Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: 7SF+q5Or6YGKYU3suPS+A7mqgbo6rWTsnz1RGVB/cIU=
Subject key identifier: A5:6C:4F:AC:8A:BF:37:C8:3A:20:00:7C:E6:4D:3D:EA:FD:49:7F:CF
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A06D95C27A4C69D0364C5E0D6BA0107A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1A52
Signing time: Fri 04 Sep 2026 18:02:06 +0000
Manifest this update: Fri 04 Sep 2026 18:02:06 +0000
Manifest next update: Sat 05 Sep 2026 18:02:06 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: PsJs3WUtZLqNly5q8dZRBAV2daSSAXl55o9IZ/ZwGvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:c2:7a:4c:69:d0:36:4c:5e:0d:6b:a0:10:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Sep 4 18:02:06 2026 GMT
Not After : Sep 5 18:02:06 2026 GMT
Subject: CN=a56c4fac8abf37c83a20007ce64d3deafd497fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:c3:f0:fb:48:dd:04:eb:5d:03:fd:da:fc:
cb:10:cf:28:0f:1d:72:52:a4:be:64:32:0a:9a:44:
d0:2b:34:aa:d1:9a:a0:76:47:17:05:0c:ca:86:5e:
57:5b:e8:7d:50:da:3f:e6:42:92:de:88:fa:4a:77:
c1:5e:1e:cb:fd:66:87:76:cb:f6:c1:f1:6e:cc:06:
e8:fa:1e:8e:8c:d8:00:c8:53:fc:e7:94:22:8f:a9:
a0:6b:4e:27:11:d6:8d:47:e8:cb:d1:1a:f8:b1:23:
eb:95:b0:35:4e:3a:43:44:76:0f:a2:4c:05:58:e9:
0e:de:f5:93:3a:06:32:25:b4:2d:fd:dd:a3:d3:31:
35:bd:39:fc:3d:2a:dc:4a:1c:cd:26:da:0a:e7:d0:
71:94:70:be:69:1d:87:79:fb:b0:fa:cd:82:6a:d9:
6a:be:6f:b6:84:5f:19:dd:b5:e8:85:c4:04:2e:22:
3c:a4:c7:b4:f4:9b:9b:68:e0:ec:cf:4c:9e:05:6f:
fb:76:b3:07:1f:a7:78:2f:33:f6:1a:3f:5c:26:84:
8b:c5:b6:9f:d9:f8:d7:91:1f:fd:65:5b:5c:ac:43:
d1:d9:55:f8:76:cd:e0:be:2a:5b:77:54:8b:d6:47:
4c:73:a3:c7:60:67:4a:64:70:0b:4a:87:b5:d7:37:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:4F:AC:8A:BF:37:C8:3A:20:00:7C:E6:4D:3D:EA:FD:49:7F:CF
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:46:33:44:e9:b0:24:52:c3:31:9c:8e:4d:58:a6:c4:01:55:
f1:bf:44:fe:8b:08:d1:87:7c:78:9f:db:9a:95:bf:14:4b:90:
1d:42:af:d2:e1:86:9e:5c:be:7d:bc:26:54:25:20:9f:9f:6f:
ce:14:27:63:5f:a8:0e:e5:20:63:6c:da:46:57:3f:00:b7:3f:
2a:fe:97:a0:ee:67:c4:5e:68:2a:95:73:c5:c5:40:db:e9:ac:
4a:c8:9b:33:8a:8e:51:34:23:77:7a:03:b7:0e:e3:88:e7:e9:
9a:a9:f5:b8:b6:e3:43:7e:da:2a:64:2b:5e:38:fe:e1:d9:49:
32:f8:80:ed:05:68:a9:f8:6b:0b:30:26:e8:a2:bc:27:2b:b1:
27:54:b9:3e:df:26:2d:35:18:01:d5:d1:38:cd:6e:04:c4:b9:
0a:c6:a0:ad:22:58:17:0d:cf:b8:3e:a5:6e:70:3b:9d:17:3c:
20:0d:1b:66:d0:24:69:77:02:0f:ab:76:b9:cb:bc:89:9d:f3:
85:42:1e:8f:5a:e8:26:e0:d6:93:93:22:8c:cb:7c:17:77:1d:
ce:33:4f:4c:a9:6a:93:9c:6c:b4:2b:63:07:69:11:0e:24:4c:
c9:8f:20:04:a2:fc:28:5c:e8:f4:0f:cf:bd:65:d4:56:a1:c5:
02:5a:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:17 2026 by rpki-client