Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: yGP/2FBmr2rl89LWeJMeKmg1nv7jrlhzSlQgNGgDICo=
Subject key identifier: F4:F7:AE:4C:5E:18:AE:70:27:4C:F9:1A:FE:45:4C:E0:D0:E1:94:31
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019CDE7D11FA6DF5FFBE9EE8F11BE572BC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1877
Signing time: Wed 11 Mar 2026 20:01:04 +0000
Manifest this update: Wed 11 Mar 2026 20:01:04 +0000
Manifest next update: Thu 12 Mar 2026 20:01:04 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: e6Y5OotYF1UVWrG8vXSdBarfnC3kBwM0u8iCFs8II1g=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 15:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:7d:11:fa:6d:f5:ff:be:9e:e8:f1:1b:e5:72:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 11 20:01:04 2026 GMT
Not After : Mar 12 20:01:04 2026 GMT
Subject: CN=f4f7ae4c5e18ae70274cf91afe454ce0d0e19431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:d2:b6:5c:cb:3c:38:51:bf:ae:38:27:dd:
c0:60:3e:75:cb:bb:cf:0a:57:7d:0e:ac:a1:18:0c:
7e:7b:63:72:68:5d:e5:3c:ad:38:02:d9:7b:0b:14:
24:f9:0b:8a:a5:35:90:cc:3f:1d:f0:76:55:9a:f4:
93:ed:78:1f:d5:ea:fd:34:0c:18:32:2d:7c:eb:4c:
60:2e:39:ff:bc:ca:c0:44:53:cb:01:79:5d:ae:dd:
a3:b0:fa:12:7c:ac:e3:46:77:7e:17:7e:c4:0f:7f:
a9:d8:24:e3:a2:1d:eb:3f:f6:0e:ab:bc:16:09:ec:
27:ec:bb:30:1e:74:f0:b8:5a:e1:f7:c2:ae:d2:a2:
6c:69:bf:6b:c8:02:ae:25:ad:5b:e8:8e:fe:32:fa:
d3:ff:8f:8a:57:dd:c4:f2:f7:52:4f:fb:c9:d5:09:
ec:79:9f:9a:ee:08:31:1a:b1:a5:0c:03:b5:97:84:
4c:2b:94:41:95:9c:51:f3:79:34:b1:93:10:aa:d4:
0a:b1:d4:11:11:58:cc:91:f6:d8:a9:95:b9:c4:fe:
4f:f4:22:f2:be:f4:51:f1:76:12:f5:de:0b:1b:df:
e3:18:dd:ef:0a:64:17:de:54:d5:58:bf:1c:7d:5b:
0a:16:9f:64:a7:45:d3:71:77:d1:2b:51:81:34:04:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:AE:4C:5E:18:AE:70:27:4C:F9:1A:FE:45:4C:E0:D0:E1:94:31
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:a2:23:27:79:1f:7f:0e:ee:88:b5:4b:94:6e:70:ad:ef:
b0:3e:20:1a:d6:ab:9d:9d:f5:d4:2f:1b:87:cc:aa:d2:e4:5a:
52:57:cb:fa:07:8c:0c:5b:b4:55:d5:f1:58:5f:a9:78:89:b4:
03:17:c5:d1:b5:93:4e:70:d9:83:b6:a9:bd:59:57:62:f1:bc:
81:88:30:c3:9c:82:59:3c:87:79:53:52:cd:b2:d7:b4:b9:51:
4b:fc:8c:a4:1c:ad:d1:e4:7f:97:71:56:49:26:28:14:50:60:
15:91:80:f1:8d:5f:1a:09:74:31:fd:33:bf:69:f5:99:d4:c4:
4c:cc:c5:50:41:6e:88:7c:9e:73:e0:cb:bc:8d:60:05:19:61:
97:e8:42:c8:70:1b:1b:c7:22:be:c3:4e:a6:72:31:6d:d8:95:
92:6f:88:8b:8a:79:af:82:6e:00:b1:39:55:61:c2:63:fa:14:
8d:24:f5:57:21:21:04:25:c2:06:a6:2a:31:ad:02:41:96:a2:
ce:db:5f:56:7d:22:2b:1e:13:18:7e:5d:73:79:4e:c3:ed:88:
72:ff:7a:09:80:92:14:44:ee:cc:35:de:6a:c9:97:c2:f6:ae:
84:54:d9:a6:17:6c:55:54:bc:3b:b2:70:fb:3a:cb:d0:3f:f9:
b0:4a:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 02:09:19 2026 by rpki-client