Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: Ogc9SZpEtaerxMPLu25vkpAMSeG4O/bVaK+rntV/6b4=
Subject key identifier: D4:07:0A:9B:D0:B5:76:47:B1:98:3E:B6:29:0C:8D:CF:2F:C6:E0:C5
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019F3BCEFEE35EFED765ACBD3DBCB000F052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 1379
Signing time: Tue 07 Jul 2026 09:00:49 +0000
Manifest this update: Tue 07 Jul 2026 09:00:49 +0000
Manifest next update: Wed 08 Jul 2026 09:00:49 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 1ZPnV2+cK8d7Ls4zQ6btp+3PHl23jqJh9sCxcQknNwU=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:ce:fe:e3:5e:fe:d7:65:ac:bd:3d:bc:b0:00:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Jul 7 09:00:49 2026 GMT
Not After : Jul 8 09:00:49 2026 GMT
Subject: CN=d4070a9bd0b57647b1983eb6290c8dcf2fc6e0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:f0:c1:ac:79:f4:48:b4:92:b6:98:ad:dd:
6b:66:25:60:d7:53:ce:6c:2a:c8:e0:84:8a:8e:f5:
f5:1b:db:63:b0:22:0d:28:3c:04:d8:88:1e:87:cf:
a2:08:09:31:ca:92:d1:15:42:10:a6:d6:1b:33:6f:
93:e0:c1:22:57:00:74:b1:99:b4:f3:1a:de:3e:8c:
7b:14:25:00:d4:83:ea:ab:d5:59:02:46:c5:20:a7:
9a:5d:4e:6c:16:3a:57:72:f8:de:c8:13:38:b1:8a:
e5:01:a4:24:c4:a4:6f:3a:10:68:3b:a8:ab:8c:b7:
a8:27:fe:2d:7c:a8:eb:2a:fd:f5:31:81:fd:7c:1a:
fe:cc:5d:24:c0:70:eb:3a:18:2a:b8:4b:e5:fe:72:
ca:67:c4:e4:09:5d:10:93:73:79:f5:bd:ec:92:67:
53:11:e5:44:70:f1:03:45:36:90:65:0a:db:42:ef:
87:7e:7d:a2:99:d8:0f:e2:90:68:94:b6:b6:84:61:
3c:78:1a:fe:d2:23:dc:36:35:6d:6d:39:68:57:d5:
87:eb:b8:6c:d8:ff:97:61:0b:24:fd:9e:68:ae:c3:
d3:1d:1f:5d:7e:9f:7e:92:71:ea:40:d0:b3:47:0c:
72:27:d5:c9:d0:a6:0b:d6:b4:67:ee:3e:86:78:ac:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:0A:9B:D0:B5:76:47:B1:98:3E:B6:29:0C:8D:CF:2F:C6:E0:C5
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:77:fe:99:e7:ac:22:b8:65:b0:40:49:e2:2a:e3:a6:ec:da:
c6:84:d6:76:e0:6b:2b:b9:0a:94:03:3b:7c:ad:99:61:f5:2f:
1d:ad:3c:c1:8c:63:dc:e5:94:fc:fe:65:12:8a:48:cd:33:3b:
79:58:b6:16:46:f5:db:d8:49:c0:68:cf:81:8d:a3:84:d6:9f:
f8:29:21:33:58:eb:bf:3e:d1:b5:5e:ff:7e:77:4b:f9:e3:4c:
dd:4b:34:0d:a5:b4:b6:75:df:0e:d4:9e:90:1d:d5:1c:1a:30:
80:49:f0:e6:04:4e:03:d5:8a:fe:3c:87:e5:33:85:23:7b:78:
6a:9d:3a:f1:07:59:38:31:97:3d:87:64:76:8c:86:60:7b:27:
a5:01:31:bc:e5:2c:12:63:32:17:cd:97:1f:44:04:3b:e2:e8:
bd:cb:21:8e:89:5d:f7:c7:e2:04:c6:db:21:ba:a3:e1:a2:a4:
b0:7b:1f:44:55:e3:f4:1c:c6:dd:ff:77:34:3b:ae:f6:29:2a:
59:d1:8f:32:b1:90:ad:4c:a8:ef:c0:11:c6:16:38:93:03:60:
06:e0:d3:24:79:f6:dc:a5:91:79:9f:10:22:5e:fb:64:81:30:
af:81:30:50:13:bc:21:0c:b1:f8:47:15:2d:3f:ae:56:fa:76:
01:d2:0f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ87zv7jXv7XZay9PbywAPBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw
Njk3ZDkwHhcNMjYwNzA3MDkwMDQ5WhcNMjYwNzA4MDkwMDQ5WjAzMTEwLwYDVQQD
EyhkNDA3MGE5YmQwYjU3NjQ3YjE5ODNlYjYyOTBjOGRjZjJmYzZlMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSTwwax59Ei0kraYrd1rZiVg11PO
bCrI4ISKjvX1G9tjsCINKDwE2Igeh8+iCAkxypLRFUIQptYbM2+T4MEiVwB0sZm0
8xrePox7FCUA1IPqq9VZAkbFIKeaXU5sFjpXcvjeyBM4sYrlAaQkxKRvOhBoO6ir
jLeoJ/4tfKjrKv31MYH9fBr+zF0kwHDrOhgquEvl/nLKZ8TkCV0Qk3N59b3skmdT
EeVEcPEDRTaQZQrbQu+Hfn2imdgP4pBolLa2hGE8eBr+0iPcNjVtbTloV9WH67hs
2P+XYQsk/Z5orsPTHR9dfp9+knHqQNCzRwxyJ9XJ0KYL1rRn7j6GeKx/awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQHCpvQtXZHsZg+tikMjc8vxuDFMB8GA1UdIwQY
MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt
Mzk2YmM3MjBlMmI0LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0
LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Xf+mees
IrhlsEBJ4irjpuzaxoTWduBrK7kKlAM7fK2ZYfUvHa08wYxj3OWU/P5lEopIzTM7
eVi2Fkb129hJwGjPgY2jhNaf+CkhM1jrvz7RtV7/fndL+eNM3Us0DaW0tnXfDtSe
kB3VHBowgEnw5gROA9WK/jyH5TOFI3t4ap068QdZODGXPYdkdoyGYHsnpQExvOUs
EmMyF82XH0QEO+Lovcshjold98fiBMbbIbqj4aKksHsfRFXj9BzG3f93NDuu9ikq
WdGPMrGQrUyo78ARxhY4kwNgBuDTJHn23KWReZ8QIl77ZIEwr4EwUBO8IQyx+EcV
LT+uVvp2AdIP1A==
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:45 2026 by rpki-client