Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: ZdPUuybPYppGUdwL0+791KugcgT/846kDBHuvot2sHw=
Subject key identifier: 7D:2F:CE:0B:75:BD:6A:1F:9D:CC:D1:4E:CE:3B:51:20:67:73:2B:30
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D9DACD0328B064DC5AEC92EECBBC04CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18DA
Signing time: Fri 17 Apr 2026 23:00:41 +0000
Manifest this update: Fri 17 Apr 2026 23:00:41 +0000
Manifest next update: Sat 18 Apr 2026 23:00:41 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: GPHUjui5aLGIQTCkLo8fWxvQOSTfR2CU0/qve1MaOUI=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:d0:32:8b:06:4d:c5:ae:c9:2e:ec:bb:c0:4c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 17 23:00:41 2026 GMT
Not After : Apr 18 23:00:41 2026 GMT
Subject: CN=7d2fce0b75bd6a1f9dccd14ece3b512067732b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:70:46:de:e8:c7:fb:4d:61:64:56:48:3f:
42:90:de:26:a5:22:77:17:ca:d1:a8:13:80:1a:e9:
8a:5b:3e:20:af:56:c2:29:83:a9:25:cf:d8:4f:8d:
de:28:f0:06:90:84:47:dc:e2:1f:b8:ba:84:3e:0a:
72:f2:a5:41:13:93:55:1d:02:4b:70:59:a1:44:f8:
4d:de:d3:ba:99:98:32:39:b0:1e:4a:0a:cd:4a:af:
9c:29:35:34:96:a8:73:09:8f:77:96:bf:9a:7e:76:
e4:69:35:d0:7c:77:31:71:33:7b:b7:f1:1a:c1:39:
7c:b0:b7:bb:38:56:8f:2b:c2:83:64:ff:8a:20:a0:
02:bd:94:66:14:8a:80:91:3e:d0:6a:6f:02:ce:da:
49:23:b8:78:14:4c:4a:ab:22:25:21:89:ce:3d:3d:
51:b2:2c:50:54:21:0a:71:28:93:c3:6e:54:43:51:
b9:6b:c0:22:e3:63:84:ad:37:c1:53:cf:00:aa:4c:
09:fd:ee:92:7f:b8:69:b0:26:25:7a:b0:20:be:7c:
02:52:21:e9:6d:f7:0d:cb:5d:00:84:6e:0f:da:a9:
6a:a8:3d:8d:01:5b:eb:90:10:df:1b:15:4e:04:c1:
ea:c9:17:6e:81:37:99:76:85:80:94:e2:d2:d2:bf:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:CE:0B:75:BD:6A:1F:9D:CC:D1:4E:CE:3B:51:20:67:73:2B:30
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:28:8a:43:d2:17:dd:13:c0:f8:3f:31:be:e2:38:76:c0:7e:
39:25:2e:57:1f:3a:e2:cf:31:7f:59:62:6c:41:44:ff:27:da:
6d:83:65:a4:e0:5f:b2:ee:cf:a1:cc:f6:74:3c:d1:6c:f3:71:
30:a7:42:92:f1:0e:5a:df:50:56:9b:9d:cb:13:6f:91:76:67:
b0:6d:10:73:ca:64:5f:c3:a7:9a:93:ca:4a:fd:a6:4b:65:86:
0e:50:3a:1b:a3:67:ce:bd:b1:d8:3f:13:f3:55:11:b6:ef:df:
79:87:e1:1f:8c:48:57:70:22:05:f2:12:5c:b4:ce:21:a7:a6:
20:23:fa:20:a4:98:7b:4b:93:ca:a6:03:30:a5:77:c2:e3:9e:
63:34:e5:27:36:20:5f:a6:74:90:af:b4:ac:66:a1:38:46:ea:
37:14:10:ec:43:f3:c1:40:25:d2:dd:96:fc:21:ad:bf:2e:3f:
b1:0f:e2:c0:d5:a0:15:41:2d:2c:bd:3b:c9:90:0f:4c:94:d9:
82:00:10:c0:9c:08:20:5f:4a:8a:29:83:14:d6:22:46:83:dd:
fb:a3:ec:ba:12:75:c3:39:b3:07:7b:b1:92:e7:a6:db:22:2d:
35:4b:56:63:13:f0:65:88:77:8d:4f:b5:af:15:38:e7:49:f3:
3a:ef:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:31:40 2026 by rpki-client