Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: /UAaFfvZ8GnIi5em4w2Fyl74jbx/zdGHjNQ7xLhiIic=
Subject key identifier: DB:62:2F:11:E4:DF:BF:93:3D:BC:0E:26:20:F5:81:BF:A7:4B:7A:4E
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019CD4D4938D6AAB9594FBF750B5865A2106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1872
Signing time: Mon 09 Mar 2026 23:00:26 +0000
Manifest this update: Mon 09 Mar 2026 23:00:26 +0000
Manifest next update: Tue 10 Mar 2026 23:00:26 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: PY04dcn6/LmEy0pcmTTKT2xIdToAl4L2BxX+ZvNdQq8=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 15:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d4:d4:93:8d:6a:ab:95:94:fb:f7:50:b5:86:5a:21:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 9 23:00:26 2026 GMT
Not After : Mar 10 23:00:26 2026 GMT
Subject: CN=db622f11e4dfbf933dbc0e2620f581bfa74b7a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:c7:68:21:bc:9d:bf:c7:6f:3d:59:20:4d:
ce:3e:0b:c1:bf:53:78:16:6a:44:1c:e2:c5:22:09:
c2:5c:d6:d8:41:9d:dc:50:a4:6e:84:cb:bc:4e:78:
89:35:e8:96:b8:64:9d:12:99:02:fc:0f:58:62:bb:
a8:66:c7:50:8e:cd:ea:d9:7a:a4:63:18:99:40:0c:
71:cd:46:04:b1:2a:da:18:0d:73:e0:6c:63:9f:58:
eb:2b:cf:83:ac:f6:28:06:a6:56:c1:76:8a:44:70:
38:0c:b8:79:33:77:84:90:82:2a:5e:24:bb:63:e2:
71:b1:ed:30:9f:2d:ca:33:a6:6f:22:72:af:fd:48:
5c:cc:94:37:4b:a0:53:7b:5b:13:2e:c6:7a:e8:8a:
01:03:54:68:22:d6:d7:8c:68:97:1b:c5:6a:90:8a:
fc:97:84:37:6f:2b:6e:42:38:d6:e5:5a:08:49:3e:
c9:3f:2e:05:c0:a6:82:7b:e1:5b:6d:a6:8d:a5:07:
22:1f:7e:1c:7c:3d:1c:00:c9:44:c0:df:de:fb:49:
18:05:0d:04:a7:2b:c1:65:ab:6c:1a:af:03:f4:2b:
5c:a8:24:9f:46:41:37:5d:8d:fb:35:14:39:a2:1d:
67:bc:52:80:2c:4f:25:33:df:49:30:52:3a:04:1f:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:2F:11:E4:DF:BF:93:3D:BC:0E:26:20:F5:81:BF:A7:4B:7A:4E
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ce:44:52:60:4b:f3:a3:60:78:5b:1e:5f:be:97:b2:46:4d:
e0:73:53:ae:2a:c1:6a:84:6e:2b:d7:c9:7f:61:e1:95:d9:7a:
23:29:6f:4b:0d:c2:99:ef:dd:0e:0e:1d:6d:1c:4e:44:93:f9:
f2:be:6d:26:65:26:c6:87:d9:00:f5:7c:c0:63:8c:d2:39:b7:
03:1a:40:d3:7b:78:89:02:77:2c:3c:1d:73:62:5a:a9:5e:ff:
d9:af:83:55:f5:64:71:9b:11:65:b6:d2:04:ba:b5:bd:cc:f7:
7e:fd:e7:03:cb:b4:72:c9:5b:3c:57:3f:d0:8f:e7:ea:4d:d5:
a4:41:a7:d5:51:b9:4f:00:24:57:a4:c7:36:70:ab:ae:61:b0:
28:61:f6:8f:17:be:83:85:4e:0e:b9:69:d4:b4:76:f6:2f:21:
15:49:de:35:58:a4:d1:06:c2:60:2e:70:13:89:c7:89:6c:7b:
51:46:fb:b0:ea:e1:f9:23:7f:13:75:04:1a:dd:e3:ed:b7:90:
31:fa:88:81:ca:32:37:95:ad:c2:4d:53:30:1b:c7:18:43:24:
91:cf:c1:ac:64:c5:fd:d1:04:4b:3d:a3:27:1c:d6:b8:0d:5c:
69:9e:1f:e8:31:f2:1a:8c:c7:e4:e5:04:86:99:fe:a5:e3:d0:
38:15:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 01:21:12 2026 by rpki-client