Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: GcEr33Y/s9QgT45QX8jSuhUvLpfifQkbXP7O6IbK72w=
Subject key identifier: 24:F8:85:2F:63:B3:52:C0:94:44:B8:0D:56:0F:0D:C1:33:3D:EE:0B
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019EC06D7F44BD5700DB23EFB4B4F3C445A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 1150
Signing time: Sat 13 Jun 2026 10:01:01 +0000
Manifest this update: Sat 13 Jun 2026 10:01:01 +0000
Manifest next update: Sun 14 Jun 2026 10:01:01 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: oxI3fo3z3owe3+v81ex86Q8cUZ9ODiXffRsGL6WKTd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:7f:44:bd:57:00:db:23:ef:b4:b4:f3:c4:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jun 13 10:01:01 2026 GMT
Not After : Jun 14 10:01:01 2026 GMT
Subject: CN=24f8852f63b352c09444b80d560f0dc1333dee0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:52:67:f1:f3:75:3f:7c:eb:12:bb:c4:38:
9c:48:2f:f2:7b:5b:aa:c0:c5:3a:8e:6c:82:83:88:
0a:50:53:2f:89:6c:3e:5a:a7:53:a3:e8:d4:12:98:
fb:0e:ef:8d:aa:cc:39:18:08:4b:fd:ed:04:82:6d:
7e:75:f9:4a:b1:ad:e8:79:29:6c:79:2b:95:19:c1:
1d:60:48:ac:b9:b0:d2:5c:d5:83:be:f6:be:e4:8b:
f2:c0:b4:89:fd:98:5c:d8:1a:55:f7:13:fb:48:ad:
de:70:c8:85:f1:c4:ac:13:a5:ce:56:88:87:7b:f1:
4e:0b:40:de:cd:e9:fa:a2:72:da:00:1d:07:08:0d:
74:60:8e:f6:96:0e:31:c1:87:33:e3:f7:3a:a7:aa:
5c:4f:71:6a:f4:7c:62:40:a9:d5:c9:3b:77:fd:99:
d2:ea:26:2d:e7:f0:29:39:91:b4:bd:cf:76:2b:7e:
2f:ff:fc:bb:b7:35:8e:50:00:bc:b3:39:f0:ff:7f:
7e:a1:cc:f9:43:8b:ef:8e:b3:a8:65:d7:50:0a:fe:
92:f3:2f:3a:a9:b6:65:52:82:3b:e9:8b:c8:ca:44:
ea:31:ca:fb:99:fd:59:0d:67:ec:73:dd:e3:be:5d:
c2:0d:15:7d:61:31:98:ce:cb:e8:f0:09:11:6c:2e:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:85:2F:63:B3:52:C0:94:44:B8:0D:56:0F:0D:C1:33:3D:EE:0B
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fb:37:8e:46:43:c3:46:bc:62:b1:ec:0e:c5:9f:f8:94:01:
8e:44:78:4c:95:43:73:ba:1c:79:be:55:ba:6f:4d:aa:86:e3:
54:a6:c9:c6:31:5f:4d:98:e9:13:28:18:4e:e4:dd:58:00:b8:
6b:b7:82:a9:ff:69:7b:fb:bf:31:9e:be:5e:6b:2c:5b:8a:78:
b7:bd:69:66:09:38:01:71:cd:11:aa:1b:12:7e:c1:ec:8f:6d:
e0:3b:a0:c3:11:83:e3:98:8a:5a:60:f6:c5:3b:f9:2b:f7:ae:
c2:a5:16:91:77:fb:a2:c6:85:a0:3f:db:9a:39:52:fe:cb:ee:
cf:d6:7b:0e:d8:dc:42:cf:f2:7f:65:78:21:07:95:97:91:90:
c4:2d:ed:96:e9:77:71:b7:87:16:28:de:0b:6d:f4:28:3d:7b:
d1:97:88:0a:ea:76:71:5f:37:e2:6f:47:23:78:b9:8e:6f:d5:
01:34:fd:8a:5d:75:68:bc:63:ee:3d:96:1f:58:7a:b1:5e:b4:
d2:d3:88:5e:f0:db:8b:fa:73:67:c6:4d:9e:cf:a8:4e:c3:27:
ed:fb:c3:f8:77:24:16:27:8a:57:47:f0:c2:4d:a2:32:27:20:
2e:28:7a:f4:56:98:53:4f:20:69:8e:a5:89:5d:40:28:0f:c3:
85:fb:f3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbX9EvVcA2yPvtLTzxEWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy
ODFmMTQwHhcNMjYwNjEzMTAwMTAxWhcNMjYwNjE0MTAwMTAxWjAzMTEwLwYDVQQD
EygyNGY4ODUyZjYzYjM1MmMwOTQ0NGI4MGQ1NjBmMGRjMTMzM2RlZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfdSZ/HzdT986xK7xDicSC/ye1uq
wMU6jmyCg4gKUFMviWw+WqdTo+jUEpj7Du+Nqsw5GAhL/e0Egm1+dflKsa3oeSls
eSuVGcEdYEisubDSXNWDvva+5IvywLSJ/Zhc2BpV9xP7SK3ecMiF8cSsE6XOVoiH
e/FOC0Dezen6onLaAB0HCA10YI72lg4xwYcz4/c6p6pcT3Fq9HxiQKnVyTt3/ZnS
6iYt5/ApOZG0vc92K34v//y7tzWOUAC8sznw/39+ocz5Q4vvjrOoZddQCv6S8y86
qbZlUoI76YvIykTqMcr7mf1ZDWfsc93jvl3CDRV9YTGYzsvo8AkRbC4GKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT4hS9js1LAlES4DVYPDcEzPe4LMB8GA1UdIwQY
MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt
MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk
LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPs3jkZD
w0a8YrHsDsWf+JQBjkR4TJVDc7oceb5Vum9NqobjVKbJxjFfTZjpEygYTuTdWAC4
a7eCqf9pe/u/MZ6+XmssW4p4t71pZgk4AXHNEaobEn7B7I9t4DugwxGD45iKWmD2
xTv5K/euwqUWkXf7osaFoD/bmjlS/svuz9Z7DtjcQs/yf2V4IQeVl5GQxC3tlul3
cbeHFijeC230KD170ZeICup2cV834m9HI3i5jm/VATT9il11aLxj7j2WH1h6sV60
0tOIXvDbi/pzZ8ZNns+oTsMn7fvD+HckFieKV0fwwk2iMicgLih69FaYU08gaY6l
iV1AKA/DhfvzzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:22 2026 by rpki-client