Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: 0phwjditVhmU7MW9TdNXZSG40b6aowRISSr8696w9M4=
Subject key identifier: 24:59:FD:78:DA:D4:69:9A:42:64:99:01:A1:AD:A6:9F:38:DB:52:A5
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D10B359C9252935B3BA91691C704852D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1891
Signing time: Sat 21 Mar 2026 14:01:22 +0000
Manifest this update: Sat 21 Mar 2026 14:01:22 +0000
Manifest next update: Sun 22 Mar 2026 14:01:22 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: ij9czY1Xshpk5r+Z5FtoMhiS0jUfC5BSnbu8drgmv+c=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:b3:59:c9:25:29:35:b3:ba:91:69:1c:70:48:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 21 14:01:22 2026 GMT
Not After : Mar 22 14:01:22 2026 GMT
Subject: CN=2459fd78dad4699a42649901a1ada69f38db52a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:3d:6c:fc:59:bc:a7:53:84:03:eb:55:7a:
87:a5:42:8f:e8:bd:02:5b:13:15:13:8f:ec:e7:16:
4a:40:fd:7f:eb:91:cd:63:04:c6:1d:25:27:ab:19:
4a:01:c8:6f:f7:ec:41:ff:c9:91:2b:66:f5:ff:29:
e4:63:e6:83:91:94:b7:6d:6a:e3:7d:f8:cc:c5:70:
29:79:17:83:f0:1f:b6:de:cc:74:63:d2:b2:41:e6:
7a:da:ec:ad:52:06:5f:be:ae:d1:f1:f6:39:42:6f:
61:6b:98:d7:75:8e:d7:68:61:b5:c3:25:da:6c:7b:
9a:f4:b6:5e:7c:47:bf:61:9e:be:62:23:7a:96:c0:
b4:5e:24:10:cf:1d:77:52:3b:40:30:5e:11:ad:d6:
3b:f6:df:89:43:09:0d:12:46:bc:6e:b6:60:88:4a:
a6:da:ff:20:9c:5e:84:ed:3d:21:46:fc:d0:be:6a:
79:a4:50:1a:93:ae:cd:a6:e2:31:07:27:de:a9:33:
af:0f:d8:75:b0:98:9e:f7:5e:59:b8:1b:90:3f:b3:
42:e2:bb:0d:eb:8e:46:26:26:e3:87:1f:bf:19:ac:
19:ad:9f:df:9e:36:65:92:89:e0:31:6c:1a:de:c7:
72:ed:0e:1f:3d:73:34:29:2a:ad:7f:3e:7a:ee:9c:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:FD:78:DA:D4:69:9A:42:64:99:01:A1:AD:A6:9F:38:DB:52:A5
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f3:23:e2:df:b4:eb:62:7f:c0:99:64:19:88:62:d3:86:e2:
d6:e2:10:eb:70:5c:fc:55:75:de:2e:da:ed:de:fd:9f:70:34:
ba:6a:03:94:9d:65:65:71:a7:3e:7c:f5:02:74:d9:ed:f6:1c:
26:f2:b4:cd:7f:3c:6a:ea:48:4d:ce:e9:e1:47:fe:36:62:f1:
eb:e1:4c:6a:29:4c:cf:51:b3:d7:96:6b:d2:70:cb:36:71:65:
07:e0:fa:d6:e2:43:08:6a:2f:98:0b:0d:9e:c1:41:ab:20:70:
0b:4b:3a:c1:72:07:4f:6f:f3:ff:5c:ba:af:5d:ae:6f:ec:74:
09:c5:5c:4c:d4:bc:e0:b4:f0:1e:53:48:6a:90:0b:46:f7:a1:
ae:1a:77:3d:67:48:7e:0e:f2:17:ba:cf:ac:02:39:b3:75:1f:
a1:75:a4:d9:7f:03:f9:14:a1:51:2a:96:7e:3f:b5:33:84:26:
29:15:0a:4b:c9:df:90:3d:5f:2b:ff:8a:b4:50:8f:db:e9:c1:
2b:37:2a:d7:2e:5b:97:16:76:dd:8c:0e:7c:25:5f:73:09:46:
fb:42:c6:55:b7:1a:79:b2:6c:7c:d9:95:e1:6e:6a:8f:39:e8:
a0:a3:ff:6d:66:79:4e:b9:1e:14:c8:be:ec:28:b0:a4:ef:66:
97:bf:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:07:58 2026 by rpki-client