Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: UIShM7otMODCKIEsFGZyEzQATjdAu37+uiTz/QdDw3I=
Subject key identifier: E0:D6:AB:6A:64:6E:D4:14:76:F5:FC:75:C9:A6:AE:02:78:AF:45:9B
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019D99992A31498BFFF12213123C7DF22082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 15AF
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: IIymt_gIxj1wQiBNwoPBz_3n-qE.roa (hash: yR49/WGoG8+bW4KA9QnfHmFC2bKX29hGh6JWaLIVXdA=)
2: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: 2isyRV7wrA1KbuDOlbkvcMcgFiAQwqqqLL0FuCJTLfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2a:31:49:8b:ff:f1:22:13:12:3c:7d:f2:20:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=e0d6ab6a646ed41476f5fc75c9a6ae0278af459b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:aa:1c:0a:ae:4b:51:4d:6f:8d:15:13:c7:
62:d2:04:3d:8d:d1:51:0d:bd:8b:4e:e4:b7:17:e3:
5d:10:5f:6c:57:02:a3:24:45:bd:5f:6d:77:89:ee:
3a:95:fd:ec:17:7a:90:a2:86:d8:08:71:3d:f3:ea:
00:fa:88:6e:ae:34:a9:fc:48:c3:7f:29:0a:cc:a7:
5b:d3:3b:d1:95:ad:94:31:41:ba:75:a9:36:ce:ae:
0d:a6:d4:3d:96:db:91:6b:81:d8:e8:5e:5d:de:0e:
a5:b9:ec:33:e4:39:1e:a6:6e:fc:8a:d8:60:d7:92:
21:6a:00:b1:f5:d2:b4:13:05:d4:e2:5d:ba:23:5a:
5b:59:38:76:48:26:70:08:0f:93:4c:48:8c:8a:a2:
68:a3:cf:14:52:79:21:93:6e:48:2d:a5:c2:c1:b2:
a0:e1:2f:de:d4:8a:e3:5a:a0:6f:d0:e2:01:81:88:
6b:f0:15:8d:c7:51:3e:14:d6:78:bc:ba:67:44:10:
68:82:a5:9d:28:d2:0f:e1:a0:9a:96:97:c7:87:d7:
e8:38:ed:40:5e:91:cb:82:c2:c4:ed:88:bc:1c:f0:
90:4c:c1:08:e5:d3:e5:32:71:76:3c:30:db:23:d1:
2e:b7:ac:21:a4:5b:af:8b:d8:b0:ed:de:17:f8:3f:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:AB:6A:64:6E:D4:14:76:F5:FC:75:C9:A6:AE:02:78:AF:45:9B
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:79:39:9f:29:72:85:ed:3b:3d:b5:e7:8e:34:13:6c:fa:25:
d7:cf:96:b4:a1:3b:c9:c3:ff:a1:a0:3a:05:75:c3:a7:98:04:
57:97:48:ef:fc:3b:04:5d:27:14:0d:b0:f9:35:d0:82:f5:ac:
04:0b:35:25:bc:75:fb:1b:f3:e2:09:69:d8:1d:09:7e:9d:a3:
5c:81:23:64:0f:75:78:18:db:6a:55:d1:17:73:b8:ed:a1:00:
29:32:91:8b:d0:a1:f8:81:c3:b9:ed:bb:c8:46:3e:e4:a2:b7:
1d:1a:cc:d6:80:21:5b:7a:4d:42:71:d4:c6:d3:bb:98:fa:1b:
64:32:0a:51:61:3e:7a:b0:c5:bb:84:85:d9:83:9d:c4:35:cc:
98:47:03:01:30:2a:3e:af:e8:fd:a5:a1:c1:86:b4:da:2d:23:
4d:f5:b8:a7:fa:f3:e2:54:26:54:4d:1f:07:d5:c7:8b:19:21:
9b:8c:be:66:10:3c:6a:36:3e:05:c3:56:17:e7:05:11:5b:37:
5e:fd:1c:c1:8e:69:09:41:8b:16:a5:e9:ea:12:ad:9f:6b:dd:
f7:48:46:4e:70:e4:7f:84:f1:fa:35:0c:a4:44:da:d2:c1:8c:
52:cd:1f:ec:94:35:90:32:f4:91:5c:91:1e:7c:5a:e7:31:ca:
9a:b0:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:23 2026 by rpki-client