Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: moms0A+ahhRHR2vufVe7rvzu+zGvkBvpjvwD/mELtM0=
Subject key identifier: ED:A9:AA:DD:16:A1:1C:1B:70:86:06:E2:4E:EE:9D:BD:EF:5D:ED:8C
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D7CD8DA8038FA100F5352A170BB0B11F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18C9
Signing time: Sat 11 Apr 2026 14:01:19 +0000
Manifest this update: Sat 11 Apr 2026 14:01:19 +0000
Manifest next update: Sun 12 Apr 2026 14:01:19 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: qi0aS+buKtltgyaGK5Yd3x6PoJgqOa/Kv5RHUN6rSJA=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7c:d8:da:80:38:fa:10:0f:53:52:a1:70:bb:0b:11:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 11 14:01:19 2026 GMT
Not After : Apr 12 14:01:19 2026 GMT
Subject: CN=eda9aadd16a11c1b708606e24eee9dbdef5ded8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:83:71:14:15:09:27:ae:6a:9d:5a:56:0a:e0:
3c:ec:71:60:36:84:86:c5:ef:e9:f9:91:04:d0:cf:
15:81:5d:72:cb:4f:4d:f5:4d:80:88:51:c0:3f:3f:
00:52:45:13:84:12:f4:3c:78:6e:0b:69:24:ec:79:
59:6d:82:1c:eb:41:4d:24:15:f1:40:31:c1:c7:3b:
ec:58:06:e9:0b:79:68:5a:60:da:18:6f:4a:94:84:
ec:cf:d3:c4:17:09:00:4e:66:ad:32:0d:b9:10:db:
c6:61:4a:dc:39:2c:c8:14:18:b4:15:a5:30:4f:5d:
1b:d5:c0:6f:e1:3e:d5:61:37:b8:9d:06:41:e0:5a:
46:e1:88:d0:b2:42:41:9f:4a:99:a6:94:08:ca:58:
47:74:03:c4:61:f1:31:a5:20:1c:2c:8f:0c:28:5d:
5c:4c:04:73:7b:6d:be:84:33:7d:da:a6:23:f9:01:
2e:e5:65:58:3a:30:62:08:88:5e:0d:85:f2:c7:15:
80:72:12:9b:f8:c4:69:fe:f5:72:49:29:81:9e:b4:
d5:46:9a:81:66:4b:c3:ba:b0:f3:10:89:14:bf:0d:
5b:89:f4:72:ac:b5:0d:ce:dc:64:63:8e:fd:87:0e:
42:03:14:8b:a9:f9:6c:88:6f:c1:ec:bc:3f:9f:44:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:AA:DD:16:A1:1C:1B:70:86:06:E2:4E:EE:9D:BD:EF:5D:ED:8C
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:1a:cb:3c:d2:c1:42:1a:2b:d4:97:ce:c5:cb:36:f4:2e:
3d:2f:70:70:25:ec:10:b5:ff:d7:ea:1c:2f:65:d6:6a:25:a5:
3d:aa:ca:fa:cc:12:02:d8:f3:d8:0a:24:7b:89:f5:77:0c:f0:
7c:21:3a:1c:78:d3:b7:c6:56:ff:b9:cd:b7:1a:b6:1e:3f:c6:
5d:e6:f3:2e:4b:35:42:48:28:86:52:de:bd:b1:f2:36:93:b4:
6a:bb:fc:20:f8:ee:d6:2e:6d:e4:ba:07:4f:27:f2:b6:5f:f6:
11:a8:c0:45:be:d8:0f:58:69:99:cc:94:64:70:a3:c6:0c:24:
be:d2:c1:4e:3b:c1:e9:8f:56:0c:9e:59:98:9a:76:2a:2f:fc:
ec:1c:e1:d1:23:43:a6:66:0a:48:d8:6d:5a:47:94:93:d3:57:
ab:d5:82:e2:13:15:c0:2c:64:e2:d5:04:b6:1e:cf:10:71:b9:
a4:a4:b1:88:e4:ad:4c:3a:16:4b:b3:85:09:41:9c:c7:05:c2:
a2:0d:7c:7f:30:e9:5f:d5:bc:d5:94:f3:bf:b0:1b:19:00:8e:
9d:9a:ac:11:61:a4:15:eb:b4:d6:d9:b6:55:a0:97:31:0b:c9:
5c:58:2f:b7:5b:40:26:69:94:da:78:74:26:5d:52:52:10:27:
36:ca:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 17:55:42 2026 by rpki-client