Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: ai0PpTyVzF2nou2zc7vLk2/Jdh3kgq/hLrNXTpuqqvI=
Subject key identifier: 57:7B:11:7A:A5:81:45:44:09:D0:17:A6:F5:CD:33:ED:87:0F:65:48
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019FB9FC2B1F6475E48567853D84B80AEA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 19F5
Signing time: Fri 31 Jul 2026 21:02:18 +0000
Manifest this update: Fri 31 Jul 2026 21:02:18 +0000
Manifest next update: Sat 01 Aug 2026 21:02:18 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 1V648pfuEwHFoE+C14tOFUvXBgxpM+wbnbbAF7Sfd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:fc:2b:1f:64:75:e4:85:67:85:3d:84:b8:0a:ea:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 31 21:02:18 2026 GMT
Not After : Aug 1 21:02:18 2026 GMT
Subject: CN=577b117aa581454409d017a6f5cd33ed870f6548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:f3:9e:a8:fd:6f:0f:3f:11:61:f4:86:56:
72:bd:d0:1e:4f:84:6f:f9:a3:6b:1e:44:5b:73:29:
86:e6:44:7a:f9:62:23:1a:43:9c:5f:18:36:96:59:
0a:3a:9a:3d:44:58:33:5d:5f:6b:44:d6:a1:f4:74:
82:e0:5d:88:d1:c5:1c:8b:d0:9d:53:c0:7d:a2:8f:
8b:6b:f2:5b:d9:03:e0:52:f5:e6:f5:5c:83:12:96:
a5:9c:8f:53:7a:56:ab:ba:ff:a2:34:80:f0:34:86:
c5:19:01:3a:f8:a3:b2:f2:b0:f0:d8:88:e8:28:2a:
39:a7:a9:1e:85:14:39:41:91:a0:ea:0f:46:22:f8:
00:79:40:91:ab:f5:96:b5:5a:ff:c5:56:7e:47:8e:
69:5a:55:f9:89:6c:73:2c:13:19:6b:24:0c:b7:2d:
87:d0:c2:14:5e:f2:3c:1d:d1:bb:2a:f7:22:1a:58:
b7:32:44:e5:b6:34:0d:4f:16:60:f6:28:d4:9f:52:
b2:f5:17:f4:58:4e:16:3f:e5:13:06:b3:ef:e8:24:
1c:6c:ae:cb:3d:82:00:6a:0a:24:3e:3a:88:e9:66:
77:b3:54:a8:07:eb:8d:89:d1:4a:fe:4a:9f:c2:dd:
49:eb:1f:77:bf:de:65:12:4f:ae:92:f7:01:13:47:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:11:7A:A5:81:45:44:09:D0:17:A6:F5:CD:33:ED:87:0F:65:48
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:fe:9e:81:de:4b:72:fc:88:b9:8f:ee:cb:9d:0c:00:70:
13:10:4d:78:41:a6:9c:d5:4a:a1:9c:39:09:78:49:cd:5f:b7:
2b:19:1c:39:7a:57:5d:60:27:4c:fc:4e:d9:00:45:4a:7c:f5:
98:e9:ef:12:47:98:b4:fc:9c:82:7f:f2:de:36:13:60:65:ee:
f1:76:75:7d:a4:25:6f:84:d0:5d:b1:0d:35:cd:c3:d0:f8:cb:
e6:35:a9:b6:a5:e1:b6:f2:af:d2:6d:7a:05:92:e2:ea:08:8b:
83:41:ef:68:7f:5a:05:24:e0:aa:33:16:93:b2:c0:75:24:3e:
93:8b:e5:22:7b:c5:76:4c:b1:6a:0b:5c:aa:be:b2:bb:d3:44:
ff:eb:9c:ac:de:9e:37:fe:60:9d:5e:c7:b0:2b:11:96:2f:95:
5b:07:df:0e:29:31:bf:b3:0f:61:ec:3f:b2:58:95:37:2b:30:
2f:0e:4e:7e:20:8f:4a:ec:9a:0f:7a:dc:0a:5f:45:9f:2a:b2:
a3:33:7b:47:47:2b:48:20:04:af:82:13:b4:ab:1a:0c:ac:47:
66:aa:a3:86:7a:c3:cb:4d:8c:5a:7b:ea:d2:80:5a:b9:f1:28:
45:ce:4f:f1:37:f2:0b:49:ef:2c:eb:c1:2c:ac:37:1a:02:f2:
69:c6:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 01:46:38 2026 by rpki-client