Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: Jjziuf4GXKKGveZ4UwrZvTg15WDclT5h+GJ5c5LNXsw=
Subject key identifier: 66:9F:2D:CF:8A:5B:8E:C6:99:46:D0:2D:40:59:E3:E7:DE:75:6A:AE
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A09245ED540741C8629EA8A4160F20E0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1A65
Signing time: Fri 11 Sep 2026 21:00:51 +0000
Manifest this update: Fri 11 Sep 2026 21:00:51 +0000
Manifest next update: Sat 12 Sep 2026 21:00:51 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 9q4hMLfHe+hghKC9yuFZuLwTJEuKJK6XNNsCEY5RuDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:45:ed:54:07:41:c8:62:9e:a8:a4:16:0f:20:e0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Sep 11 21:00:51 2026 GMT
Not After : Sep 12 21:00:51 2026 GMT
Subject: CN=669f2dcf8a5b8ec69946d02d4059e3e7de756aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:e3:29:26:8b:22:be:67:fd:2f:f0:a3:45:
7d:af:78:45:e2:dc:f8:a7:ef:62:a4:9e:44:1f:bd:
80:82:57:3c:a5:35:e7:04:ee:f9:0c:f9:1a:77:59:
94:c8:09:d9:09:50:a7:d5:85:01:ae:7f:00:92:29:
85:62:14:47:30:dd:b8:ce:29:84:de:fa:43:71:bb:
3a:b3:f9:c5:81:03:77:a7:e5:b5:89:d9:c5:0b:a8:
98:47:21:83:d0:72:22:9c:0b:11:85:24:df:15:cf:
75:52:13:2d:1e:13:54:8b:9f:fc:45:ab:a9:06:53:
bd:3f:31:63:c9:da:ec:8d:53:0d:4f:41:22:d2:e9:
95:c2:7b:6a:6e:61:3f:d2:41:17:c9:a1:29:75:6d:
3c:bf:56:5c:a0:c7:f3:f2:5a:46:34:e7:7b:b3:c9:
9a:8a:47:aa:59:36:bf:44:1d:2c:27:2f:7f:44:c7:
3b:26:d3:a2:bb:d0:27:e0:5b:18:3b:06:7a:ba:69:
26:e0:a6:ba:f9:0a:0a:b2:2f:35:1d:3b:18:a7:a6:
76:90:da:d8:2f:b7:c5:ec:cf:0d:13:2c:9f:41:df:
4a:9d:fc:1b:dc:7b:9c:f8:c2:37:a8:8d:67:e8:9a:
f5:d9:6a:c7:5c:f7:19:54:7c:73:26:0d:1a:b3:7f:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:2D:CF:8A:5B:8E:C6:99:46:D0:2D:40:59:E3:E7:DE:75:6A:AE
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6f:f0:ef:bb:58:6c:1c:4f:07:b8:b7:bf:5e:d0:79:98:c2:
16:9f:1d:bd:81:31:b1:33:c2:c9:37:a5:21:77:a9:6d:86:80:
8c:8c:b9:85:81:09:3d:21:5e:83:32:08:74:33:05:50:0c:51:
05:1d:d4:cf:36:c6:8c:0f:9e:39:ac:19:50:95:3f:76:97:20:
02:e0:92:b7:60:96:6e:89:9a:3a:35:34:33:8e:51:4f:7b:d0:
83:dc:59:76:9f:db:e5:3f:71:87:c6:fc:05:01:7b:00:d6:48:
38:65:31:a7:49:81:9d:4d:8d:42:34:96:1c:58:54:e0:bd:1f:
d4:6e:d6:cd:42:dc:f1:39:b4:eb:af:a9:a3:4d:71:7e:d9:b4:
63:4e:d7:ec:28:02:ea:d4:b8:90:b5:a5:5a:50:1a:f2:36:cb:
d4:ff:ec:70:34:12:31:9f:73:56:b9:15:0b:fd:98:2d:7a:33:
42:36:a5:1b:f8:e0:0c:2a:a1:ec:67:e1:7d:8f:9c:e4:2a:3f:
93:f9:d2:65:b0:69:d6:5c:96:f1:48:cf:9a:59:28:6f:14:28:
47:da:08:52:00:16:9d:53:bf:a8:a8:44:06:e2:cf:f9:18:5a:
af:5f:6c:27:8c:ab:6e:4b:42:57:f8:5e:f2:b8:87:06:65:24:
bf:1d:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 05:31:08 2026 by rpki-client