3:AA:00:F5:64:00:54:6C:A5:A2:57:58:D0:A0:50
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:2c:38:7a:ae:62:5a:32:4d:0f:39:b2:2b:41:2f:63:f0:
aa:90:64:ed:e1:74:07:bd:9a:31:53:b1:7b:b1:b4:c4:6e:cb:
ec:2a:6e:ca:35:3a:7c:2e:ea:36:8d:c6:ff:e5:4b:17:83:ef:
32:63:c6:14:32:1c:b7:7a:8d:f1:e0:39:d1:9d:44:09:77:78:
1d:a2:48:75:50:5f:58:16:40:3c:6c:b8:e1:fb:1f:94:6e:88:
4f:2d:51:a2:0f:b6:62:a7:55:87:4a:5c:3b:eb:b0:9c:ac:bd:
02:fe:b6:0e:c7:f6:f0:c3:d8:b4:a2:d7:78:70:22:c3:3a:62:
bc:d1:7c:96:e2:de:60:3f:64:a1:e8:44:5a:96:bf:b3:cd:19:
cd:fc:ad:44:c9:88:50:ed:9f:6b:4d:cb:5b:83:b6:5d:8c:7b:
a5:ab:d7:b8:f1:47:eb:51:29:2f:b6:e0:c4:d9:b2:ac:d4:c5:
1b:a9:59:f0:f1:df:8c:6a:1c:fd:84:53:79:c5:d2:23:19:73:
f1:8c:5f:b2:3e:a5:75:ce:9d:3c:e4:42:98:f0:56:7b:ab:f9:
f6:c1:4c:9d:ce:a1:d4:ff:88:d0:8e:e9:da:77:b9:27:92:3a:
93:b1:e2:15:f5:cb:c0:f2:9b:31:6b:97:dc:e9:c1:7f:aa:38:
24:3c:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:44 2026 by rpki-client