Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: VFbBMBUXWfIgkheNRZfjhHti2SRqtPolkA/+w0V/dyQ=
Subject key identifier: 08:48:A4:3E:60:01:2B:C0:97:43:C1:13:B6:CB:96:CD:79:23:92:64
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019F4DD6B093FBA42CD3DF421E28CBB5D73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 19BC
Signing time: Fri 10 Jul 2026 21:02:23 +0000
Manifest this update: Fri 10 Jul 2026 21:02:23 +0000
Manifest next update: Sat 11 Jul 2026 21:02:23 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
3: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
4: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
5: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
6: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
7: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
8: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: L0G0wr8euGzf4FQu3lugIL+/mce7DH0bk1Qd2MpDOmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:d6:b0:93:fb:a4:2c:d3:df:42:1e:28:cb:b5:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 10 21:02:23 2026 GMT
Not After : Jul 11 21:02:23 2026 GMT
Subject: CN=0848a43e60012bc09743c113b6cb96cd79239264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:10:00:52:05:bc:59:5d:3b:45:b9:64:73:
fb:8b:f1:ad:45:0b:4e:ed:02:51:5d:3d:9c:df:83:
81:e8:d2:b9:60:1a:7d:fd:19:16:93:1b:49:35:9a:
f4:fa:37:47:d5:66:59:f4:6e:f7:97:da:ad:b2:17:
aa:ab:7f:12:9a:27:8e:2e:0e:2e:0f:45:86:66:05:
d8:14:23:c5:0e:1e:f2:2c:ed:c3:a0:58:6d:e6:19:
96:ee:8a:52:a0:b6:99:41:a4:03:89:36:79:c6:d0:
00:c3:ff:41:61:f7:6c:17:e2:14:c3:c8:c0:5a:6b:
19:53:d7:c8:b8:5d:75:16:06:4e:54:e8:56:6c:ae:
2d:91:af:47:f6:6c:fc:ac:c4:eb:17:27:58:f4:97:
1d:05:69:67:bc:20:c5:2a:e4:7a:a0:be:8d:c3:aa:
d2:31:e8:57:cc:a0:06:c5:a0:ad:bb:84:51:e4:e2:
54:d5:5c:78:3a:cb:6e:82:ea:2d:d7:49:36:bc:b6:
b6:1c:bc:6e:e2:1c:a4:f2:c6:9a:6a:17:04:58:5a:
45:e2:2d:b2:b0:59:9e:a4:f0:1d:db:ff:bc:dd:37:
64:e5:16:8c:57:2d:da:b2:67:72:83:7d:50:f0:6c:
ad:1a:1a:7b:69:0e:77:b2:ff:85:d7:d3:86:7b:4c:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:48:A4:3E:60:01:2B:C0:97:43:C1:13:B6:CB:96:CD:79:23:92:64
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:38:d5:fe:64:bf:f1:e0:3a:33:ee:66:cd:76:1b:7e:a9:77:
18:30:04:bc:32:8e:a6:01:c1:6d:b9:08:54:c7:67:8c:ff:b9:
22:63:05:4c:65:f0:b4:82:fa:77:24:84:f5:43:b8:db:53:2b:
31:07:99:68:9a:16:45:ee:95:43:14:c2:74:b9:e2:fe:67:28:
5b:8a:4e:dc:ab:84:09:f3:37:73:04:94:ad:78:b7:71:18:bf:
af:6a:c3:ab:4a:0e:71:5e:3e:89:65:35:69:da:6e:e2:c4:4f:
6c:9e:a3:ce:1d:ee:4d:4e:34:88:63:ec:87:4c:b2:b3:55:cb:
11:c3:08:28:4d:c8:bf:7d:1c:c2:92:62:82:bc:24:f1:36:0d:
0a:87:59:22:d9:45:83:3e:7d:6c:ed:e2:0b:65:c7:e8:f9:44:
13:7c:5d:be:69:8a:18:4c:31:a6:89:21:c8:e1:6d:ab:a8:a5:
ce:34:68:03:d7:58:b6:cf:d0:bc:23:bd:5d:ec:b9:21:11:44:
4e:80:55:13:11:13:eb:0b:b8:13:3e:d5:1b:39:df:7f:85:95:
ba:94:5c:fc:3d:d8:a1:5d:4b:b4:fb:0f:50:8a:10:a8:de:f4:
4b:1b:29:77:90:97:48:4a:5e:84:76:5a:e3:90:1c:29:f0:ca:
7f:18:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 01:07:03 2026 by rpki-client