Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: EZeOGuz96fuhoCROlrX9N4vTh4Tjv5ScTezOR5+OH7c=
Subject key identifier: 33:AA:73:A6:28:1A:CD:BF:7D:E5:14:A8:89:AE:67:93:0F:51:2A:01
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D394135014A6B5A755F7B474E9CAFD37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18A6
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: H62vc9R59hLV0hmYxN67MZUrr6ZPRR0h/DMVNLMWIrs=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:35:01:4a:6b:5a:75:5f:7b:47:4e:9c:af:d3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=33aa73a6281acdbf7de514a889ae67930f512a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:db:7d:58:bc:36:f4:a0:0e:05:00:5d:8c:
39:f7:f3:91:af:61:94:ae:d2:3c:9f:ce:3f:cd:6f:
8b:8b:e3:79:a8:e3:d9:29:06:26:47:88:d0:d8:45:
7c:b6:4d:51:59:fe:99:f8:35:3e:98:5c:1a:65:2d:
2f:eb:64:28:56:3c:77:de:e0:da:40:14:25:e7:7f:
aa:ec:a7:e3:7d:88:ef:3a:33:96:26:ca:56:a8:a2:
be:02:42:e4:71:07:da:95:99:6a:bd:ae:a6:86:72:
6d:ee:f6:a8:62:2a:3b:74:ed:1a:23:0d:59:d1:b8:
7f:85:ad:4b:48:73:fe:96:94:c7:12:b9:76:0e:8c:
47:70:75:58:e5:73:57:61:4d:15:c9:1b:99:be:27:
58:31:0d:2b:78:14:1b:ee:f5:78:c0:47:68:93:41:
0e:0a:d4:a1:d8:2f:98:58:0f:fc:57:b2:7e:c3:fb:
e1:d1:27:cd:6b:8f:8d:8e:9e:a1:7c:de:a8:7c:a1:
6d:32:6d:a4:d8:f1:84:09:f5:af:81:db:09:36:f3:
a7:5f:51:bf:23:b8:24:b1:12:b9:34:e9:5d:c2:9c:
f9:92:ca:3e:8a:79:41:11:39:2a:04:08:ee:84:e5:
d3:e8:57:ca:46:7f:5f:2d:ca:1b:cc:a9:c9:b2:ca:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:73:A6:28:1A:CD:BF:7D:E5:14:A8:89:AE:67:93:0F:51:2A:01
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:dc:7a:c3:ac:ce:cf:e1:97:cf:da:45:6b:a0:07:21:73:a7:
6e:a8:26:a6:ea:5e:1a:47:35:ab:4a:a9:b0:51:9d:3a:5b:61:
91:0f:ee:b6:15:47:b4:ee:ee:2a:04:57:d8:f7:2b:02:02:cd:
8f:1f:df:9c:06:e4:d9:5f:42:dc:b4:ad:f6:3d:29:a6:09:f0:
ac:71:d1:c4:3d:d4:8d:38:d8:25:92:f9:1a:db:6e:fe:92:2d:
15:90:23:be:fb:fe:fd:f5:1b:d7:47:e9:74:b8:12:27:26:2d:
ff:b2:eb:c5:86:a4:8d:4a:42:4e:37:a6:30:e0:e8:d3:43:fc:
34:ac:be:f5:8f:68:da:f3:55:91:88:f0:b0:00:f4:b4:e0:4a:
9c:b3:3c:7c:2d:3e:08:43:79:25:24:85:3a:69:d9:2f:1f:63:
b4:ac:52:66:eb:01:1f:b9:fd:8d:f7:3c:fa:6b:36:be:a0:68:
62:d4:f7:74:4f:f3:84:67:35:87:b1:7b:90:d5:f3:2c:f3:7c:
6f:a1:34:db:58:32:a7:e9:ff:3d:5a:06:25:36:31:d5:36:5e:
4b:4d:20:8b:05:27:ce:7b:c8:ad:2a:1a:3b:1d:bf:88:a0:1e:
ca:fa:37:d2:56:ba:d5:d4:b7:72:a3:9c:9a:37:9f:a7:67:fd:
d4:30:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:08:12 2026 by rpki-client