Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: Qaw64bgbAdOvNkDgPFrfAi8BT3O68LFFpYgG+/IWIgk=
Subject key identifier: 37:08:CD:40:EC:97:AC:01:E0:18:BE:91:4C:7A:F4:D9:E8:35:23:B3
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019FAC08F0C181E2247E5B4C2B24F6E9AACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 11CA
Signing time: Wed 29 Jul 2026 04:01:34 +0000
Manifest this update: Wed 29 Jul 2026 04:01:34 +0000
Manifest next update: Thu 30 Jul 2026 04:01:34 +0000
Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=)
2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=)
3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: EmdSZV5L1oiQjoZMsvNfklIYwK6Tk6TMbCKXltTBT0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:f0:c1:81:e2:24:7e:5b:4c:2b:24:f6:e9:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jul 29 04:01:34 2026 GMT
Not After : Jul 30 04:01:34 2026 GMT
Subject: CN=3708cd40ec97ac01e018be914c7af4d9e83523b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:aa:1d:4e:8d:3f:93:53:83:6f:5a:c7:eb:
53:78:d2:66:a3:dd:e6:a0:b9:4c:57:49:8c:eb:10:
ed:3d:33:7f:db:67:42:fa:ab:ca:c4:16:4b:b4:b8:
f4:82:c7:62:00:cc:5f:2b:4c:e4:8f:7c:de:f3:a0:
95:55:a4:86:10:eb:35:bb:c7:0d:3d:18:52:e1:44:
aa:37:6b:da:9a:62:ff:43:55:1c:28:21:9a:5d:8d:
b3:b6:af:3c:e4:67:57:95:bb:94:2a:84:fe:0a:24:
f2:97:51:5f:78:f0:16:2d:88:c5:48:10:5e:2c:fe:
2d:38:2c:03:99:7c:f6:d4:0c:a4:8c:85:60:c7:8d:
aa:4c:78:40:dd:5e:1a:30:07:f5:95:75:f9:af:cc:
31:aa:b2:4d:3a:39:f4:61:71:ce:01:51:be:03:83:
bc:08:4f:a8:29:bd:6d:ad:66:7e:33:95:4d:89:ee:
0e:2f:a0:ae:75:71:92:05:1f:a7:01:ac:a0:bb:57:
05:ee:24:f8:14:25:21:f5:eb:6e:b2:34:8b:f7:0e:
28:1e:fb:38:33:2a:e1:e9:9c:d5:4c:2e:f1:37:74:
20:17:49:1c:75:5f:8e:46:32:e7:9c:3f:bc:aa:33:
8b:ce:2b:0b:70:1b:e2:2e:f4:8e:dd:e9:4a:db:92:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:08:CD:40:EC:97:AC:01:E0:18:BE:91:4C:7A:F4:D9:E8:35:23:B3
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ce:5f:c7:ce:a1:ad:9d:d9:3c:43:94:36:bf:ef:87:66:e7:
11:f5:27:68:a0:1b:ea:78:68:d1:d9:d9:30:62:60:e5:7d:97:
4d:e8:b3:63:37:c0:f6:cd:b7:39:d0:a6:72:33:4a:39:03:2a:
11:61:73:a4:ce:52:6e:8f:ad:96:89:8d:48:d5:3e:1f:b6:c3:
63:03:14:02:14:04:ba:28:26:59:ef:72:4f:61:76:72:12:d8:
73:92:60:5e:6f:55:61:db:b3:65:10:b7:4e:63:0c:2f:95:64:
c2:70:70:dc:e4:33:b9:7b:c7:e4:24:b0:27:61:b1:09:d2:81:
76:00:b7:b3:6d:4f:c8:f0:85:02:a6:93:b6:19:78:be:81:dd:
7a:21:0d:b6:48:19:13:07:61:38:b1:4e:79:cf:c4:37:f9:7c:
95:30:d4:64:82:cf:4a:6c:91:df:8b:6f:68:cb:7d:aa:07:45:
ef:a7:8c:91:a8:f9:bf:6a:9d:37:9c:2b:9e:b2:1e:b1:2c:52:
3b:e2:8d:9d:a9:9a:b6:db:75:01:bf:69:59:55:ea:25:b0:11:
82:57:28:95:ff:29:00:ad:c8:b9:03:9d:73:11:9c:62:a7:f1:
99:c9:90:2f:d8:e9:74:86:a4:22:89:af:b1:b2:b9:df:2f:c7:
d1:f7:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:25 2026 by rpki-client