Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: SqAYao0LaE4u6iIkizMRQXnQGivmazqsLXSZJbwRhVw=
Subject key identifier: B3:E9:82:64:54:0B:7A:D3:AE:53:61:C1:0F:54:67:5F:76:2F:9C:67
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019CEFDEA8F405358652D9150C520D80103B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1880
Signing time: Sun 15 Mar 2026 05:01:12 +0000
Manifest this update: Sun 15 Mar 2026 05:01:12 +0000
Manifest next update: Mon 16 Mar 2026 05:01:12 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: ITBaXurOjlGLG8OncyYwJErx6TZZWZTmBL+lvxMsp4E=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:de:a8:f4:05:35:86:52:d9:15:0c:52:0d:80:10:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 15 05:01:12 2026 GMT
Not After : Mar 16 05:01:12 2026 GMT
Subject: CN=b3e98264540b7ad3ae5361c10f54675f762f9c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:09:19:1b:2f:de:50:8c:21:4e:2c:b3:13:
19:7c:b3:bc:c1:db:14:ea:de:49:b6:7d:b2:11:cf:
a4:8d:86:32:a4:0e:e3:09:37:3d:8f:64:b2:b9:c8:
70:5c:29:93:c9:28:bf:f5:0c:8a:97:46:6e:d9:a1:
a8:a2:a1:67:9e:8c:59:40:b3:25:86:3a:e2:1a:a3:
c5:44:3a:f6:a7:72:ba:cd:aa:a1:43:2b:19:4e:27:
c4:b3:2e:ff:91:c1:64:61:aa:92:1a:99:04:d4:95:
e5:9b:4a:30:d5:94:46:5f:3a:ed:87:33:16:58:a2:
a8:0c:66:86:db:c6:50:d0:ac:2c:7f:89:f9:06:f8:
7c:e6:43:3c:c2:01:1a:41:b7:99:d3:dc:47:57:bd:
d1:42:2c:5a:45:90:cf:e4:51:3b:c6:6c:18:44:cc:
df:26:f6:f1:e3:aa:36:7f:c3:0b:96:3f:62:09:7f:
8c:ff:48:ed:72:1f:19:b7:d7:5b:ae:69:9e:d1:7c:
e7:92:16:12:09:a2:1c:95:83:18:c1:fb:a1:a6:b1:
9c:10:f0:52:76:a2:ed:23:77:33:d6:21:4c:11:9d:
a6:75:6a:33:45:a1:3b:0b:0f:e2:b1:2a:02:d0:88:
61:6c:33:db:f1:d2:9c:af:fb:13:8e:06:22:13:86:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:82:64:54:0B:7A:D3:AE:53:61:C1:0F:54:67:5F:76:2F:9C:67
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2c:29:26:dd:46:bf:99:8a:58:59:1a:03:ea:bc:ff:e4:79:
10:25:a4:69:98:e6:c3:8e:e0:6a:05:34:ce:c9:4e:b3:6c:2d:
55:90:78:97:37:24:47:95:00:f2:8e:14:e7:69:d0:7c:7d:d3:
c4:31:b4:37:94:8b:f9:74:60:15:0b:35:a1:46:1c:ad:2a:fe:
c4:87:4b:35:86:e7:fa:ae:0a:16:53:67:a9:b5:f9:1d:3e:01:
25:64:88:26:9e:28:00:dc:27:84:2a:1f:77:d0:75:73:33:c9:
41:a0:75:32:82:fc:a0:53:dc:2d:73:1b:9a:ad:90:51:18:ce:
d2:80:ff:95:de:8f:1c:1b:ad:bd:14:ef:de:b4:37:fd:f4:3c:
bb:ee:fc:7e:8a:d4:a0:1e:52:f4:3e:e7:2e:5f:df:87:26:fb:
e0:ee:0b:b0:8c:8a:16:7f:ca:f8:2b:a5:c3:c5:ac:9b:dc:63:
6c:52:2b:d6:20:13:9d:a8:cd:b9:d6:77:09:ac:6f:db:ac:52:
fd:d9:ac:03:4d:73:df:61:eb:78:0e:57:8e:cf:e6:2f:10:22:
6a:24:0a:32:6c:46:49:1e:b1:33:5e:a7:58:a7:3e:10:b7:0f:
d0:df:b3:62:32:b5:78:d6:04:ef:79:99:49:1b:88:d7:18:e6:
82:18:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:50:11 2026 by rpki-client