Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: aybZ1VFHYREu2tHlpky9A27cOleAfbioEVSrCSC0S04=
Subject key identifier: FB:F1:0A:89:DA:18:E3:83:AD:15:30:9A:8D:E2:12:0F:5D:23:69:DC
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D698880B3A15D51F2083ACA471947F77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18BF
Signing time: Tue 07 Apr 2026 20:00:46 +0000
Manifest this update: Tue 07 Apr 2026 20:00:46 +0000
Manifest next update: Wed 08 Apr 2026 20:00:46 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: kyh2rnCnmXLrD0NUFFyblDk9v+s3XP0gfwHdhFUteaM=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:88:80:b3:a1:5d:51:f2:08:3a:ca:47:19:47:f7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 7 20:00:46 2026 GMT
Not After : Apr 8 20:00:46 2026 GMT
Subject: CN=fbf10a89da18e383ad15309a8de2120f5d2369dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:3c:00:3d:9f:cb:b8:6c:45:40:f1:c2:31:
fa:d3:6d:2d:f6:91:48:92:e6:4f:59:b0:de:51:b7:
e1:37:f1:b5:69:72:20:e0:ad:d5:e1:37:6d:28:32:
d7:51:7e:b6:58:21:3d:0c:f6:dd:09:a2:72:95:96:
36:fb:c9:e6:c5:d5:a7:a6:4b:46:b9:5a:dd:90:62:
38:70:42:a3:aa:e0:34:a0:c3:fe:38:ae:07:bd:ea:
77:fb:d0:f5:47:30:7c:35:db:df:9d:82:31:bd:1a:
1d:38:df:7f:50:f2:ca:30:b8:0d:48:96:95:5a:f4:
d2:37:ff:79:f3:91:80:32:ed:2e:6c:8a:84:c0:af:
8b:6b:5e:5e:19:ee:af:43:8a:f4:3a:42:65:fc:d2:
26:5c:33:14:1a:79:4e:2f:30:d7:f7:48:59:c7:85:
7c:98:4f:f1:6e:d9:23:d0:65:f7:90:a0:30:2b:4c:
db:bc:66:fd:17:9c:34:7f:0c:56:54:0b:89:b3:78:
62:b8:c4:f4:07:5d:46:01:e4:1b:7d:fd:d8:43:05:
08:87:fb:88:3a:1d:93:5d:b5:1d:8b:ba:a9:a5:be:
e3:2a:ca:c3:96:c9:2a:75:32:9d:f5:74:30:82:3d:
5e:91:47:2f:8a:25:8d:89:07:0e:ea:40:c9:39:d9:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:0A:89:DA:18:E3:83:AD:15:30:9A:8D:E2:12:0F:5D:23:69:DC
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a0:29:3d:11:20:6a:2a:8f:b4:00:5f:7e:a7:5e:40:94:09:
11:9c:e6:cb:c2:d0:68:04:51:33:39:2a:60:53:0a:cb:48:3b:
18:c3:56:ca:71:91:5b:d8:71:42:bd:46:71:20:aa:74:a0:af:
35:c3:5e:40:8e:b3:49:15:03:b9:2b:ad:91:47:9b:ee:c0:ad:
7d:af:fd:b0:23:21:e9:2e:b4:ec:4a:ac:33:d4:fe:cb:26:85:
e0:6e:ef:3e:b9:26:7a:73:7b:07:07:46:35:dd:03:0a:31:a7:
6a:70:61:1c:da:f8:f8:c5:b6:7e:45:c8:49:6a:75:1a:9a:3b:
aa:5b:30:b5:c0:a5:2b:48:e1:e5:e6:27:76:84:f3:ba:94:8a:
7a:d3:56:fa:c4:69:75:59:4c:86:e8:5a:a8:96:e8:7e:b5:89:
3a:85:52:f1:7e:af:fe:dc:69:89:79:00:2f:e5:b7:f2:bb:de:
74:5a:91:3d:00:39:b5:1d:4e:48:fb:e9:59:4b:0f:75:7a:ff:
ec:cf:ea:b1:ac:35:3e:bc:f7:d3:a8:f2:56:34:7b:15:e9:36:
12:19:5d:8a:ef:de:6e:93:a0:01:10:47:81:1e:c2:00:9e:2b:
c9:01:cd:a0:2a:33:42:3b:01:ba:6e:fc:ce:8e:dd:66:a0:7e:
9b:45:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 02:43:57 2026 by rpki-client