Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
File: Sv9B3ejOR9Ry174skEhFBIwwqWA.mft (raw, json)
Hash identifier: b6OCb3vS6zM+3kHs8LhGlBjIAZfh019Hc+J+vSx8UjY=
Subject key identifier: E3:55:0E:7D:D2:79:30:B9:75:39:F9:67:92:4B:B0:78:18:90:88:FA
Authority key identifier: 4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
Certificate issuer: /CN=4aff41dde8ce47d472d7be2c904845048c30a960
Certificate serial: 019D9C2CECCCA2B00989B99AE069BF042FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
Manifest number: 42
Signing time: Fri 17 Apr 2026 16:01:22 +0000
Manifest this update: Fri 17 Apr 2026 16:01:22 +0000
Manifest next update: Sat 18 Apr 2026 16:01:22 +0000
Files and hashes: 1: 64rZ1l1fxnqrXjonOeV1eeEvkjc.roa (hash: RKliE8vgwX94fwVvTWqD6n+wasJnNrBVuMdqT01fLuw=)
2: Sv9B3ejOR9Ry174skEhFBIwwqWA.crl (hash: 8/sFFyIIxKQrFk+m3FMDtSbgE3kle6GxZBjPgs7w8QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:ec:cc:a2:b0:09:89:b9:9a:e0:69:bf:04:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aff41dde8ce47d472d7be2c904845048c30a960
Validity
Not Before: Apr 17 16:01:22 2026 GMT
Not After : Apr 18 16:01:22 2026 GMT
Subject: CN=e3550e7dd27930b97539f967924bb078189088fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:d3:4a:39:d1:44:bf:6c:67:4f:ea:8c:93:
02:18:86:46:26:02:de:64:f9:56:3c:cd:5c:9d:6c:
58:6e:3e:ec:22:1b:05:31:6b:24:d2:08:9b:6e:c9:
95:29:94:3b:ee:b5:cd:39:03:66:9e:f0:85:1b:4e:
f0:de:e6:5a:4e:4e:4f:b4:65:6f:b8:02:e4:b3:8a:
2c:ea:22:14:1a:a9:f7:7d:33:35:4f:90:8e:79:41:
6e:79:4c:53:70:fe:1a:81:48:67:1d:d1:27:ec:ef:
dc:d1:9b:7a:cc:cb:1c:3e:9c:c3:d8:88:62:cd:4f:
ec:b6:c0:65:d4:10:73:03:b5:83:86:92:7d:94:58:
a3:f1:bb:cb:04:ec:a5:9a:27:a5:05:0f:c1:8e:f9:
d2:66:74:86:ae:fa:90:60:dd:d7:86:02:32:75:c5:
4b:64:b0:89:5f:ed:70:41:89:bd:1d:e6:04:85:71:
02:c6:ae:ef:8b:c2:15:98:38:a2:4a:db:c7:f0:eb:
c0:f1:30:d6:5b:f0:7d:3c:ad:e5:d8:b7:b5:1b:d9:
9a:51:20:ce:b4:ed:8f:9a:ef:24:02:09:fe:7f:77:
be:3d:43:d4:b7:7d:1f:50:8b:a4:dc:88:3d:02:ca:
4c:0e:fa:7a:a6:ac:fd:ac:5a:92:79:25:bf:ab:8d:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:0E:7D:D2:79:30:B9:75:39:F9:67:92:4B:B0:78:18:90:88:FA
X509v3 Authority Key Identifier:
keyid:4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:4f:31:27:b0:4e:b9:e7:25:b9:9d:90:ec:93:b1:50:fa:
21:9c:83:df:d1:8a:95:72:bd:e3:01:d9:dd:0e:d2:32:8f:60:
c9:c8:b6:1f:18:cb:6a:30:2d:4d:e2:1d:60:8f:c5:cc:86:16:
86:98:ad:54:a1:3c:f1:d3:44:fa:db:1e:01:6e:5e:3f:d4:78:
cd:18:f5:03:69:8e:42:63:23:6f:5b:9c:5b:8b:92:3f:e5:ba:
c4:8c:84:cc:75:0a:7c:3f:9b:11:49:c3:7a:58:28:c5:2e:26:
04:4d:e7:5d:b1:26:bf:8f:4e:85:e5:69:12:15:85:e9:85:00:
19:41:84:c1:24:61:22:3c:32:95:ee:1e:e4:43:51:cb:3c:5d:
56:1f:73:e9:4d:7c:c3:bd:c7:4b:32:ee:f2:1b:7d:e5:41:8f:
ea:b8:7c:1c:6a:c9:c5:97:20:66:ef:63:f5:bf:04:d2:df:86:
da:a6:fd:5b:a3:fe:a0:8f:cd:16:44:bd:0f:5f:d3:32:94:c2:
e3:fd:a5:7d:f6:69:45:fb:54:00:93:27:38:3d:83:ab:b8:25:
02:d4:0d:c4:87:73:af:4e:98:04:f1:5a:82:f4:29:4b:c2:44:
8f:01:bc:8e:0c:75:26:c9:1e:7e:d2:fc:dc:cd:7e:e1:5b:c1:
20:b7:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:35 2026 by rpki-client