Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: bKs+ff6cQJFXQUVJYlfw885sFDorD3BjylH9FBZ7FLE=
Subject key identifier: A5:55:05:06:ED:C1:0D:AB:38:FD:D8:18:79:EA:03:23:20:87:9F:DF
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D0AE8E8D4B1718C571CA86FF6348C60AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 188E
Signing time: Fri 20 Mar 2026 11:02:09 +0000
Manifest this update: Fri 20 Mar 2026 11:02:09 +0000
Manifest next update: Sat 21 Mar 2026 11:02:09 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: xyfvOIM7SQx0uxsRtSh6eKMpz2YL4pVDATnTXDdl67w=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e8:e8:d4:b1:71:8c:57:1c:a8:6f:f6:34:8c:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 20 11:02:09 2026 GMT
Not After : Mar 21 11:02:09 2026 GMT
Subject: CN=a5550506edc10dab38fdd81879ea032320879fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:b0:1d:7a:9c:dd:80:5a:e6:f6:de:c4:28:
27:af:9a:7f:8a:46:2b:e8:57:1e:63:f9:69:98:26:
09:de:e9:bd:06:81:62:74:74:c2:de:61:3f:81:39:
8b:c1:ed:fb:f8:d5:d0:8a:c0:3a:29:ba:25:ad:77:
8b:b0:49:d0:c4:d7:e6:ab:6f:6d:e8:60:3a:b9:4f:
83:70:71:8d:5d:3f:8f:8d:9d:df:e0:79:83:e2:91:
37:42:16:08:60:44:09:ab:36:66:6a:bf:0a:39:02:
14:2c:e2:aa:6d:bb:6b:e4:d4:d2:2f:c8:b3:cc:a4:
91:5a:43:06:ab:47:6f:b3:45:78:e9:cb:b1:63:4d:
90:f5:78:36:28:21:8a:af:cd:5a:61:4f:4a:d2:53:
5f:80:cd:f6:74:78:32:22:cc:dd:c7:92:00:0e:81:
a4:35:9f:37:fd:c0:df:be:06:50:7b:99:ff:46:92:
28:2d:b3:b2:dd:e8:86:24:92:de:ae:f1:ba:84:da:
a6:ba:a5:38:89:a5:e2:1c:db:b5:c6:b7:ba:f0:a2:
e5:79:f9:3e:b9:e9:f4:41:38:d0:d5:41:db:da:46:
4f:e9:55:d9:63:b6:2c:f2:9a:bb:c2:aa:da:69:9e:
35:bc:3c:5e:70:e5:4f:15:29:bc:91:17:e7:15:f6:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:05:06:ED:C1:0D:AB:38:FD:D8:18:79:EA:03:23:20:87:9F:DF
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:85:dc:9c:09:86:87:3c:0e:1f:73:5f:ce:34:a9:3f:c9:
60:67:8e:db:33:72:ef:58:40:e9:33:18:36:5b:0d:b1:14:db:
c5:f2:0c:85:4d:01:c1:f4:3c:59:5a:3c:10:73:fa:db:bd:25:
f1:05:43:97:f1:2c:2b:65:9b:a4:c9:cd:f3:3d:3a:95:c1:88:
cc:b3:60:d0:68:3e:4b:dc:ae:d2:ea:45:8f:a4:16:25:ee:7c:
60:3b:7a:b6:f3:56:5b:f7:93:aa:b1:7a:97:2c:0b:5d:81:e7:
21:87:78:9a:ab:c3:af:fc:74:c2:73:fa:4e:5c:77:f5:e1:05:
89:bb:1f:dd:91:64:be:ad:18:55:07:52:11:20:e8:9b:e5:ec:
d2:48:91:eb:f2:71:5a:51:54:24:05:07:48:44:1a:d8:74:14:
40:f5:78:cc:ae:6f:d2:3d:37:1c:e3:70:af:cf:11:9c:60:cc:
e0:e1:74:0e:a6:08:2e:a2:4f:af:9f:72:a1:dc:db:2e:30:a8:
24:08:04:47:fe:78:ff:1a:97:dd:0b:1e:86:1c:c2:0c:97:05:
f1:44:c3:e4:67:a7:b9:46:21:88:c5:c7:1a:fa:19:25:c3:f4:
a3:7c:c8:5e:98:15:60:5d:d5:5d:b0:17:ca:06:69:31:76:9f:
cf:f2:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 20:27:06 2026 by rpki-client