Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: jL6P9+fd4vYing7rYmOdzZ4f4iOWvQSVwcgnkml+wqs=
Subject key identifier: 96:08:A7:1A:1E:98:9E:AA:EB:71:C6:6C:54:7C:26:60:59:88:BF:1E
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D8E3B34A994E84E3E0F80F85BC0415C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18D2
Signing time: Tue 14 Apr 2026 23:02:17 +0000
Manifest this update: Tue 14 Apr 2026 23:02:17 +0000
Manifest next update: Wed 15 Apr 2026 23:02:17 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: W5JbngojM8J3X5EQ2gJJlwV3eww7+oAbS5nce9mlElA=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:3b:34:a9:94:e8:4e:3e:0f:80:f8:5b:c0:41:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 14 23:02:17 2026 GMT
Not After : Apr 15 23:02:17 2026 GMT
Subject: CN=9608a71a1e989eaaeb71c66c547c26605988bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:7a:f5:62:c8:a5:7b:53:e2:8b:98:fa:8a:
2f:64:18:25:96:f5:dd:1c:4d:d9:6d:1f:ac:80:54:
45:cb:f3:46:89:cf:b3:74:3d:75:8a:79:de:8c:e3:
4b:4b:3f:0d:75:61:9d:e2:e5:d7:1e:a5:ab:0d:d2:
65:bf:cd:6c:3e:48:5f:8a:84:9e:a2:39:78:08:12:
cc:e5:a7:f7:b4:61:db:6e:d3:a3:c5:58:89:25:21:
26:8e:70:4c:e9:e1:90:ec:7c:37:59:a3:90:6d:af:
58:e6:c7:a2:a1:48:81:02:97:a9:a1:53:f5:24:2a:
53:0a:2c:9a:36:e2:c5:b0:07:b4:f3:58:80:34:53:
07:b9:2a:9e:e0:00:74:4f:43:79:d3:30:81:f2:33:
da:17:e0:f5:c9:5c:4a:db:64:98:62:24:1e:9d:60:
19:c8:27:29:e3:a4:a5:1d:f3:a3:0c:37:12:04:71:
d6:28:51:0e:46:d9:05:db:70:de:1a:db:75:a3:f7:
af:77:a3:10:0a:2a:f3:88:13:35:fe:46:40:35:dd:
da:17:b0:53:c5:11:01:5d:41:c5:e7:b7:4e:ee:b8:
af:b7:e7:94:e7:f6:7d:9c:89:d3:0b:e5:f3:f0:bf:
b3:21:a9:5a:85:87:8f:4f:8f:19:4b:3c:d0:9d:ed:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:A7:1A:1E:98:9E:AA:EB:71:C6:6C:54:7C:26:60:59:88:BF:1E
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7e:c1:4a:b2:cf:74:2f:67:1a:cb:e7:bd:b3:d4:93:a8:f8:
2b:2d:1f:f6:9b:22:e0:62:46:46:bd:f9:3c:20:9f:a5:db:5b:
26:85:a7:9d:08:41:b8:7e:bd:49:2f:2c:c9:5f:c2:9f:fc:de:
d5:db:f5:90:52:c7:85:76:80:43:a2:48:3f:cc:03:06:22:7f:
46:23:5a:09:34:3f:c4:7c:fe:39:ba:ff:f8:7a:30:a9:91:bb:
f5:87:00:4c:71:c4:25:87:a1:34:e6:0f:90:b7:14:88:8d:31:
5d:3e:ba:12:e9:49:97:f5:21:8e:1d:b2:fe:85:f0:63:0d:df:
15:2b:1b:ee:77:96:3d:30:01:d8:17:41:55:31:1b:17:7f:cd:
1f:a9:a8:af:b6:5d:bc:fa:27:0c:f4:fc:f2:42:1a:a5:4b:74:
f1:10:04:26:5e:9f:c3:24:27:ad:87:d5:90:d1:3d:e2:13:a5:
85:08:36:8c:4e:0a:0b:f8:03:ac:32:53:db:a3:a9:e2:fe:a4:
18:3d:bf:cd:a7:47:99:60:73:3c:81:03:8c:0e:6f:fa:c5:bd:
bb:d7:df:6a:38:52:98:3c:2b:e2:6a:fa:05:ea:31:f4:8e:4f:
39:b4:5c:a1:c5:78:b9:bb:69:83:02:f4:93:98:92:97:75:8e:
29:d7:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:34:45 2026 by rpki-client