Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: +7LfPZYkFjfFa2ci/GoDzn3SPUYbsRSxZrQBnuPTJFY=
Subject key identifier: 45:E9:0F:07:64:C8:AB:5C:48:A2:EB:83:35:0C:99:05:2C:AD:B4:03
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019DECDB2B0AB6C252428E1823C3C98365AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1903
Signing time: Sun 03 May 2026 08:01:19 +0000
Manifest this update: Sun 03 May 2026 08:01:19 +0000
Manifest next update: Mon 04 May 2026 08:01:19 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: I9VNsR9c0bRlHpi7g6CuLJWeS6akjHPTHqribMb2gWw=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:2b:0a:b6:c2:52:42:8e:18:23:c3:c9:83:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: May 3 08:01:19 2026 GMT
Not After : May 4 08:01:19 2026 GMT
Subject: CN=45e90f0764c8ab5c48a2eb83350c99052cadb403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:90:92:17:15:84:a2:ee:d3:d6:72:4a:29:a2:
bf:ff:1f:dc:93:08:56:b4:a3:2e:cb:18:3e:dc:3d:
b0:72:8e:d3:cf:8c:f6:cb:c4:7c:7c:5d:08:32:15:
a2:5b:e4:b5:7c:c9:ef:4e:46:8f:52:cb:9f:fd:e6:
37:51:ac:d7:5e:96:e8:4f:59:59:02:8f:fa:fb:25:
70:4e:56:5c:db:47:ba:1e:76:ae:98:00:a5:0e:fb:
90:63:43:e9:65:cd:a2:6c:ed:5a:f2:f2:c6:48:73:
40:45:b0:d4:a1:8f:f2:51:94:13:bd:47:49:39:53:
93:3d:1b:26:f7:cd:c7:fd:7d:f9:67:1a:2b:15:0d:
82:3b:7e:18:40:c6:0a:84:95:55:00:a1:05:05:e2:
36:25:09:9b:17:d8:f4:f9:78:a6:22:5b:28:b3:44:
d0:95:e0:a1:22:36:9a:b3:e3:83:9d:5b:74:f4:66:
63:56:8e:c5:97:6d:de:90:99:4e:6d:6f:88:37:f8:
f4:51:74:84:7c:18:30:45:02:8f:33:57:67:6f:4e:
69:14:fd:58:9f:6c:99:a0:14:8b:ef:69:68:bd:b5:
39:22:00:6d:4a:72:1c:6e:53:42:35:4f:03:b7:ec:
09:84:ff:0b:72:17:ca:a6:11:9b:6e:6c:c6:39:bb:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:0F:07:64:C8:AB:5C:48:A2:EB:83:35:0C:99:05:2C:AD:B4:03
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:83:29:ca:36:ed:fa:05:46:b8:1c:c7:15:24:7e:4f:bc:
fc:2a:03:c8:97:7b:b8:1e:fd:41:23:8a:d3:af:a0:0e:24:5d:
41:db:ae:24:85:fa:fd:cc:c1:2f:96:55:20:75:85:94:4a:73:
f2:eb:87:2f:a2:40:ee:83:3e:a5:d2:0e:d0:ea:ab:7c:23:cb:
a3:64:15:a2:7d:1a:4b:f2:b8:eb:7d:b3:8c:e7:89:a6:4c:53:
67:b6:51:c5:ff:3a:a9:c4:20:55:b0:4c:05:30:f6:6f:66:8e:
a2:59:80:a3:10:77:1f:67:cc:f2:6c:85:d4:2c:fc:d1:8f:52:
ec:ad:0f:f9:3e:b0:3e:03:a5:d1:29:6d:9a:1a:fe:57:f3:5d:
63:af:24:cd:ae:f5:29:7d:f6:a5:76:64:45:61:b5:5d:51:9b:
99:bf:33:61:3d:8f:26:96:e4:9c:34:80:af:f6:21:b3:23:91:
16:2a:40:a5:31:50:99:a8:33:ff:33:ed:62:47:a7:fb:8b:c4:
9f:1d:c0:e8:64:f7:0c:96:57:07:18:1b:79:63:87:ac:da:e2:
2c:4b:d6:af:7b:2a:24:e6:55:a9:8d:f7:31:32:90:d1:39:09:
c2:b4:64:e8:48:41:73:5d:04:f2:30:a0:b2:5a:d7:07:5a:73:
88:26:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:21:41 2026 by rpki-client