Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: ZHucFjQt4PCdxkXhM0O0dCw2J6A2jchUFxAxCnAXY8E=
Subject key identifier: A1:80:EC:CC:09:55:9C:C4:36:D4:AA:1F:28:95:5B:D9:15:A2:3E:7A
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019DE521A82939A5635671A13FA70A252590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18FF
Signing time: Fri 01 May 2026 20:01:21 +0000
Manifest this update: Fri 01 May 2026 20:01:21 +0000
Manifest next update: Sat 02 May 2026 20:01:21 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: VwN/1btZCT2Nwn4l4OWikghYsRb3iykTlT/g+6WZzKs=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:21:a8:29:39:a5:63:56:71:a1:3f:a7:0a:25:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: May 1 20:01:21 2026 GMT
Not After : May 2 20:01:21 2026 GMT
Subject: CN=a180eccc09559cc436d4aa1f28955bd915a23e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:28:95:68:1e:40:6c:6b:1f:b3:b2:73:87:
56:13:16:1f:2c:12:4b:b4:f6:39:f8:4d:16:37:2e:
02:25:41:c7:36:9b:72:43:ca:41:e6:3e:df:1f:f1:
aa:14:5f:1b:9e:93:e1:d0:f9:9f:fe:5b:7d:0b:ef:
9d:cc:89:c3:2b:fb:67:f1:85:ab:fa:09:74:87:c9:
8e:8f:2f:e4:13:dd:d4:90:2d:e9:44:fc:62:cd:f1:
49:b6:06:f2:91:81:c1:6d:05:98:3d:53:8d:78:d6:
0c:b1:bc:1f:d2:22:a7:8f:58:11:f8:d0:24:80:64:
cb:84:12:c2:6c:76:a4:33:04:1f:b2:ed:93:a1:65:
07:08:91:57:0b:d7:b2:7d:a2:e0:25:6e:0c:27:86:
ad:cc:36:9c:32:43:48:8c:1c:15:0d:d9:55:84:31:
7c:de:cf:05:44:c8:d8:2c:4b:24:36:b5:a4:49:3e:
e3:6f:0f:70:db:7e:c1:0f:02:34:83:9d:af:d3:51:
e1:de:3a:c6:91:5c:77:64:9b:d8:a6:75:70:19:2f:
85:3b:e6:d7:ff:2b:4d:ae:97:c6:4f:04:ac:3b:a2:
17:a1:fc:cd:d7:9e:69:de:7d:9e:53:cb:21:6b:88:
b7:ae:88:dd:0b:a8:de:c6:80:f2:38:2b:8e:95:b2:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:80:EC:CC:09:55:9C:C4:36:D4:AA:1F:28:95:5B:D9:15:A2:3E:7A
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:91:e2:2d:a7:42:fe:1e:38:88:a0:7b:ec:0d:65:76:7a:44:
9c:06:fc:72:69:25:8b:ff:0c:ce:00:82:31:4e:e2:96:18:55:
11:fa:20:9c:ac:63:87:63:34:7b:6c:14:e1:7c:4c:a0:65:24:
d8:c3:eb:87:ac:ae:84:c2:d9:dc:59:e1:a5:4e:e1:e5:58:d2:
9b:9e:15:76:83:f7:57:f9:03:7f:fc:53:95:de:58:84:94:c6:
12:29:78:02:db:b5:d3:29:8b:1a:4e:1c:0c:79:04:ed:8b:17:
eb:14:a4:f9:3a:79:55:b2:4c:49:ab:5d:e8:6c:eb:65:30:22:
2f:9f:4c:dd:6f:7d:36:c2:80:54:ba:22:5d:10:cb:ba:05:6b:
34:45:cb:40:94:4c:d4:7e:04:1e:83:ea:aa:46:89:ca:45:e3:
5d:4c:18:31:1e:0b:33:11:79:01:7c:b4:65:93:d0:2b:83:36:
c3:fe:fd:72:f6:61:21:0b:74:10:4e:17:16:9f:73:17:a7:e6:
42:77:4b:81:c2:2d:6c:b5:2f:1b:02:99:fe:38:f1:69:58:64:
96:6f:bc:33:e1:a6:8a:5f:68:4a:a6:c6:fe:78:98:c7:58:d5:
fd:f6:3f:2b:dd:a8:f6:90:4f:cd:09:05:f0:53:27:aa:76:77:
eb:d9:c6:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3lIagpOaVjVnGhP6cKJSWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwNTAxMjAwMTIxWhcNMjYwNTAyMjAwMTIxWjAzMTEwLwYDVQQD
EyhhMTgwZWNjYzA5NTU5Y2M0MzZkNGFhMWYyODk1NWJkOTE1YTIzZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKYolWgeQGxrH7Oyc4dWExYfLBJL
tPY5+E0WNy4CJUHHNptyQ8pB5j7fH/GqFF8bnpPh0Pmf/lt9C++dzInDK/tn8YWr
+gl0h8mOjy/kE93UkC3pRPxizfFJtgbykYHBbQWYPVONeNYMsbwf0iKnj1gR+NAk
gGTLhBLCbHakMwQfsu2ToWUHCJFXC9eyfaLgJW4MJ4atzDacMkNIjBwVDdlVhDF8
3s8FRMjYLEskNrWkST7jbw9w237BDwI0g52v01Hh3jrGkVx3ZJvYpnVwGS+FO+bX
/ytNrpfGTwSsO6IXofzN155p3n2eU8sha4i3rojdC6jexoDyOCuOlbIjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGA7MwJVZzENtSqHyiVW9kVoj56MB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspHiLadC
/h44iKB77A1ldnpEnAb8cmkli/8MzgCCMU7ilhhVEfognKxjh2M0e2wU4XxMoGUk
2MPrh6yuhMLZ3FnhpU7h5VjSm54VdoP3V/kDf/xTld5YhJTGEil4Atu10ymLGk4c
DHkE7YsX6xSk+Tp5VbJMSatd6GzrZTAiL59M3W99NsKAVLoiXRDLugVrNEXLQJRM
1H4EHoPqqkaJykXjXUwYMR4LMxF5AXy0ZZPQK4M2w/79cvZhIQt0EE4XFp9zF6fm
QndLgcItbLUvGwKZ/jjxaVhklm+8M+Gmil9oSqbG/niYx1jV/fY/K92o9pBPzQkF
8FMnqnZ369nGYQ==
-----END CERTIFICATE-----
Generated at Sat May 2 04:17:02 2026 by rpki-client