Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: dPsG8mVJjAp+6Ob3pOtg6mls0Px1m6fXMPDQRk4n8Wk=
Subject key identifier: 8D:DC:A7:7E:AD:73:56:E9:75:F9:A9:DF:13:9F:3B:A9:12:AF:05:DB
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D29CEA882E0D527D768E6BB3AD9EDC594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 189E
Signing time: Thu 26 Mar 2026 11:01:42 +0000
Manifest this update: Thu 26 Mar 2026 11:01:42 +0000
Manifest next update: Fri 27 Mar 2026 11:01:42 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: kXXOJOsNJLcIqvOCOg52kDH57hAcSwHKaLIfXzBNBRk=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a8:82:e0:d5:27:d7:68:e6:bb:3a:d9:ed:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 26 11:01:42 2026 GMT
Not After : Mar 27 11:01:42 2026 GMT
Subject: CN=8ddca77ead7356e975f9a9df139f3ba912af05db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:14:88:07:b4:18:66:2c:83:f3:9a:9f:38:
6b:8e:d5:f5:e8:f5:33:5f:5e:14:8c:4f:89:2f:36:
c8:6c:f2:e7:e9:a7:3f:4a:2b:63:fe:48:e5:32:8d:
50:9a:7f:69:91:d6:5d:49:95:39:b4:50:28:39:df:
55:08:38:b4:fc:92:72:94:c5:8d:34:99:5c:33:5a:
5b:12:97:06:22:25:4e:a2:99:28:85:05:f4:b0:d5:
25:b3:03:55:72:7d:ee:18:1b:ff:59:d2:e4:fb:6f:
f7:bc:c5:2b:2a:57:7f:cc:80:20:53:c3:40:db:37:
53:47:52:0b:98:ea:84:e8:a5:fa:7f:bf:0e:4b:2e:
ff:f4:9a:c7:79:5c:36:6c:63:18:ee:98:1c:75:fb:
04:31:10:23:f3:96:da:5f:c6:50:22:38:60:b9:45:
4a:bd:3c:80:02:98:e8:05:65:a0:6c:52:70:f9:6e:
cd:3b:7e:fd:5a:98:08:92:af:7e:2f:c9:ca:29:36:
ae:a7:f7:69:7d:8e:c1:32:97:11:ef:b7:45:26:92:
de:e4:c8:de:6e:bf:2c:fe:ae:82:25:50:52:3c:07:
24:d8:26:0a:6e:77:ec:de:d1:58:50:20:64:3f:3d:
92:2c:e3:97:e8:aa:c7:0a:bd:5e:cc:c3:69:14:12:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DC:A7:7E:AD:73:56:E9:75:F9:A9:DF:13:9F:3B:A9:12:AF:05:DB
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7f:76:91:fa:14:55:46:4e:f3:0d:b7:17:33:86:d1:9d:07:
72:ed:a5:ef:38:57:93:d4:8e:12:22:34:07:26:a7:74:82:81:
24:4f:17:eb:a1:5c:39:74:79:72:ee:34:cb:88:5c:03:d9:64:
99:98:51:68:27:79:f6:11:c7:0b:47:c6:69:03:1d:65:25:be:
93:d2:2a:80:3d:b3:70:25:a3:2d:28:b6:b1:98:83:81:30:46:
3f:e4:45:01:bb:cf:0f:38:b0:1e:a3:50:94:db:f2:a9:bd:71:
ce:29:85:dd:10:ab:b5:26:af:47:79:b1:31:f0:65:c2:d3:49:
28:34:bf:4b:82:df:e9:46:d9:7b:3c:e0:9a:e1:d7:ec:bc:81:
6d:c0:b6:d1:e1:2e:37:94:b9:36:d0:0a:47:b1:d3:a7:96:74:
60:96:46:77:f5:d6:1a:d9:d0:48:17:2d:ea:10:79:f3:e6:ec:
49:dc:6b:77:e0:b0:c8:14:83:5a:ba:cc:e6:d4:cd:1f:43:38:
e7:0a:81:83:88:bc:13:c8:a5:46:8b:b5:b8:66:b8:6f:cf:3f:
c2:2d:06:75:75:76:62:17:bb:4a:d9:35:8e:78:a2:d4:ab:45:
ec:60:b2:de:e4:f2:6f:74:6e:9e:8c:34:db:01:b8:01:be:d5:
b7:bd:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:39 2026 by rpki-client