Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
File: Sv9B3ejOR9Ry174skEhFBIwwqWA.mft (raw, json)
Hash identifier: 5xfFQwd5v0vcu8OZwUJepsrfNjsblxgv4YT7VmbXvl4=
Subject key identifier: 21:E0:30:0D:5F:2F:13:CE:5F:02:37:C1:84:B2:66:14:74:88:15:C1
Authority key identifier: 4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
Certificate issuer: /CN=4aff41dde8ce47d472d7be2c904845048c30a960
Certificate serial: 01A137485DAF8C17190969B3D0FAFA4FF9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
Manifest number: 0220
Signing time: Tue 13 Oct 2026 22:00:51 +0000
Manifest this update: Tue 13 Oct 2026 22:00:51 +0000
Manifest next update: Wed 14 Oct 2026 22:00:51 +0000
Files and hashes: 1: 64rZ1l1fxnqrXjonOeV1eeEvkjc.roa (hash: RKliE8vgwX94fwVvTWqD6n+wasJnNrBVuMdqT01fLuw=)
2: Sv9B3ejOR9Ry174skEhFBIwwqWA.crl (hash: wD7HROpKoUk2banT/+0aOkS8b8GILt1ieFlsM/cmRhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:5d:af:8c:17:19:09:69:b3:d0:fa:fa:4f:f9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aff41dde8ce47d472d7be2c904845048c30a960
Validity
Not Before: Oct 13 22:00:51 2026 GMT
Not After : Oct 14 22:00:51 2026 GMT
Subject: CN=21e0300d5f2f13ce5f0237c184b26614748815c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:50:ab:1c:e4:d7:41:41:4e:0d:7d:dd:12:
d2:13:71:2a:cb:f3:cc:7d:a8:40:e4:e5:62:7d:90:
b9:b7:f5:49:b2:e0:c1:d4:5c:53:5a:df:8e:5f:4d:
d8:56:5f:12:ce:27:6e:07:ec:b6:06:b7:bc:a6:b3:
aa:d1:0f:5e:10:67:3e:62:67:ac:da:c0:ca:75:ad:
ac:fc:a3:79:04:41:d5:7e:3f:02:03:2c:d9:1d:87:
44:b5:45:09:29:4b:9c:1d:e0:12:f8:60:9f:2e:b6:
cc:94:96:0b:1c:b4:e7:f6:4a:2a:46:c5:28:e6:26:
7c:70:1c:36:ce:48:2b:4d:a8:75:61:07:24:c8:7e:
70:e0:ea:4a:5b:4a:43:8b:73:2b:ce:9a:3e:4a:f1:
52:fb:3f:e7:4f:69:39:6f:f4:29:39:e6:07:77:83:
60:75:5f:62:40:9b:fb:f9:a1:a5:d7:9a:d6:08:f2:
1e:32:62:b5:49:52:03:99:61:a1:66:e2:93:93:b6:
90:92:28:28:63:15:bb:23:43:50:f5:0f:45:cb:9f:
d7:8a:8d:3c:97:a5:a8:7a:67:4a:36:86:62:3a:b8:
bd:1f:3e:3b:44:f6:59:dc:b3:a1:ac:7a:f4:eb:15:
7a:78:ea:46:94:7d:0a:9c:c1:01:18:8a:1a:1f:03:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:30:0D:5F:2F:13:CE:5F:02:37:C1:84:B2:66:14:74:88:15:C1
X509v3 Authority Key Identifier:
keyid:4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2f:7e:22:07:5a:73:47:31:3c:52:ff:d0:29:03:69:20:cf:
67:48:49:66:5b:bc:78:0b:06:38:f8:1d:a4:45:e2:a7:38:03:
f6:64:71:ef:f5:51:c8:0e:a7:fe:db:b2:d8:bf:7f:20:f0:bb:
71:ae:85:7a:15:3d:20:64:d4:e2:5a:37:f3:0c:1f:18:5e:5c:
4c:90:1a:79:e3:55:84:fc:30:4f:ba:27:1b:9a:d2:ce:ef:61:
3c:93:31:4b:d9:a5:18:35:d1:0c:6c:10:91:2f:2f:42:1f:3c:
81:3e:49:41:c0:76:05:53:35:22:ec:1d:61:d0:f9:9d:da:5b:
ba:f8:50:45:07:f7:65:13:03:66:06:9e:c4:4d:ae:6a:bc:9d:
e7:97:b2:21:16:cd:d5:39:ab:2c:8c:2b:8e:c6:9c:bf:37:b9:
fe:cf:6b:e7:79:12:7c:cb:5b:d6:46:79:f5:dc:bc:8b:be:71:
59:cf:ff:d3:da:82:3b:a1:f3:dd:90:04:32:29:82:0a:96:43:
6c:07:fa:29:a8:6e:9c:90:35:5a:fa:73:a0:8d:72:72:3f:16:
fb:d0:18:a6:26:ac:5b:73:e7:74:aa:84:b4:05:a7:2b:1a:a8:
14:2e:32:05:f0:5a:e1:a5:15:f9:a0:70:32:c9:1f:e0:3e:ca:
2a:37:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:26:30 2026 by rpki-client