Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: yF47jiIMgE3i2E2u80qjNo+d1UEZD6O9Zgxh/cpEidw=
Subject key identifier: 63:05:4A:FB:77:A4:21:CD:25:62:86:23:AF:CF:E5:93:0E:1F:95:64
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019CAB6B444B2AA138079CB48D833ECB5560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0987
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 6hW7eA/omXujsnBTdTCl2JV2thAnIZ12aTuq1pK9DzE=)
2: sfEWFmLBFi8kIni9PxbLJvVQPu4.roa (hash: T0uJkWdr7Y8Livsd/MrYx/Sd7EGtR4cka94f/gVeHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:44:4b:2a:a1:38:07:9c:b4:8d:83:3e:cb:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=63054afb77a421cd25628623afcfe5930e1f9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:01:6d:96:cf:22:45:18:3c:e2:c1:5a:2f:
87:28:a0:bb:93:80:75:d2:f1:c0:60:d6:61:3f:d5:
7e:ac:cd:5c:f2:55:f7:77:9d:fa:6c:a7:b1:c5:18:
bf:9c:98:a5:54:4c:06:fe:2c:5e:20:6b:91:02:22:
7e:71:0b:e5:fe:c4:8b:57:2e:ba:5b:70:23:94:b2:
a3:b4:74:94:a9:cf:33:9b:57:f8:f4:97:25:5a:74:
0e:f6:da:f6:79:92:5e:6e:1c:0a:cd:e8:6e:ee:f8:
50:1d:5b:95:51:f3:75:22:85:4f:4a:b0:c8:50:b8:
2a:2a:3b:d1:63:2a:c7:bc:21:c8:06:a7:96:8f:8a:
e9:ec:77:48:f8:6f:9a:04:ba:65:e2:8b:88:28:9c:
99:a9:56:f3:61:a1:81:8f:88:72:d8:54:e8:78:b6:
3b:ab:25:cd:5d:d1:31:66:b8:0e:f5:bc:14:f7:54:
73:8e:e4:e0:da:6e:dd:19:b4:48:8c:ec:72:7f:64:
38:74:84:e6:b4:99:e1:43:cb:ea:8b:c3:98:37:7f:
d8:2e:22:58:a3:03:f2:7c:47:eb:c0:51:14:14:ce:
b0:b1:4e:28:10:62:70:fa:2b:61:17:85:41:7f:7b:
21:4e:e6:dc:69:e2:5a:29:83:cc:d2:87:f3:09:ab:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:4A:FB:77:A4:21:CD:25:62:86:23:AF:CF:E5:93:0E:1F:95:64
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:01:b3:88:9b:70:3d:f3:7e:46:a5:43:3d:18:ac:7d:b5:40:
fa:f0:6f:94:a8:e5:27:26:eb:d1:8f:89:e9:b3:44:44:fa:07:
0f:fd:a8:ea:04:5d:4e:32:49:84:78:a9:e2:28:ba:cd:90:ee:
e4:42:c9:4d:9d:01:08:99:21:2f:76:6c:cb:37:70:0c:5b:63:
a6:17:36:dc:8a:70:d3:9c:29:7f:d6:1f:bb:12:28:1f:c4:e6:
5d:1e:d5:b4:70:75:65:99:5c:bf:90:f5:2e:63:72:61:66:fe:
34:30:0b:1c:40:45:65:4e:29:92:c9:0e:32:6f:9f:e1:84:53:
1b:ee:23:51:2d:91:d5:ea:11:a6:9b:e8:9c:9b:b9:a2:95:06:
20:07:73:03:bc:25:f6:c5:2d:aa:76:aa:4b:5f:03:94:3c:76:
52:0b:d0:40:5f:39:f5:06:17:e3:22:3b:4a:40:39:1c:32:a5:
9f:8b:dc:a1:ad:bd:f8:64:26:26:49:cb:6a:19:0d:69:2c:c9:
93:b2:0f:15:a0:46:37:bb:cc:3b:a1:e0:a3:ba:ba:dd:95:c2:
0a:08:d3:3b:9a:02:14:20:25:b3:fa:da:e3:ab:00:6b:a3:2e:
f5:c5:b5:9f:5f:70:36:dc:43:ee:27:ff:cd:d7:ed:14:8e:97:
00:a9:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:09 2026 by rpki-client