Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: Nnv5h2+Ef7Rkny27HhFAuK3afuaIQEyRICiMpqyVbXk=
Subject key identifier: 6B:4A:8B:8C:86:12:88:5E:0F:8E:F7:AF:24:86:64:D7:7F:CD:BD:71
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D8A5E43736D21519BF1B735DD7EEA8F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18D0
Signing time: Tue 14 Apr 2026 05:02:06 +0000
Manifest this update: Tue 14 Apr 2026 05:02:06 +0000
Manifest next update: Wed 15 Apr 2026 05:02:06 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: Eo7rYLN8bmFCndJKmJA3H58/2VwkcNrqm7T8T6/mkTo=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:5e:43:73:6d:21:51:9b:f1:b7:35:dd:7e:ea:8f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 14 05:02:06 2026 GMT
Not After : Apr 15 05:02:06 2026 GMT
Subject: CN=6b4a8b8c8612885e0f8ef7af248664d77fcdbd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:f9:04:78:43:ae:ed:15:90:87:94:ca:9b:
48:60:82:33:da:71:3f:cd:8b:b2:0d:4b:98:de:61:
8c:7b:de:97:e9:06:b7:79:dc:7c:76:bd:0b:98:05:
d7:7a:9d:d3:7b:cf:70:3c:ea:77:98:ba:ab:84:48:
69:f1:ea:51:c9:96:19:0c:df:66:af:a6:30:fa:cb:
fb:e6:c6:61:f6:32:22:0a:ae:66:4e:45:04:05:64:
3e:20:b6:65:52:e0:de:d1:3d:ee:b1:33:eb:b0:c6:
41:64:a9:88:a5:24:d8:22:0f:82:7b:93:97:10:a6:
16:fa:32:89:8f:ab:26:21:2a:da:4e:95:3e:ee:61:
ba:89:30:5e:af:36:e9:c7:4e:40:dc:f7:9a:f1:ed:
ea:a3:6b:6a:dd:e9:e2:65:4d:e7:59:52:be:65:df:
dc:9b:cb:8c:28:a2:5b:4d:01:f7:42:2a:ec:13:e3:
a1:cb:4a:02:53:3d:7c:0b:0d:b1:15:dd:aa:26:11:
8f:cb:20:64:8a:b6:fb:c0:25:43:a2:70:7a:84:8e:
dc:0c:c7:49:75:96:28:a3:2b:e0:98:23:3c:d6:e7:
6f:de:1c:6d:f4:ed:0e:f5:eb:16:77:3a:dd:01:30:
8f:01:c3:01:ab:20:8d:f6:0d:d2:10:a0:47:f0:14:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:8B:8C:86:12:88:5E:0F:8E:F7:AF:24:86:64:D7:7F:CD:BD:71
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:23:16:80:74:44:2d:64:eb:e0:76:b5:69:3b:0b:4f:bb:f3:
af:62:71:21:a2:82:a0:79:9d:84:ab:1b:83:36:5c:3a:64:67:
f8:f9:06:6d:35:35:bc:cc:7a:a3:4a:ed:60:d2:ad:0d:3f:6a:
92:52:a4:43:ba:d4:55:ec:40:46:61:ff:61:4c:d7:9c:7c:6a:
41:23:42:92:71:90:bf:65:5c:a2:fd:e4:e9:ea:d1:e4:e2:f4:
6f:3a:d0:0b:6d:ff:ce:de:c2:29:73:ba:17:cc:40:ee:0c:3f:
1e:6a:18:4e:08:59:28:61:0e:45:7b:cb:d4:09:8f:e0:22:32:
07:f6:98:7f:19:f2:94:ba:4f:32:e2:16:ab:47:de:fe:fc:99:
96:7f:8e:91:9a:87:36:52:cf:3c:c1:30:ad:fa:17:5e:fa:68:
ba:49:09:3b:bb:0d:c5:b3:3b:a5:b6:aa:4c:9f:b1:70:ba:6b:
2a:16:01:9a:16:b7:13:2e:b9:65:07:77:51:47:2d:ae:16:1c:
59:e5:5f:15:3b:de:57:69:6c:63:6a:3b:27:05:0a:41:e7:ea:
cc:81:56:70:c1:19:49:f5:93:f0:7b:a8:c1:9e:17:a8:25:1d:
cf:e8:2a:c8:1f:90:47:3d:8f:e6:8c:20:05:f4:e2:7a:d2:8b:
28:ec:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 09:21:32 2026 by rpki-client