Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: 8UqvAWKxo+wuIsB7peXdk83WVigf5mX1Jzva25flttg=
Subject key identifier: 0E:62:17:18:D4:AB:4E:44:AA:54:4E:53:D2:31:7D:97:75:CD:92:3F
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019E74095C438B3C0BFCB806CC998F6DB66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1949
Signing time: Fri 29 May 2026 14:00:30 +0000
Manifest this update: Fri 29 May 2026 14:00:30 +0000
Manifest next update: Sat 30 May 2026 14:00:30 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: cV2YY/4kuTaOXSvpoZoE7FUGZGKo6Vpj8trg9pGzNK4=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:09:5c:43:8b:3c:0b:fc:b8:06:cc:99:8f:6d:b6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: May 29 14:00:30 2026 GMT
Not After : May 30 14:00:30 2026 GMT
Subject: CN=0e621718d4ab4e44aa544e53d2317d9775cd923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:6d:01:8c:2a:a2:fa:40:2f:f5:a2:d4:c6:
e6:04:aa:41:75:87:07:76:66:13:2f:aa:f8:8b:c7:
d3:a9:bf:4f:5b:c3:37:32:d8:8f:24:e5:e0:b2:fb:
46:cc:12:8c:9e:8c:e3:8c:de:10:70:89:5e:49:c1:
0c:f7:8e:a7:1d:5c:cd:fc:43:44:7e:b1:87:c6:e6:
46:b0:f0:cb:be:3d:b4:6e:80:b1:2d:a0:4f:9b:17:
1e:c8:1b:cc:be:b6:59:51:8b:79:e7:1e:cd:9d:7a:
d3:5a:bc:a9:3d:2c:62:7b:ef:40:98:a6:62:de:35:
af:51:30:b7:21:f6:57:d2:f0:69:cb:5e:e0:2b:b9:
4e:0b:99:91:a8:a2:78:92:57:09:a0:ff:bf:e8:3e:
84:82:60:ee:a5:f9:42:8a:61:5c:d1:49:fa:3c:b5:
21:ca:57:73:c2:2e:c3:dc:dc:0e:2f:d5:47:d9:f4:
5d:36:b1:18:92:8b:1e:46:ca:e2:e6:ed:79:48:ed:
9a:86:4b:a8:af:62:a0:ca:d3:af:2a:ed:fe:f0:13:
71:0a:0d:bf:4d:b5:e0:7d:95:be:1e:76:d1:aa:7f:
e3:db:fd:ac:16:b7:a6:66:2c:e2:2a:ac:ff:6b:99:
a8:7e:f6:7e:ab:61:b7:31:2f:7f:dd:6c:7d:57:be:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:17:18:D4:AB:4E:44:AA:54:4E:53:D2:31:7D:97:75:CD:92:3F
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ba:ec:f4:6e:1b:11:54:a0:00:33:37:37:f9:e7:90:bb:94:
a9:85:1e:65:ab:af:a7:8a:31:ab:23:d6:a6:a5:d9:5e:dd:d1:
b5:f5:1c:2d:2f:d6:8c:27:13:7f:40:3d:71:a0:6f:8c:0e:0c:
93:e9:43:71:4c:eb:7e:43:9d:71:23:af:63:67:23:9a:49:3f:
44:2b:d9:40:49:37:e6:fb:8b:cb:ba:3e:1d:83:fd:21:c1:0b:
f0:73:e6:36:85:db:67:43:81:bf:4a:84:2b:d3:d0:7a:00:13:
9a:20:9a:42:22:90:cf:35:9e:0e:a1:01:86:1c:27:17:18:a2:
76:bd:a0:9f:dc:b2:e0:50:52:c8:6d:bd:90:09:54:ef:34:9c:
20:00:3e:ac:6b:ff:b7:d1:3f:42:c7:4e:ce:6d:72:56:c5:97:
e8:e6:13:f2:d8:8e:ba:da:cc:12:75:9b:70:7e:00:09:b8:b9:
87:0a:02:10:5f:b0:6b:f6:7c:ba:b9:11:23:a4:26:77:0b:65:
d5:c1:5e:76:b8:5b:80:b3:0f:fa:eb:1a:1c:76:b1:7c:12:03:
84:ac:58:08:de:c1:85:9d:da:a9:42:28:d6:4a:bd:81:d5:60:
3e:a6:96:bd:c1:6a:48:9b:1e:c2:c3:9c:44:1a:3d:b4:26:63:
8a:1e:db:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ50CVxDizwL/LgGzJmPbbZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwNTI5MTQwMDMwWhcNMjYwNTMwMTQwMDMwWjAzMTEwLwYDVQQD
EygwZTYyMTcxOGQ0YWI0ZTQ0YWE1NDRlNTNkMjMxN2Q5Nzc1Y2Q5MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRtAYwqovpAL/Wi1MbmBKpBdYcH
dmYTL6r4i8fTqb9PW8M3MtiPJOXgsvtGzBKMnozjjN4QcIleScEM946nHVzN/ENE
frGHxuZGsPDLvj20boCxLaBPmxceyBvMvrZZUYt55x7NnXrTWrypPSxie+9AmKZi
3jWvUTC3IfZX0vBpy17gK7lOC5mRqKJ4klcJoP+/6D6EgmDupflCimFc0Un6PLUh
yldzwi7D3NwOL9VH2fRdNrEYkoseRsri5u15SO2ahkuor2KgytOvKu3+8BNxCg2/
TbXgfZW+HnbRqn/j2/2sFremZiziKqz/a5mofvZ+q2G3MS9/3Wx9V75tswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5iFxjUq05EqlROU9IxfZd1zZI/MB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7rs9G4b
EVSgADM3N/nnkLuUqYUeZauvp4oxqyPWpqXZXt3RtfUcLS/WjCcTf0A9caBvjA4M
k+lDcUzrfkOdcSOvY2cjmkk/RCvZQEk35vuLy7o+HYP9IcEL8HPmNoXbZ0OBv0qE
K9PQegATmiCaQiKQzzWeDqEBhhwnFxiidr2gn9yy4FBSyG29kAlU7zScIAA+rGv/
t9E/QsdOzm1yVsWX6OYT8tiOutrMEnWbcH4ACbi5hwoCEF+wa/Z8urkRI6Qmdwtl
1cFedrhbgLMP+usaHHaxfBIDhKxYCN7BhZ3aqUIo1kq9gdVgPqaWvcFqSJsewsOc
RBo9tCZjih7bag==
-----END CERTIFICATE-----
Generated at Fri May 29 18:08:07 2026 by rpki-client