Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: BLhC6+jqzlyO1c2RNwXdTSNvGDzJqx41KZ82k8WGQF8=
Subject key identifier: EE:47:CE:D2:E3:33:D9:5E:36:66:60:23:3B:3A:A7:19:18:F3:D8:02
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019D98F50CED03D167E7240E61FBC0A664DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 10B7
Signing time: Fri 17 Apr 2026 01:01:29 +0000
Manifest this update: Fri 17 Apr 2026 01:01:29 +0000
Manifest next update: Sat 18 Apr 2026 01:01:29 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: HanSC3z4i26xi/Dvy+My3y44ZPiTczW1CthvilbttB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0c:ed:03:d1:67:e7:24:0e:61:fb:c0:a6:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Apr 17 01:01:29 2026 GMT
Not After : Apr 18 01:01:29 2026 GMT
Subject: CN=ee47ced2e333d95e366660233b3aa71918f3d802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:8f:86:62:4d:97:6a:ed:ca:c6:f5:fc:14:
4e:88:a8:f5:38:09:63:3a:cf:e8:bc:14:5d:12:98:
a3:20:8e:de:eb:23:1b:1e:e8:ac:38:b0:cb:2f:24:
70:40:98:aa:d8:4e:2a:ab:81:9a:b0:f3:e1:c1:e0:
0a:29:06:bc:ee:ec:63:c4:69:d9:ca:0f:19:22:b8:
fc:4d:24:6a:f1:dd:85:9b:de:5a:82:d7:87:c5:bb:
bf:5d:34:f6:37:5b:1a:c6:7c:15:90:ed:b8:be:fa:
f0:cd:01:c2:2a:55:06:4c:07:bf:1a:9a:e7:f6:03:
67:7c:5d:37:be:44:70:34:ec:64:37:ea:7e:1a:71:
e5:57:2a:e7:97:1a:60:f8:35:9b:47:a9:dd:32:c9:
d4:de:39:a5:96:9e:12:b4:69:91:8a:f7:14:2c:cc:
b4:c5:a2:b1:99:6f:fc:2c:fb:2a:4f:9e:ab:90:3b:
22:5e:d2:59:da:56:8a:6c:bf:aa:19:a4:a0:1b:75:
7d:02:ac:06:ea:7b:f4:d9:16:53:1d:46:dd:88:b1:
08:60:11:1a:55:e2:7f:f9:83:8f:62:6b:b2:82:af:
85:16:ce:4c:e9:a1:4c:c7:64:84:b7:56:da:be:0f:
bc:64:60:86:44:a1:db:60:0e:19:fa:ce:14:30:4e:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:CE:D2:E3:33:D9:5E:36:66:60:23:3B:3A:A7:19:18:F3:D8:02
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:59:90:84:61:f9:0c:06:8a:93:b4:bf:a0:63:6b:6b:0c:f4:
d5:ae:a0:98:1a:6e:d0:67:44:79:ef:66:ed:66:49:b4:69:b5:
17:98:cc:19:bc:17:7b:e9:da:85:b2:25:37:7e:f1:4d:e4:bf:
73:96:a0:0e:68:af:d4:60:71:77:22:4c:88:30:a6:1b:2b:46:
ac:30:b2:4e:d1:5b:4d:bf:6f:32:59:45:de:bc:f0:da:57:c1:
a7:99:10:a6:55:b3:bb:50:13:ab:4b:42:20:3f:9d:24:60:ab:
09:6a:1a:24:a8:86:a3:d8:b7:85:b1:1e:6d:eb:c3:9e:8f:2d:
88:b1:f1:97:96:78:b5:75:89:01:ca:8e:04:f1:5f:41:9b:1b:
5f:44:f7:d8:90:5a:d6:17:d6:36:0f:eb:31:a0:e5:85:dc:2e:
4b:8a:7d:93:b8:bd:f2:09:e0:cf:78:14:54:1e:47:e1:a2:cf:
76:cd:04:e3:c1:8b:d1:51:1e:d0:91:56:b3:07:f2:7d:dc:58:
c7:c6:6f:89:74:db:cf:b2:26:a0:7b:49:09:90:23:e7:3e:97:
b4:23:77:a6:9a:db:46:3f:73:ae:6b:b7:9f:14:58:d0:e2:56:
be:4f:66:e7:eb:f3:58:23:f3:20:b6:76:2f:b5:5b:3a:98:27:
f4:33:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:37 2026 by rpki-client