Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: KxNi46HE/UksdI9g8I4QPEsg0NbOAgYPi58lkmclIhE=
Subject key identifier: 5D:93:8B:62:6C:0F:F2:CA:65:50:1C:97:1C:7A:F0:EA:8C:CD:1F:DA
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019EDFC1B9275D6FBC53543112FE02628BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1983
Signing time: Fri 19 Jun 2026 12:01:15 +0000
Manifest this update: Fri 19 Jun 2026 12:01:15 +0000
Manifest next update: Sat 20 Jun 2026 12:01:15 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
3: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
4: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
5: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
6: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
7: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
8: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: mZ4CLXeWLvIU4OOxBv/B0KPQLtSa7e6NOEkYhGHVnfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:c1:b9:27:5d:6f:bc:53:54:31:12:fe:02:62:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jun 19 12:01:15 2026 GMT
Not After : Jun 20 12:01:15 2026 GMT
Subject: CN=5d938b626c0ff2ca65501c971c7af0ea8ccd1fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:f4:87:6d:c8:10:36:71:dd:6b:fe:b0:c4:
99:fb:c6:09:e3:fb:f2:53:9e:31:a4:98:3a:f7:a1:
4a:f7:39:01:fb:5b:6a:b5:9a:15:d8:7e:da:67:44:
db:a2:87:ce:c2:c6:ad:d2:cc:25:39:09:1a:60:b3:
34:a0:26:e8:6d:9a:a9:35:c2:b5:ff:5e:0c:75:5c:
15:be:1f:34:e4:f1:57:32:d9:07:8c:df:40:c1:87:
bd:af:9f:e1:a9:8a:8b:3f:44:a3:3d:ff:a6:a9:d3:
b9:3f:57:8c:10:3d:99:f4:fd:1a:60:92:3c:d6:ba:
0f:4b:1a:60:a1:87:68:17:00:98:3a:24:e4:1d:26:
37:f9:2d:0d:2e:dd:02:31:67:20:62:93:af:3f:ad:
6c:9b:f2:89:eb:44:d1:52:e5:cd:31:76:a8:79:d4:
ec:8e:0a:da:73:13:dd:f9:19:1c:1c:cd:a4:09:58:
2a:10:2f:0f:c0:4c:3e:a9:61:df:bf:a5:b2:b3:95:
b0:1e:ec:5c:31:81:63:45:56:54:8a:10:dc:4e:ec:
26:4e:1b:67:f0:83:ba:28:92:26:b2:95:95:0b:ef:
df:50:c1:e5:a9:c9:60:64:6e:58:6a:46:1a:4d:1c:
12:a0:d3:04:80:56:2a:b5:f7:54:e9:a4:1a:a5:cd:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:8B:62:6C:0F:F2:CA:65:50:1C:97:1C:7A:F0:EA:8C:CD:1F:DA
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e2:2e:fa:36:7c:02:c1:c0:49:49:2a:b7:4f:b8:1d:81:8c:
ac:b9:69:dc:bb:4e:97:f7:de:57:6c:19:be:c1:05:1f:fc:e1:
6b:fb:2e:86:e0:c9:59:f9:99:98:28:ef:06:a3:e0:60:a6:5f:
ee:df:b1:64:0a:4d:70:04:1e:6b:79:5e:01:20:0d:0b:9b:5e:
35:b5:01:0b:57:2c:e5:a8:84:ec:ef:47:7a:c9:17:23:e6:82:
cd:3a:66:62:9c:8b:60:86:d8:70:ad:77:10:27:21:df:c3:62:
4e:c9:eb:4e:e1:16:b3:85:af:34:eb:5b:24:f9:dc:d7:7e:65:
18:f6:8e:08:f0:bf:47:0b:4d:d1:ec:40:ae:9f:de:b8:ff:72:
9a:19:a3:1a:54:ee:cd:01:30:b2:9c:24:62:9f:6a:a9:69:e0:
3a:1f:8c:db:7c:c5:fe:54:06:14:6a:79:e6:8e:ef:bd:50:4c:
22:d1:2e:26:d1:c3:16:88:89:63:11:a4:2f:7f:11:b7:a0:2c:
91:7a:6f:63:cb:ad:65:29:62:77:0a:f6:e2:ed:c5:a6:98:63:
ed:2d:e0:50:7a:c6:3e:08:eb:6d:e5:55:79:a4:d6:ff:f6:d7:
e0:86:e7:39:84:7f:9e:36:b5:70:ef:10:a1:fa:55:50:d0:58:
92:20:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 21:07:02 2026 by rpki-client