Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: 7mlk6vz77+4Ro+1EGKd5v6kRofVdf3OO+/xwtQC0Fc4=
Subject key identifier: F7:45:EA:75:BC:D0:88:D7:BF:E9:51:E4:E7:64:6D:8E:2F:85:18:3D
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019CA0B0DB3B19035DD6F84C6C3226CAA8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1857
Signing time: Fri 27 Feb 2026 20:01:10 +0000
Manifest this update: Fri 27 Feb 2026 20:01:10 +0000
Manifest next update: Sat 28 Feb 2026 20:01:10 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: XgfOYu0MzKnVse24Olu8OjHU+Jrd8MujbjDf6mL4zQU=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Feb 2026 16:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:b0:db:3b:19:03:5d:d6:f8:4c:6c:32:26:ca:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Feb 27 20:01:10 2026 GMT
Not After : Feb 28 20:01:10 2026 GMT
Subject: CN=f745ea75bcd088d7bfe951e4e7646d8e2f85183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:b5:88:ed:f5:ee:3d:62:97:02:2d:52:ca:
bf:2e:c0:b2:73:85:55:6e:d0:1d:7e:6e:ef:ba:e7:
fe:9b:61:15:43:77:46:8f:1f:3a:d1:b6:4c:5f:a7:
d6:be:d1:f0:8a:9e:5d:29:85:67:71:4e:1b:e3:d8:
94:47:8b:cb:34:48:e0:e3:1d:b7:9c:4a:9f:47:7f:
f9:72:9c:71:d4:bc:e9:f2:bd:ac:72:21:7d:70:84:
79:cb:e0:c1:5e:63:8f:5f:52:16:d4:50:a8:00:34:
a7:36:18:51:1a:f1:db:19:b5:3c:40:9f:33:83:1b:
aa:82:4d:33:1b:ee:ae:65:f7:62:29:d0:d2:d9:cb:
a4:60:7e:0f:72:ae:70:cf:22:9a:22:8f:2a:21:1b:
50:f2:e8:8d:9f:0f:f4:ac:19:43:ef:33:ea:d9:9c:
88:5c:74:ad:81:61:b7:75:21:e6:d1:63:5b:38:e5:
30:49:d9:ec:d4:31:ca:f6:50:c5:ba:e7:af:17:4c:
d7:a1:82:ba:29:2d:aa:8f:ca:77:b3:08:4a:3d:ea:
97:27:be:2f:ce:1b:e0:5c:82:c0:f5:21:d6:d5:d9:
cc:30:a5:4d:55:a7:60:e4:31:62:34:52:93:a8:11:
fa:b2:5d:90:3d:05:7b:70:f6:60:35:97:3a:b8:7b:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:EA:75:BC:D0:88:D7:BF:E9:51:E4:E7:64:6D:8E:2F:85:18:3D
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:e7:f7:dd:e5:ba:78:d2:b1:e2:d3:e1:86:fd:b1:ca:57:
c4:77:48:d2:44:ca:26:1e:2b:e5:69:50:73:85:8a:67:04:02:
67:b7:82:55:17:b7:a8:43:a9:c1:5a:9a:f5:1d:d7:37:03:01:
b8:7e:75:f9:4d:16:81:d7:86:0a:4f:b1:fc:9a:d6:96:ad:f8:
53:21:9c:ae:bb:e5:91:76:fc:cb:8a:d3:6a:ef:61:23:66:c5:
cf:29:90:11:9b:93:20:27:d1:7b:f6:ae:41:01:f1:92:06:e3:
fa:c1:6d:00:36:6e:c8:46:58:c0:1b:56:19:ea:87:36:a6:28:
bc:86:e8:09:0d:31:c7:23:26:45:3b:e8:be:78:d1:ee:a1:90:
b1:f2:a2:4d:49:62:aa:dd:38:77:3c:36:ff:98:f0:64:2d:98:
fd:ee:3a:b4:eb:16:da:a4:a6:7f:83:3b:7f:ce:d8:ee:86:6b:
7f:61:46:2a:d4:c5:42:a1:82:45:3f:a9:1c:5a:e8:b6:ad:10:
54:09:af:0d:46:4e:8a:35:0c:81:38:3f:a2:c9:3f:c3:04:8c:
d6:ee:e3:c0:b5:03:27:b0:d0:cc:32:a2:aa:d1:35:35:6d:e3:
9b:c5:70:50:f9:26:7b:c4:e2:82:39:aa:fb:87:35:55:73:6d:
f2:26:f1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZygsNs7GQNd1vhMbDImyqjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwMjI3MjAwMTEwWhcNMjYwMjI4MjAwMTEwWjAzMTEwLwYDVQQD
EyhmNzQ1ZWE3NWJjZDA4OGQ3YmZlOTUxZTRlNzY0NmQ4ZTJmODUxODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sW1iO317j1ilwItUsq/LsCyc4VV
btAdfm7vuuf+m2EVQ3dGjx860bZMX6fWvtHwip5dKYVncU4b49iUR4vLNEjg4x23
nEqfR3/5cpxx1Lzp8r2sciF9cIR5y+DBXmOPX1IW1FCoADSnNhhRGvHbGbU8QJ8z
gxuqgk0zG+6uZfdiKdDS2cukYH4Pcq5wzyKaIo8qIRtQ8uiNnw/0rBlD7zPq2ZyI
XHStgWG3dSHm0WNbOOUwSdns1DHK9lDFuuevF0zXoYK6KS2qj8p3swhKPeqXJ74v
zhvgXILA9SHW1dnMMKVNVadg5DFiNFKTqBH6sl2QPQV7cPZgNZc6uHt46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdF6nW80IjXv+lR5OdkbY4vhRg9MB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbjn993l
unjSseLT4Yb9scpXxHdI0kTKJh4r5WlQc4WKZwQCZ7eCVRe3qEOpwVqa9R3XNwMB
uH51+U0WgdeGCk+x/JrWlq34UyGcrrvlkXb8y4rTau9hI2bFzymQEZuTICfRe/au
QQHxkgbj+sFtADZuyEZYwBtWGeqHNqYovIboCQ0xxyMmRTvovnjR7qGQsfKiTUli
qt04dzw2/5jwZC2Y/e46tOsW2qSmf4M7f87Y7oZrf2FGKtTFQqGCRT+pHFrotq0Q
VAmvDUZOijUMgTg/osk/wwSM1u7jwLUDJ7DQzDKiqtE1NW3jm8VwUPkme8Tigjmq
+4c1VXNt8ibxAw==
-----END CERTIFICATE-----
Generated at Fri Feb 27 22:22:41 2026 by rpki-client