Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: 9egRBYfdj2XXqbjXt6SLpKERlJli/pNLUy0oUVK4a28=
Subject key identifier: 52:EB:E5:EB:EE:4E:C2:AE:03:E8:EE:58:BB:BD:68:8E:56:82:DE:45
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019F9549162E748D5DC8E9F15B6BD48E0AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 19E2
Signing time: Fri 24 Jul 2026 18:00:22 +0000
Manifest this update: Fri 24 Jul 2026 18:00:22 +0000
Manifest next update: Sat 25 Jul 2026 18:00:22 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: GtNiSDbb5G+MJej8D09igVQshao7fEa489eqKQLSO8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:16:2e:74:8d:5d:c8:e9:f1:5b:6b:d4:8e:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 24 18:00:22 2026 GMT
Not After : Jul 25 18:00:22 2026 GMT
Subject: CN=52ebe5ebee4ec2ae03e8ee58bbbd688e5682de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:c7:bd:ab:a2:27:61:20:2f:cd:79:1d:94:
68:13:3a:25:50:72:56:b5:c4:31:7c:17:e1:3f:5c:
92:03:77:09:86:03:b9:9c:5c:59:d7:31:98:9a:7e:
e1:e9:cf:22:f5:a0:2e:07:07:8a:16:0b:e1:23:3e:
89:83:17:fd:c6:77:69:5c:ee:58:be:be:f5:12:f7:
f5:ad:11:b0:33:76:b7:4f:8a:0d:87:10:b6:a4:e4:
3b:23:54:00:6b:dd:45:9c:2d:31:cd:f3:16:66:75:
26:bc:b1:26:a7:b4:a2:75:a0:b8:9f:f8:52:3f:da:
80:4b:78:c3:5b:96:31:fc:38:2f:38:52:48:2c:78:
80:cd:93:26:c3:fc:1c:fd:f0:15:09:bf:e5:9b:a0:
db:91:e4:4a:f2:ab:0c:b0:d9:ac:67:c4:54:c3:37:
92:c9:9f:60:b7:1b:c1:3b:8f:4f:10:7d:3b:d9:48:
cb:1d:a9:72:16:6e:17:db:f3:a8:d3:ff:dd:95:e0:
de:97:52:bc:1f:64:45:0c:d6:f4:71:fd:04:0d:14:
c3:e8:55:a5:e0:8a:d4:7b:b4:b4:60:4e:c1:a4:d9:
1c:7d:53:3a:c7:f5:ce:7d:27:b9:13:87:73:27:e5:
99:d9:07:a7:b1:b2:a8:90:71:5f:e5:3c:95:3d:f6:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:E5:EB:EE:4E:C2:AE:03:E8:EE:58:BB:BD:68:8E:56:82:DE:45
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:13:09:13:c9:03:cd:60:8a:30:68:32:3a:54:7b:17:60:3e:
2d:f7:39:b8:6e:98:e7:90:79:5a:a1:83:04:a0:14:7a:88:7b:
cb:d4:94:64:08:55:86:bd:44:70:ef:ee:96:14:2d:e6:ea:cd:
58:ca:1f:d6:3b:48:a2:2e:d7:b7:14:e6:d0:1c:84:11:e2:c5:
4f:e6:80:c9:4b:fa:b2:22:64:47:c8:87:5e:cd:db:d4:87:ae:
1e:92:d9:83:40:58:0f:df:1f:b5:00:8f:cc:d3:1a:71:90:cf:
7d:7a:71:51:40:e2:02:87:01:f9:19:6f:ac:05:d9:b2:ee:c1:
f6:14:4b:2a:10:98:a7:d0:24:b7:e6:da:61:8b:cd:0f:f7:69:
fd:f7:04:80:05:7e:54:d9:b3:4e:e1:6f:73:b8:33:3a:27:16:
c4:8d:63:5b:ba:ae:60:20:00:db:56:b8:e0:db:98:4a:b2:92:
94:b8:bd:61:60:08:94:3c:db:49:d2:9c:24:21:8e:b9:5f:39:
1d:10:75:72:b5:f5:2a:df:9e:ef:86:81:c8:ed:c3:94:9b:3d:
4c:c4:4b:f6:7c:5c:dd:e9:dd:73:b7:e4:09:57:63:e7:a1:1e:
cf:99:cd:62:be:e5:5b:6f:ff:cc:a2:ac:51:4f:b5:49:64:76:
76:49:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:54 2026 by rpki-client