Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: fnKmbhZkcNLHD2AHLtRjcnH5THvoanEitQUrMMAopFI=
Subject key identifier: B0:19:1F:E6:46:64:C1:5F:49:C9:0C:F8:7F:D5:D5:3D:6C:9A:33:07
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019CF5A9E26DC39FA4DC82260B0D5F6A9979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1883
Signing time: Mon 16 Mar 2026 08:01:17 +0000
Manifest this update: Mon 16 Mar 2026 08:01:17 +0000
Manifest next update: Tue 17 Mar 2026 08:01:17 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: tzIQ6whg2TbVtj6mCg8xkfggqpPpLWFYcO9y7bA1l80=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:a9:e2:6d:c3:9f:a4:dc:82:26:0b:0d:5f:6a:99:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 16 08:01:17 2026 GMT
Not After : Mar 17 08:01:17 2026 GMT
Subject: CN=b0191fe64664c15f49c90cf87fd5d53d6c9a3307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:aa:2d:f5:ac:37:25:c7:7d:ca:71:3b:e9:
5a:f0:a7:d1:3b:32:4c:c1:4c:1f:3d:32:fc:f7:0d:
2c:01:90:c4:04:3c:af:a3:89:e2:c9:15:fa:78:32:
3d:11:54:40:af:7d:ad:aa:65:b6:20:de:7f:3c:6c:
5b:f0:5f:5d:ae:d1:bd:f5:fa:47:77:4e:f2:f9:72:
df:20:11:52:16:e6:15:85:ca:2a:12:a0:f1:d7:ed:
99:24:2b:c0:34:c0:3b:ed:63:9c:f9:85:50:d9:66:
db:c5:6b:75:81:54:27:26:a6:99:bd:f4:2a:0f:e3:
ef:d8:d5:05:ce:66:c4:d0:4d:86:8a:36:d8:ad:02:
41:bb:ee:5b:75:0d:22:1f:8e:14:75:ee:6b:53:d7:
1f:51:7e:57:6f:d8:7b:bc:2f:2c:29:4a:3d:3d:22:
e5:fd:4b:45:bf:c2:84:b3:a4:40:00:7b:46:df:14:
85:42:dc:42:d3:3b:3a:c1:18:52:09:53:d2:7f:4f:
4d:ae:16:f7:76:c5:1e:c0:6c:ce:fb:8d:ba:59:d1:
c7:05:6b:b7:97:4d:51:1a:4f:46:04:d1:6b:20:86:
1f:4b:4b:8a:15:46:4d:12:f8:dd:7d:9b:a4:ec:d6:
db:fd:04:cb:c7:b5:4d:5d:d3:d9:5a:96:10:3e:75:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:1F:E6:46:64:C1:5F:49:C9:0C:F8:7F:D5:D5:3D:6C:9A:33:07
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:10:8a:25:7a:f4:8e:63:b4:7a:68:fb:f7:74:6b:7e:6d:a2:
ca:87:c8:2a:1a:56:aa:ac:27:72:de:a5:fd:ce:ea:b7:bd:93:
5d:f5:c4:df:bd:b2:a9:47:51:7d:b6:60:95:84:39:8a:16:6a:
b8:95:09:8d:7e:c3:43:76:f9:d6:79:d9:74:07:a3:bc:f9:bd:
18:2a:2a:08:ac:fb:fd:44:33:de:c9:d5:3a:2d:8f:59:d0:07:
38:31:49:3a:7c:3e:0f:25:94:7c:6c:85:90:7e:a9:5b:04:bb:
fd:5b:c2:36:e7:97:1a:2f:37:16:a0:7f:9e:6a:d6:2f:e2:76:
9a:7a:51:c0:92:6c:49:8c:73:b7:0c:be:82:47:76:0a:48:2b:
43:12:4d:af:b6:ab:8c:a6:61:a1:31:aa:62:6c:31:a3:0f:08:
08:5f:ef:b9:c8:90:89:60:f1:d3:83:61:54:85:de:cb:28:87:
95:46:4a:5f:fa:5e:17:1e:66:4c:6e:8d:5d:78:d9:a9:b5:b1:
74:e4:d8:aa:f7:21:6f:ae:51:13:b2:78:fc:25:bd:64:a3:5f:
16:53:ed:22:92:34:24:88:0b:0d:2a:53:f4:9c:fa:66:8b:15:
49:5a:e9:e8:93:67:63:54:51:12:1b:8c:2a:3b:07:c0:a5:e5:
d0:43:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 11:38:37 2026 by rpki-client