Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: 1rUgYSysbN3QwaTceRefxT/gdK8+ayRsCiVCl13rikY=
Subject key identifier: 07:1A:99:50:EC:E5:50:CA:EA:E9:7E:41:59:04:7C:3D:46:9B:6E:F4
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019CD8B226423245206152DF5FB7A8D10BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1874
Signing time: Tue 10 Mar 2026 17:01:19 +0000
Manifest this update: Tue 10 Mar 2026 17:01:19 +0000
Manifest next update: Wed 11 Mar 2026 17:01:19 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: HhCZSm3NJC+7fmkIDuvfA/tK3NsMNy/0xzvPQkExLvc=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:b2:26:42:32:45:20:61:52:df:5f:b7:a8:d1:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 10 17:01:19 2026 GMT
Not After : Mar 11 17:01:19 2026 GMT
Subject: CN=071a9950ece550caeae97e4159047c3d469b6ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:9d:39:06:3a:5c:8f:33:10:67:e9:c1:89:
6f:e2:58:92:d3:12:c9:6f:6b:4f:49:86:b2:f9:35:
6b:b4:c5:e4:a2:43:9d:54:24:1f:98:a2:b4:7d:b1:
e5:b1:b4:d3:a4:6f:fa:5f:ae:68:00:e1:44:4b:6e:
e6:e6:1b:ca:8b:f9:9f:e7:c0:d9:f1:b3:af:76:54:
5d:6f:c9:d3:be:0e:a9:f9:14:25:57:9b:3e:d2:29:
42:18:4f:0f:60:a6:9a:61:2b:21:48:57:98:a8:5c:
74:ab:98:92:56:ac:fb:0d:16:17:4c:c8:08:5a:7d:
0c:27:51:b2:c5:43:34:b1:d9:b0:3e:e9:b9:04:40:
4e:09:a1:38:0b:53:25:22:b5:b8:13:af:e7:5c:a5:
b5:af:ce:ee:8b:2d:53:17:0b:13:0d:36:64:f2:a5:
04:d1:71:90:d5:40:f8:45:ed:5b:0e:10:1a:15:b1:
3b:3e:80:14:ab:12:d3:7f:b6:b0:8d:02:7c:30:f4:
86:83:06:46:3a:62:b3:e6:49:7e:20:72:87:42:fe:
a7:f0:69:5f:32:5e:09:89:9f:c3:51:94:8f:c1:ae:
79:7a:d7:c4:da:b3:20:9e:7e:24:ba:44:6f:d1:d2:
73:df:6d:86:da:77:80:a8:5f:ff:4d:4f:25:6e:3a:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:99:50:EC:E5:50:CA:EA:E9:7E:41:59:04:7C:3D:46:9B:6E:F4
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:ce:ae:a3:8e:d3:8e:3b:d4:9e:eb:28:90:3b:d9:0a:81:
39:f3:da:e3:4a:a4:bc:9a:da:6f:f5:9e:9e:f0:23:92:f2:3e:
9f:3f:75:35:a7:38:20:12:48:b2:07:de:eb:98:e1:b5:aa:05:
fe:8f:82:e4:a6:d9:bc:7f:1d:aa:39:7f:d3:9c:71:3e:fa:0e:
a6:e7:6b:2a:88:39:27:bc:99:a2:65:ab:1e:b9:0d:f2:bd:1a:
3c:8b:73:86:89:99:27:46:a5:40:4d:70:55:be:09:5b:95:66:
92:a4:82:2d:ea:29:67:93:ce:d8:51:75:9d:06:eb:1f:bb:db:
c8:27:a1:ea:8f:27:7f:af:cc:f4:65:cb:9a:23:8b:51:92:3c:
9a:46:ff:b7:a5:f8:b8:8c:99:b9:5e:04:50:04:e6:f3:b2:7f:
68:00:f5:53:d4:00:37:4d:26:7e:c3:50:62:e2:59:34:ee:98:
b3:60:22:a6:7d:67:49:c8:e9:3c:e3:8d:03:83:27:c0:4c:1b:
8b:c7:fe:63:2a:d2:89:c4:01:36:16:3b:88:87:9c:0a:21:2a:
6b:f4:60:51:c4:ad:ab:da:11:f0:cd:b4:74:41:db:e1:f9:33:
53:cc:8d:55:87:5b:a5:6d:58:cd:96:29:61:34:50:5f:5e:a7:
34:be:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 01:12:15 2026 by rpki-client