Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: pD/6f2u9zbdycW2lONAKCiNlwZM3INXbTp9q8SEsHG4=
Subject key identifier: 7F:BA:FA:F4:DE:3A:E8:1E:97:99:A7:15:62:4E:EA:9A:97:02:2E:21
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D78FB8A6890F45B3BDDDECC92F814842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18C7
Signing time: Fri 10 Apr 2026 20:00:44 +0000
Manifest this update: Fri 10 Apr 2026 20:00:44 +0000
Manifest next update: Sat 11 Apr 2026 20:00:44 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: KLmRCY/j9fjZ6q9c/jTBHQHnND0TJXaNyDdnWA73tes=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:fb:8a:68:90:f4:5b:3b:dd:de:cc:92:f8:14:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 10 20:00:44 2026 GMT
Not After : Apr 11 20:00:44 2026 GMT
Subject: CN=7fbafaf4de3ae81e9799a715624eea9a97022e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:06:ff:d9:1d:97:2d:f6:3e:0f:7a:1f:51:
e3:2a:c7:ce:9f:32:f1:ec:2e:60:a5:b6:71:3d:6b:
51:d8:19:87:fa:22:a7:08:06:e6:53:b0:ac:71:22:
d0:62:b9:39:00:4d:e8:95:a8:57:db:a6:64:34:08:
aa:cc:00:f6:af:2a:08:cf:97:b2:4e:7e:f2:03:cb:
c9:5e:3f:bf:cd:c4:9a:e5:bf:12:c6:4b:7e:a0:ed:
dd:44:4e:1f:90:0f:cc:92:26:00:10:36:f3:6e:0f:
ad:6e:03:79:16:b5:e5:75:a8:9b:27:e9:3c:66:c7:
08:3e:91:1f:20:c4:1c:ca:fc:00:ee:83:93:b2:87:
69:1a:66:58:4d:69:71:24:3e:68:01:78:30:ae:14:
c5:df:fb:02:3b:7d:53:be:a4:da:d2:21:7b:fc:b0:
1b:c4:51:eb:08:b9:7d:05:bb:1d:ca:92:9a:8a:66:
66:2c:0a:cf:0f:db:b7:e2:ee:08:d6:01:75:a7:c2:
22:3e:45:21:a9:ff:24:c2:7b:21:cb:48:52:e5:92:
d1:f5:83:19:74:da:f1:87:5e:01:a0:e9:d6:ea:22:
ff:e7:05:cb:e7:c6:8e:88:ad:90:aa:ac:4d:fa:bb:
a2:ca:bc:1b:f9:7e:84:73:a4:23:d6:ea:92:ff:13:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:FA:F4:DE:3A:E8:1E:97:99:A7:15:62:4E:EA:9A:97:02:2E:21
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ad:a8:23:87:86:1b:f4:b9:c4:f7:de:8c:df:49:7d:ab:8d:
34:44:5a:2c:4a:fe:aa:cb:9a:16:38:6c:a6:7d:0f:95:0b:00:
46:23:75:c5:5c:5b:49:a5:01:85:65:d3:72:f7:b8:e8:2c:93:
ea:fd:91:4b:7e:78:15:08:0d:1c:26:1f:87:bf:b6:0b:14:c3:
b0:c5:40:b4:e3:88:a2:16:a5:43:90:54:fa:02:eb:5e:44:28:
1c:f8:27:53:07:ab:44:d7:b6:ed:8d:5d:f9:f1:1d:42:80:ed:
46:77:20:78:65:23:93:ce:44:cd:86:06:3d:48:b2:cb:22:75:
52:f1:c7:ba:00:35:d8:05:9d:ff:20:31:78:53:4d:fd:b9:12:
ec:b9:4c:7c:5c:23:38:3e:22:87:e2:08:3c:18:64:17:f9:3b:
d8:6e:dc:ec:01:65:a0:9f:87:a2:6b:f1:cd:be:6b:dc:b9:45:
de:a2:8d:c7:38:f9:2e:c8:dc:74:71:50:b5:3a:1e:b8:4f:bb:
03:a8:ec:f5:04:25:1b:a8:2e:23:e0:cc:42:95:6b:20:45:ae:
a1:cc:b6:d2:8f:6d:c4:3f:e1:69:bf:15:df:8c:86:6e:43:c1:
eb:0e:33:3b:28:25:cc:b4:b7:4b:f5:1b:c1:b1:6c:50:5c:9a:
e3:8d:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 05:13:12 2026 by rpki-client