Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: Ly2heKCCnjMRwWedYgSHpePaCW8ohGfPsorFaTaGm3I=
Subject key identifier: 7A:FC:5F:4A:54:8B:9A:07:B8:EE:7B:66:7C:05:1D:77:6C:E2:FE:53
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019CAB6B61C478D0DA42A3E43193CC0BC88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 103C
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: f1s53TwxosCXv3XNAE+NT3/IZ4+ENjlNwzs2ohFoP4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:61:c4:78:d0:da:42:a3:e4:31:93:cc:0b:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=7afc5f4a548b9a07b8ee7b667c051d776ce2fe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:ce:5b:c3:e0:9a:0e:fe:7d:e6:52:ae:ad:
c3:ab:2e:fd:70:39:92:98:6d:6d:70:b7:8a:c0:eb:
33:9e:7e:2d:b0:49:1f:5f:b9:ff:31:25:09:85:02:
da:4d:cb:c8:c2:30:f5:9e:b2:c3:16:e7:9b:4e:68:
97:c5:b5:2e:6b:08:9e:2d:32:3d:bc:48:71:75:88:
37:74:c0:c8:da:0c:74:b4:b1:1a:31:f0:2a:a0:f3:
c5:63:96:d8:65:e3:70:68:38:59:c4:0c:19:c4:29:
ca:72:35:fd:50:e3:c7:d5:85:b6:10:2f:76:85:55:
54:57:08:d6:9b:eb:71:90:77:7d:a3:6d:03:a1:f2:
f1:a3:27:5b:79:31:20:38:33:f9:7f:34:22:d9:38:
f3:f3:cb:2c:1b:5c:0c:34:cf:ac:68:44:db:1e:0a:
53:ad:2b:84:b5:45:7d:ad:8e:86:67:60:ea:a0:96:
1a:bf:30:bc:16:58:aa:76:37:d4:87:d4:bf:8d:e3:
4d:76:71:b2:73:db:7a:a7:93:6f:41:65:4f:1a:3d:
c6:3e:7a:41:ba:41:53:e0:d4:6c:82:68:55:74:4d:
91:17:a0:a2:77:d1:6d:f3:c9:0c:ed:52:bd:02:52:
89:c1:74:a7:ae:cc:d8:85:43:81:cd:1b:77:dc:27:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:5F:4A:54:8B:9A:07:B8:EE:7B:66:7C:05:1D:77:6C:E2:FE:53
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:d7:b2:4e:58:2c:c5:61:d1:4a:d3:86:68:8c:ce:80:d4:
7d:7c:ca:c3:76:d4:1b:91:37:94:f1:95:1e:a9:b4:0d:14:f7:
59:b3:fe:28:81:26:5a:e8:92:21:fe:97:e0:ee:e9:05:d6:05:
7d:dd:87:b6:6f:dd:9c:e8:a2:59:48:3b:bf:16:28:b2:ba:3f:
28:2c:53:28:6e:c3:16:c8:f7:d8:cb:1d:03:41:3e:9d:29:71:
02:f6:1d:a3:6d:51:60:d4:52:b7:e4:08:13:3e:57:6d:16:8e:
fa:83:1a:21:fb:d1:95:44:bc:7a:94:d8:aa:12:8a:2b:54:7c:
f6:72:1a:ca:63:8a:b1:0c:75:ec:0e:ad:de:cc:20:7c:8b:5a:
5f:ef:3f:37:f9:88:32:a2:27:bb:5a:49:cd:5f:ff:be:d2:0a:
94:8c:92:56:94:49:69:e6:85:a6:e8:80:8f:15:d4:0d:77:a5:
66:3b:8f:69:06:bc:a6:72:be:c1:f8:54:b9:db:df:b9:07:d3:
ff:db:ea:1f:d6:77:c5:61:52:c9:f6:06:10:31:8a:31:fc:91:
18:95:23:87:9c:8e:57:6e:f1:60:a5:65:50:93:3b:c5:49:ed:
89:b0:21:b6:d3:34:47:56:cc:bb:c1:1c:46:c5:be:7f:db:2e:
ed:80:ca:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2HEeNDaQqPkMZPMC8iNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy
ODFmMTQwHhcNMjYwMzAxMjIwMTA3WhcNMjYwMzAyMjIwMTA3WjAzMTEwLwYDVQQD
Eyg3YWZjNWY0YTU0OGI5YTA3YjhlZTdiNjY3YzA1MWQ3NzZjZTJmZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9fOW8Pgmg7+feZSrq3Dqy79cDmS
mG1tcLeKwOsznn4tsEkfX7n/MSUJhQLaTcvIwjD1nrLDFuebTmiXxbUuawieLTI9
vEhxdYg3dMDI2gx0tLEaMfAqoPPFY5bYZeNwaDhZxAwZxCnKcjX9UOPH1YW2EC92
hVVUVwjWm+txkHd9o20DofLxoydbeTEgODP5fzQi2Tjz88ssG1wMNM+saETbHgpT
rSuEtUV9rY6GZ2DqoJYavzC8FliqdjfUh9S/jeNNdnGyc9t6p5NvQWVPGj3GPnpB
ukFT4NRsgmhVdE2RF6Cid9Ft88kM7VK9AlKJwXSnrszYhUOBzRt33CeomQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr8X0pUi5oHuO57ZnwFHXds4v5TMB8GA1UdIwQY
MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt
MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk
LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBHXsk5Y
LMVh0UrThmiMzoDUfXzKw3bUG5E3lPGVHqm0DRT3WbP+KIEmWuiSIf6X4O7pBdYF
fd2Htm/dnOiiWUg7vxYosro/KCxTKG7DFsj32MsdA0E+nSlxAvYdo21RYNRSt+QI
Ez5XbRaO+oMaIfvRlUS8epTYqhKKK1R89nIaymOKsQx17A6t3swgfItaX+8/N/mI
MqInu1pJzV//vtIKlIySVpRJaeaFpuiAjxXUDXelZjuPaQa8pnK+wfhUudvfuQfT
/9vqH9Z3xWFSyfYGEDGKMfyRGJUjh5yOV27xYKVlUJM7xUntibAhttM0R1bMu8Ec
RsW+f9su7YDKew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:53 2026 by rpki-client