Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: 7lhfw4BP5ybDnZ7rQolZ760FSRz4QiSlbj0S9W18M8E=
Subject key identifier: 7E:EE:DF:62:08:37:9C:4A:6E:41:11:DA:7E:EA:CB:9B:34:EA:8A:F2
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01A12FFCDE9310955B046CFAE5411A205A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 147C
Signing time: Mon 12 Oct 2026 12:01:03 +0000
Manifest this update: Mon 12 Oct 2026 12:01:03 +0000
Manifest next update: Tue 13 Oct 2026 12:01:03 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: /vgmGCl2rZf/YQk96EpTHNnC1pNaWuf0khgJmgNZgRs=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:de:93:10:95:5b:04:6c:fa:e5:41:1a:20:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Oct 12 12:01:03 2026 GMT
Not After : Oct 13 12:01:03 2026 GMT
Subject: CN=7eeedf6208379c4a6e4111da7eeacb9b34ea8af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:0b:7c:6f:a4:e7:a4:f7:87:03:b2:ed:df:
bd:dd:89:ae:fa:62:f2:c7:6d:7a:4e:42:10:cf:60:
01:c0:79:0b:26:f6:f8:8a:7a:fc:52:93:76:61:8a:
83:d6:ef:cd:8f:e4:70:c0:1f:84:13:40:ea:5d:e3:
4c:7e:f6:58:a2:1f:01:c3:a6:f1:02:0d:3f:28:7d:
8b:a5:1a:ae:d8:af:20:a7:0c:9f:92:62:27:b2:15:
48:4b:17:11:87:3f:df:b3:7c:da:be:92:3d:b2:bb:
88:84:29:03:9d:58:97:36:7a:48:18:fc:01:24:c0:
e6:6c:84:a3:f4:27:ac:8b:78:2c:8d:7b:7b:2f:c3:
3b:38:2e:80:1b:95:da:b4:ae:09:d0:20:4e:1e:46:
90:48:fc:33:5f:92:de:65:65:49:4c:48:ce:5c:a4:
41:08:60:16:2b:51:63:85:a2:f5:f1:c7:00:3b:4d:
02:cf:86:86:42:25:23:26:df:f9:a7:ae:bd:b8:9a:
96:5b:09:4f:47:d5:65:c7:af:c5:31:3f:7f:ca:4c:
69:eb:f6:73:0c:6f:09:6e:be:e4:a7:32:18:c1:94:
db:b1:47:62:00:7a:88:be:37:ff:4f:a8:87:fc:0c:
22:ed:d6:12:1f:7e:68:d2:a5:79:aa:32:36:df:8b:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:DF:62:08:37:9C:4A:6E:41:11:DA:7E:EA:CB:9B:34:EA:8A:F2
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:82:86:86:06:be:35:5c:df:ce:69:39:2c:2c:68:a4:83:b9:
d9:8f:fa:cf:55:43:d6:84:b5:fd:fb:85:f5:de:82:01:0b:76:
e5:f8:3b:6f:66:52:f9:eb:7a:ac:6b:9c:c8:a6:84:51:bc:bb:
dd:90:b5:54:8c:27:ca:5c:dd:9b:c5:35:27:2f:d1:57:5f:75:
9d:dc:67:df:ae:df:7e:7c:02:1b:02:75:d8:cc:93:30:f0:6b:
5f:b0:46:d1:ce:e9:37:41:18:37:2e:f6:27:5a:38:43:19:fa:
5e:93:4e:44:04:78:52:cc:d4:1a:73:5f:a1:00:bb:09:76:43:
28:35:de:ec:28:9d:7d:30:d6:05:75:34:61:1b:7f:b3:f0:45:
dd:da:89:63:21:36:12:d4:21:08:44:bb:83:be:0b:3b:85:27:
a1:72:56:0a:d3:f8:5a:6c:2c:a3:77:3f:ed:70:a2:a0:cf:9a:
4a:ce:f8:e0:41:d4:b4:93:41:fa:c3:69:54:65:e0:1b:56:84:
b1:b0:2d:ae:8c:e8:f3:fa:6b:07:5d:b0:cd:0b:e6:a8:a0:90:
b4:e3:b1:4d:0e:95:b2:6a:ec:36:9a:1b:b6:0f:ee:b6:65:30:
82:91:26:0e:5d:38:3d:08:96:7e:ca:44:60:37:f3:e7:2c:6a:
1b:f1:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:17:10 2026 by rpki-client