Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: oiLqXWg5949vWWaOoGYfulYX30FGEsYH+8YAwE9krDQ=
Subject key identifier: 19:84:B7:1D:CD:68:DF:CF:43:77:67:59:A0:53:BA:A8:A4:6D:E6:D1
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D032EADC829A30900C521C433637CB68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 188A
Signing time: Wed 18 Mar 2026 23:01:23 +0000
Manifest this update: Wed 18 Mar 2026 23:01:23 +0000
Manifest next update: Thu 19 Mar 2026 23:01:23 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: Q/BmIplhJ93KJeVBU4LQvkbjdrIRLhayYhpSp6iYxoY=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:2e:ad:c8:29:a3:09:00:c5:21:c4:33:63:7c:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 18 23:01:23 2026 GMT
Not After : Mar 19 23:01:23 2026 GMT
Subject: CN=1984b71dcd68dfcf43776759a053baa8a46de6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:d6:43:72:5b:dd:d2:70:d2:e2:c1:06:74:
8b:a8:e6:18:91:20:d3:08:25:28:5e:55:b0:e9:84:
24:2f:1b:66:4b:8d:84:0b:f4:7a:42:0c:66:df:7e:
a9:2d:47:b1:22:83:d8:75:24:ab:15:2c:f3:b3:8c:
de:8b:71:63:8b:c0:71:28:40:ef:9b:9f:76:d5:f8:
04:ef:44:34:6d:01:9d:ac:8f:f6:d6:21:fb:db:42:
db:46:f5:7b:d4:0c:23:21:40:03:be:7d:e1:f2:3c:
93:cc:d8:81:a6:aa:71:bf:04:a3:cc:4d:7e:68:8f:
50:38:fc:7f:d5:b4:47:e5:f7:f1:be:4f:f7:6c:62:
31:9b:a5:04:d7:43:38:a2:9d:60:ff:0b:b3:44:8c:
4d:61:0e:7f:05:29:10:6b:e3:b1:e1:0f:96:1b:62:
67:fb:9d:a1:33:d1:f1:0c:14:16:0e:81:1f:62:d4:
48:cb:26:2e:1b:8d:cc:43:e4:f6:d2:93:45:f9:7b:
23:5e:80:66:42:81:4a:8e:fa:d8:fb:d4:85:a1:e0:
92:d9:73:d9:9f:6d:b7:d6:0b:ff:58:f9:c2:18:e9:
08:20:67:10:e7:fa:a6:73:90:ba:ce:fe:c6:52:d4:
7e:18:1e:c0:54:55:82:bc:51:e9:2a:5d:bb:f4:0d:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:B7:1D:CD:68:DF:CF:43:77:67:59:A0:53:BA:A8:A4:6D:E6:D1
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f0:25:3e:26:45:41:a5:79:4d:20:8f:af:40:16:6d:65:59:
24:4a:9b:a4:91:7d:ed:52:e4:6b:f3:05:f6:e8:18:55:de:be:
d7:d7:90:df:a2:00:7f:ac:8f:ff:4e:06:4a:60:78:ad:8a:2c:
45:bd:03:4a:32:2c:a3:a6:df:7f:74:66:fc:ff:8c:3a:a7:66:
95:1c:c2:ad:78:73:14:03:ba:a4:03:db:db:6c:a2:4c:38:55:
a4:1a:d2:14:77:2e:e3:9f:27:2d:d1:2f:77:8d:b4:c3:f7:e4:
8e:e8:80:e2:3a:b4:78:f7:eb:1c:17:2b:24:58:6a:25:6b:77:
cb:a4:2b:71:8c:39:4a:2d:e4:d5:47:ee:b0:23:50:d8:29:06:
7e:77:a1:fa:dd:e8:db:5a:eb:c3:70:09:2d:96:87:d6:ba:11:
d3:17:22:2b:94:cf:64:05:53:fc:cf:65:fb:0b:89:9b:8b:3c:
b3:c9:bf:d6:98:a7:af:54:4c:15:e8:ce:54:17:d6:29:84:32:
4a:35:4d:1b:a6:9f:1f:4e:76:69:c6:ae:18:d3:44:6e:a1:89:
e5:f3:29:99:33:85:f8:35:7c:4c:90:8f:96:51:a0:0d:a9:f8:
c9:f2:b6:77:95:f5:b1:47:52:72:a0:1c:84:dc:39:6c:2a:c6:
19:ef:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:21:22 2026 by rpki-client