Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier: SPnPIsNWr73vW//McgzDGLgp7gdlt7eHQfC+4Ctnoqk=
Subject key identifier: BF:2C:96:E7:CA:1A:65:10:30:C2:DD:D3:8C:DC:7E:83:FA:C8:ED:19
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 019D37525B42BEDE3B71E4EFFD9AC7818DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: wpr682qDiQouLPyoUHF78iW/aJdyJ7yVHl1Simzfy60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5b:42:be:de:3b:71:e4:ef:fd:9a:c7:81:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=bf2c96e7ca1a651030c2ddd38cdc7e83fac8ed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:42:43:30:b2:d1:1d:e4:a0:81:7a:2a:b5:
92:b0:d4:a8:c6:99:cc:68:2e:3e:c8:4c:db:f9:27:
05:a7:50:74:98:1b:08:2f:93:07:90:9c:49:2e:6d:
3a:fb:ee:f1:63:a7:66:2d:e6:15:f0:da:48:c8:d7:
c0:62:93:c0:02:43:33:6b:12:45:51:4d:d3:9f:74:
a3:bc:ea:08:29:17:6c:04:74:8e:01:c1:03:57:73:
99:1e:64:94:cd:e2:b9:e8:ee:5f:20:0a:98:49:67:
e4:e7:d0:d5:e2:3d:b7:bc:dd:7e:1c:1d:73:fa:bd:
f1:0b:36:0a:47:28:ba:3e:5d:9c:f0:79:50:13:e0:
fe:99:6f:e9:96:22:f1:45:71:4a:0b:8b:04:5c:6e:
45:5a:3c:12:24:e6:b6:00:83:ec:59:09:cc:bd:67:
1c:3e:be:6c:82:b6:4e:17:98:50:89:a8:b3:95:2a:
0a:75:12:c8:57:db:2e:f7:f9:40:4e:be:89:97:ed:
6f:a8:9a:13:d4:fb:be:3c:d1:d1:13:02:7a:fe:9c:
09:3e:3b:43:82:54:63:5a:41:9e:b3:23:b1:b2:f0:
b3:65:0e:6c:97:57:12:4c:ab:5b:3d:ad:1f:22:49:
a6:b9:a1:7c:27:a3:d0:75:e5:88:08:9b:a7:39:b2:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:96:E7:CA:1A:65:10:30:C2:DD:D3:8C:DC:7E:83:FA:C8:ED:19
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:be:b5:09:98:ce:96:13:e8:cb:b8:d3:52:1b:38:f8:4a:
c6:21:c0:3a:9b:11:06:61:af:aa:86:b4:8f:29:57:1d:ee:7a:
40:10:c2:71:df:2c:59:66:ee:6b:56:a8:98:56:88:f0:54:68:
4b:19:46:26:d1:12:d4:25:1e:22:5b:eb:91:33:95:ac:6f:fc:
2f:61:4b:82:8e:44:6e:22:99:85:36:e6:a3:86:25:28:75:18:
30:fa:36:56:0d:84:80:d7:c5:14:7d:55:75:7b:bc:fc:7c:c0:
bf:00:72:b5:05:a1:e7:5f:a6:82:35:a5:dd:e7:dc:d7:97:88:
d5:d3:6d:b2:f6:3b:ad:c3:53:a8:82:61:34:06:3a:54:5c:0c:
e6:04:34:a7:df:e5:f5:78:55:de:db:17:41:24:08:55:8d:c5:
86:43:50:d0:2c:84:f2:35:0d:45:67:58:b4:78:7f:89:f7:e5:
1a:9c:c8:68:0f:ef:d4:86:ac:a4:16:1d:cc:47:47:fc:ea:ac:
9b:da:0a:8b:b4:66:d5:af:b0:4f:09:df:e3:e2:29:b3:b1:4c:
a1:f1:86:b2:df:31:9f:3f:ec:75:26:dc:47:84:17:e6:bd:a4:
da:64:f8:7d:33:93:e0:ee:40:48:3f:77:3a:45:da:24:a4:0f:
30:fe:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:33 2026 by rpki-client