Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: LXXjuUgkDv1yEJJczU/80R+J9HM79svKqoJO4Bv50Mc=
Subject key identifier: 42:09:5D:86:27:7E:17:6B:07:35:A5:EE:15:00:4C:27:7B:2A:95:9D
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D5FE1318B4CCDF3979BA8EFE49517F34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18BA
Signing time: Sun 05 Apr 2026 23:01:26 +0000
Manifest this update: Sun 05 Apr 2026 23:01:26 +0000
Manifest next update: Mon 06 Apr 2026 23:01:26 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: gJuMgSCe+xMJLtkMpR92hOfguFcW6GaV/5aIFnQ6kGk=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5f:e1:31:8b:4c:cd:f3:97:9b:a8:ef:e4:95:17:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 5 23:01:26 2026 GMT
Not After : Apr 6 23:01:26 2026 GMT
Subject: CN=42095d86277e176b0735a5ee15004c277b2a959d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:3b:97:13:df:80:8a:3e:d0:83:54:22:58:
d9:c0:9f:86:73:66:e0:37:68:97:5f:d5:b7:20:0e:
4d:5b:7b:0a:9e:6a:82:a6:72:01:78:e5:c9:4d:33:
f9:6c:ab:d3:f2:c9:6e:d5:2a:f4:3e:89:2b:88:87:
5c:f9:60:5b:13:4f:a4:13:53:12:4f:7e:bc:dd:a4:
ce:f9:73:3c:53:c4:fe:31:b9:2d:f2:47:42:e7:7d:
1a:97:84:61:4a:44:84:bb:72:c8:84:13:b3:b8:1a:
c9:43:eb:bc:70:8e:fa:d2:fa:83:57:a8:c5:7f:ff:
eb:fc:5c:db:65:e6:f7:41:1b:9a:a4:d2:75:da:66:
06:a4:ce:9a:70:08:a1:95:15:b9:51:0f:b7:ad:a8:
d2:ad:95:86:36:b7:69:84:20:d2:6a:11:8e:ad:64:
7a:52:a7:36:90:34:40:e0:88:78:c0:78:df:6e:ca:
ed:c0:8d:b8:4a:6c:66:0f:ab:da:c1:86:56:2d:29:
b8:95:d1:14:6c:76:48:54:9a:d4:2e:c7:e4:cf:f8:
81:9b:e2:e6:3c:be:42:56:43:24:93:62:fd:f1:fc:
ec:ea:3a:bb:33:57:5b:8f:50:ac:c7:36:78:07:c3:
28:c9:32:4b:e5:54:87:e6:bb:cb:8a:a1:51:72:d4:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:5D:86:27:7E:17:6B:07:35:A5:EE:15:00:4C:27:7B:2A:95:9D
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:a8:fc:17:7e:9c:b5:04:0e:b7:fd:cf:a6:af:af:3d:cf:
7b:34:74:61:2a:0e:16:56:8f:c5:3c:46:9f:9c:26:ee:b3:53:
66:17:8f:92:fc:08:8e:6d:95:9f:35:ae:14:e0:29:62:b1:d9:
a0:ef:52:8e:20:ca:ea:f3:8d:66:61:6e:62:04:20:14:28:35:
66:c7:e0:42:65:73:64:15:0f:97:39:ec:c3:a7:bf:7c:53:71:
f2:6a:a9:d9:29:fe:cd:de:59:66:2f:59:2d:68:91:5b:86:b1:
60:ca:70:f5:c4:44:e6:1b:4d:51:c6:60:8f:f9:7e:7f:1d:d9:
3c:ef:9c:21:6e:e0:a6:96:46:ca:0c:e1:07:fc:a4:25:39:23:
2a:80:ff:e1:97:88:6d:38:7b:56:0e:0e:ee:ad:1e:92:ea:63:
fd:f1:9b:3a:d2:c7:ba:a4:0e:64:82:30:98:0b:13:ff:2c:02:
8e:f2:91:b9:f3:c5:2c:6e:5b:ac:4e:b8:62:61:66:56:3f:bf:
d6:0b:2c:87:79:de:57:17:cb:c8:9f:80:77:68:b9:89:13:34:
96:0b:de:e2:1a:3b:fc:8f:0f:48:21:09:6f:c1:1b:da:b7:5e:
f1:06:d3:78:01:c5:64:b5:04:f7:b2:a0:81:85:bb:1a:b8:5a:
6a:16:91:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1f4TGLTM3zl5uo7+SVF/NOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwNDA1MjMwMTI2WhcNMjYwNDA2MjMwMTI2WjAzMTEwLwYDVQQD
Eyg0MjA5NWQ4NjI3N2UxNzZiMDczNWE1ZWUxNTAwNGMyNzdiMmE5NTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdk7lxPfgIo+0INUIljZwJ+Gc2bg
N2iXX9W3IA5NW3sKnmqCpnIBeOXJTTP5bKvT8slu1Sr0PokriIdc+WBbE0+kE1MS
T3683aTO+XM8U8T+Mbkt8kdC530al4RhSkSEu3LIhBOzuBrJQ+u8cI760vqDV6jF
f//r/FzbZeb3QRuapNJ12mYGpM6acAihlRW5UQ+3rajSrZWGNrdphCDSahGOrWR6
Uqc2kDRA4Ih4wHjfbsrtwI24SmxmD6vawYZWLSm4ldEUbHZIVJrULsfkz/iBm+Lm
PL5CVkMkk2L98fzs6jq7M1dbj1CsxzZ4B8MoyTJL5VSH5rvLiqFRctQUswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIJXYYnfhdrBzWl7hUATCd7KpWdMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvqo/Bd+
nLUEDrf9z6avrz3PezR0YSoOFlaPxTxGn5wm7rNTZhePkvwIjm2VnzWuFOApYrHZ
oO9SjiDK6vONZmFuYgQgFCg1ZsfgQmVzZBUPlznsw6e/fFNx8mqp2Sn+zd5ZZi9Z
LWiRW4axYMpw9cRE5htNUcZgj/l+fx3ZPO+cIW7gppZGygzhB/ykJTkjKoD/4ZeI
bTh7Vg4O7q0ekupj/fGbOtLHuqQOZIIwmAsT/ywCjvKRufPFLG5brE64YmFmVj+/
1gssh3neVxfLyJ+Ad2i5iRM0lgve4ho7/I8PSCEJb8Eb2rde8QbTeAHFZLUE97Kg
gYW7GrhaahaRkg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 06:36:21 2026 by rpki-client