Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: VNa5ZXW7SC041kA8SRXKjkYoQqrGugQS7Y+nS8QygbQ=
Subject key identifier: 03:01:E4:FA:E0:3E:12:B3:C3:FA:60:65:46:87:73:45:64:E7:3A:52
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D63BD55608943E5BB99EEF67126184794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18BC
Signing time: Mon 06 Apr 2026 17:00:45 +0000
Manifest this update: Mon 06 Apr 2026 17:00:45 +0000
Manifest next update: Tue 07 Apr 2026 17:00:45 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 0+Q0M90JmVFZQy139A9QeDDz8JbuQYFa7BjMl3eBOWk=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:bd:55:60:89:43:e5:bb:99:ee:f6:71:26:18:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 6 17:00:45 2026 GMT
Not After : Apr 7 17:00:45 2026 GMT
Subject: CN=0301e4fae03e12b3c3fa60654687734564e73a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:3a:36:6f:4c:62:98:e4:da:64:43:78:ae:
91:d2:1c:fa:8c:93:d3:fb:3b:00:cf:e1:63:47:a5:
b5:75:ae:ce:c5:42:f0:e6:9f:cb:82:d3:16:6f:f8:
fd:1b:25:29:63:a9:30:ec:6c:e9:f2:6a:c3:15:f6:
30:9a:9a:89:af:51:31:ea:62:e2:ee:ea:7f:a8:5f:
1a:bd:d9:53:0d:a3:3a:d3:32:3a:9d:bd:bf:24:70:
47:7f:3a:16:09:22:06:16:bf:b5:fc:44:e5:c1:3c:
70:8a:5a:af:05:dd:70:b4:e9:b4:65:1a:c9:47:8d:
3e:2a:4d:6a:08:f3:52:c3:46:cc:3f:17:cb:a3:77:
ab:08:48:23:b1:c4:1a:56:20:b7:57:80:db:df:cb:
15:ad:ff:7c:01:97:ec:31:98:50:10:c5:61:9e:a2:
36:ad:f7:bf:fa:c0:f9:5e:e2:4d:3e:69:ab:47:aa:
c8:a4:cc:17:21:0d:fa:03:17:c5:d2:a2:f1:1f:de:
98:62:ef:b7:20:c4:7d:c0:f5:d2:60:ef:8e:ea:61:
55:45:13:f0:c4:a0:f2:ee:68:ef:30:00:22:14:87:
f4:64:b2:9e:9f:7c:85:80:66:a0:f1:ce:6a:01:05:
cf:53:e6:34:1b:51:5d:47:5c:ed:9e:cb:14:a1:1f:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:01:E4:FA:E0:3E:12:B3:C3:FA:60:65:46:87:73:45:64:E7:3A:52
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:79:89:d9:f9:f7:f2:43:70:f6:61:82:da:43:94:62:07:04:
c8:a9:3f:82:4b:9e:be:6f:06:69:71:e3:67:b9:9e:82:02:bd:
64:f4:ab:7a:38:e9:ae:66:be:7c:93:e6:99:d1:9e:8f:0f:d4:
4f:a2:f7:bb:94:4b:5f:15:bc:c6:aa:6d:30:16:fe:f9:05:41:
c0:73:51:28:4d:6b:00:3e:97:f3:c6:fe:97:11:9f:65:10:a3:
c2:d4:e5:ed:99:d8:d8:e0:f5:7f:c0:17:3a:4c:66:4f:36:ea:
0e:7c:b7:0a:ed:a3:26:00:d9:6c:1d:7f:6d:54:dc:ef:f3:fe:
e2:79:03:2f:d9:2c:db:1b:c8:67:ed:fa:39:b0:c4:31:88:32:
89:63:7e:97:00:ab:b7:81:36:a6:c9:0b:b2:ea:22:73:53:c8:
ea:86:22:d9:74:83:27:14:9e:0c:02:d8:15:44:dc:63:1c:27:
aa:91:1d:50:50:8e:75:a0:19:fe:e7:eb:b3:07:3b:a9:36:58:
32:22:78:88:9b:30:59:1a:67:92:46:e1:a0:51:ed:49:e3:cf:
ee:7b:d6:5b:c6:36:e7:2a:dc:73:c5:d3:21:56:08:4a:9f:16:
15:bf:92:ac:80:27:fd:0f:ff:98:b8:b6:93:de:16:a9:26:f6:
1e:56:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 19:30:27 2026 by rpki-client