Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: Uc2QjIQzTTqampJ8ghiYeonM7oz1Y8v14SD8SgmukAs=
Subject key identifier: DF:41:29:C6:8C:A6:EE:07:46:C4:4F:1B:58:DD:5C:B0:E4:0F:3A:A8
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D167DF6018A3C6FF998DBD85ACD7344C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1894
Signing time: Sun 22 Mar 2026 17:00:46 +0000
Manifest this update: Sun 22 Mar 2026 17:00:46 +0000
Manifest next update: Mon 23 Mar 2026 17:00:46 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: sf+0xjgtlwhXjQn6MQ/nVx+0DYYQaJoUQmC5FLICheA=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:7d:f6:01:8a:3c:6f:f9:98:db:d8:5a:cd:73:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 22 17:00:46 2026 GMT
Not After : Mar 23 17:00:46 2026 GMT
Subject: CN=df4129c68ca6ee0746c44f1b58dd5cb0e40f3aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:58:18:9c:64:a4:94:a3:5a:32:22:2a:60:
8d:ca:e9:29:47:c1:16:aa:a2:c3:30:da:45:10:3f:
d0:7f:0e:ff:a3:7a:dd:7c:69:02:f9:03:1b:d8:bd:
2a:b4:eb:59:01:89:1a:73:30:a9:36:94:cd:f2:b5:
b3:be:85:60:1e:7f:5d:ce:a3:e9:32:5a:f3:67:f0:
0d:31:58:80:53:66:4f:30:9f:f9:4e:98:6b:bb:74:
bb:23:07:9f:bc:2b:41:9c:c4:82:ea:6b:d7:c1:41:
07:25:8d:88:c1:4f:f3:ae:31:80:a0:d4:84:d0:13:
80:c1:de:08:49:aa:94:59:16:6c:1f:02:e3:15:6e:
f8:94:9e:df:e6:18:83:0e:97:ae:d5:ab:d1:18:65:
a9:41:60:7d:70:e5:0f:10:84:3c:ef:d9:b8:5f:b9:
25:16:d4:19:04:27:c0:e7:b3:df:69:2d:4a:ec:93:
76:c3:60:27:f6:02:0f:b5:f6:8a:ca:83:ae:71:20:
d8:f7:8f:2a:41:44:4b:64:c8:42:1b:5e:99:e3:21:
83:4a:05:6e:34:61:ac:03:f4:93:87:c5:e9:4b:29:
ad:9d:8a:41:2a:f5:5d:e2:31:d4:95:f5:fa:65:78:
83:77:2c:bb:48:c3:e0:23:b1:c5:d7:69:1d:75:9b:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:29:C6:8C:A6:EE:07:46:C4:4F:1B:58:DD:5C:B0:E4:0F:3A:A8
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:45:88:81:5e:5d:99:23:1e:20:d9:94:2f:7a:00:ca:8c:9a:
13:ca:fe:59:29:87:4a:95:ef:75:c1:1e:e5:e6:37:ad:65:93:
5b:4a:3d:d6:35:e2:93:5b:33:be:ca:19:e0:aa:9a:ce:e9:a7:
fc:f2:fe:99:a9:20:d4:37:32:15:ab:73:75:91:91:d0:2c:aa:
1d:61:b5:fc:d7:5d:74:d2:c3:32:d1:3a:dd:fe:25:b0:aa:0c:
5b:70:3a:a2:ed:e3:8a:ea:04:94:c5:9b:66:79:d3:cf:2e:90:
88:93:d0:ae:47:ba:71:7b:46:6e:b3:b4:be:d1:cd:1e:a1:d8:
88:77:f9:6c:13:1c:6c:7e:a9:12:27:d4:fb:c9:f9:b4:93:3d:
f4:fa:3a:70:32:0b:08:64:e7:73:92:28:eb:27:09:e5:5e:6f:
67:2d:20:41:57:c3:d5:2a:84:52:1f:13:af:88:87:94:da:55:
07:24:c7:1d:fc:37:2b:11:99:f1:73:11:45:a9:92:43:18:13:
5a:23:48:65:dc:cb:4b:93:23:59:ed:61:c1:c5:ee:9a:10:f9:
78:2f:72:2d:f8:f2:35:75:61:b3:ca:4b:fc:90:f5:ba:2e:46:
37:e7:7a:e2:47:44:55:1c:14:01:26:ab:37:76:d4:97:49:06:
00:01:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 00:24:01 2026 by rpki-client