Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: Lynd0QGY1E48B87QTL1iZFPbi9nbxlcOAX/pTXRY0lk=
Subject key identifier: 36:C8:31:62:E7:7B:B8:FF:1D:B2:8A:1F:D2:DE:38:C3:43:26:69:E3
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A0016F29F9D21CEA934DD661B8D8B4DADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1A1A
Signing time: Fri 14 Aug 2026 18:00:57 +0000
Manifest this update: Fri 14 Aug 2026 18:00:57 +0000
Manifest next update: Sat 15 Aug 2026 18:00:57 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: pXHft3ld6qpiJ5U18ox/I1Vux1gp6znwk6UvaW99Ddc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:29:f9:d2:1c:ea:93:4d:d6:61:b8:d8:b4:da:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Aug 14 18:00:57 2026 GMT
Not After : Aug 15 18:00:57 2026 GMT
Subject: CN=36c83162e77bb8ff1db28a1fd2de38c3432669e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:46:48:b0:55:98:89:bc:b8:39:64:ed:af:
fd:00:55:81:f6:98:d7:b3:33:ac:e3:53:3e:d9:37:
83:28:a4:9e:3b:6e:cc:aa:45:9d:39:5b:77:ce:d4:
37:84:9f:a9:ab:c1:bc:00:2a:a7:15:3a:4c:d5:e8:
82:78:37:1e:d6:71:9b:c5:34:a6:4b:e1:72:04:00:
87:87:77:f6:14:5e:53:14:72:58:d3:51:13:e6:19:
88:c7:25:f7:af:7a:b8:2c:c3:9e:2a:99:3a:be:c5:
9a:82:51:7f:d0:51:5a:a1:84:8d:04:ad:fc:4c:5f:
22:aa:52:06:22:e0:37:cc:9e:a9:e4:85:a3:02:6a:
5b:f8:58:bd:d0:35:d7:6f:ea:78:00:ed:45:92:26:
0c:e6:fe:f7:0f:83:60:c5:8b:df:41:7a:5f:d6:bc:
fa:82:36:42:f4:6d:3c:84:3b:b5:8a:7e:10:65:d3:
00:20:2e:1a:a7:58:df:0a:89:6a:85:88:9e:df:f9:
7a:5b:be:49:e5:4f:90:c8:43:79:46:6b:bc:71:32:
05:f1:f7:1a:bc:4e:91:b5:e0:84:b4:d4:0e:49:ed:
e3:1f:82:11:ec:16:4d:9d:11:a7:73:4d:2b:e6:0a:
74:b2:4d:58:87:66:ad:35:e3:0b:32:6d:a7:24:4f:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:31:62:E7:7B:B8:FF:1D:B2:8A:1F:D2:DE:38:C3:43:26:69:E3
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:cd:ca:b9:84:ce:8d:39:71:0d:e4:e2:24:cf:fe:67:bc:
c9:1e:3e:c3:45:19:78:36:2a:f1:d4:c3:30:95:bc:5c:4d:0a:
8e:67:f9:5a:39:12:dd:72:18:f1:57:67:39:ef:9f:53:c6:5e:
b5:1d:00:1e:9a:0d:7e:9d:2d:a6:2a:cb:23:51:be:df:11:b3:
ce:50:ce:85:42:52:10:c6:d5:d7:fb:79:b8:48:a2:d3:c1:2e:
65:49:6f:eb:a3:41:9c:c2:b4:bd:28:25:3f:f1:49:63:ba:bd:
70:ff:21:b6:ad:e6:d2:0a:6f:d2:b7:e5:fd:25:6f:1e:b8:9c:
ca:df:94:31:87:dd:6c:e6:76:57:a1:95:0e:a6:71:0b:97:8c:
55:d1:7e:c1:9d:cb:a3:43:6d:e5:34:c9:0e:f1:98:d9:0d:13:
c4:ce:59:4b:55:2e:51:e1:88:ce:95:44:ba:c2:12:fc:c1:ae:
c6:af:29:d0:6d:65:04:dd:45:b5:aa:d8:a9:83:cf:ef:af:8b:
46:71:07:ad:6d:5f:09:46:0c:6a:f4:bf:b1:a5:ba:33:2e:01:
ac:37:b1:1e:e1:26:5b:13:48:a2:6b:b7:60:75:5f:ed:bb:c4:
a3:9f:d3:18:9c:d5:7d:32:1e:80:b2:48:d4:0f:23:44:af:84:
92:9f:e6:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbyn50hzqk03WYbjYtNreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwODE0MTgwMDU3WhcNMjYwODE1MTgwMDU3WjAzMTEwLwYDVQQD
EygzNmM4MzE2MmU3N2JiOGZmMWRiMjhhMWZkMmRlMzhjMzQzMjY2OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/FGSLBVmIm8uDlk7a/9AFWB9pjX
szOs41M+2TeDKKSeO27MqkWdOVt3ztQ3hJ+pq8G8ACqnFTpM1eiCeDce1nGbxTSm
S+FyBACHh3f2FF5TFHJY01ET5hmIxyX3r3q4LMOeKpk6vsWaglF/0FFaoYSNBK38
TF8iqlIGIuA3zJ6p5IWjAmpb+Fi90DXXb+p4AO1FkiYM5v73D4NgxYvfQXpf1rz6
gjZC9G08hDu1in4QZdMAIC4ap1jfColqhYie3/l6W75J5U+QyEN5Rmu8cTIF8fca
vE6RteCEtNQOSe3jH4IR7BZNnRGnc00r5gp0sk1Yh2atNeMLMm2nJE8eswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbIMWLne7j/HbKKH9LeOMNDJmnjMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvbNyrmE
zo05cQ3k4iTP/me8yR4+w0UZeDYq8dTDMJW8XE0Kjmf5WjkS3XIY8VdnOe+fU8Ze
tR0AHpoNfp0tpirLI1G+3xGzzlDOhUJSEMbV1/t5uEii08EuZUlv66NBnMK0vSgl
P/FJY7q9cP8htq3m0gpv0rfl/SVvHricyt+UMYfdbOZ2V6GVDqZxC5eMVdF+wZ3L
o0Nt5TTJDvGY2Q0TxM5ZS1UuUeGIzpVEusIS/MGuxq8p0G1lBN1FtarYqYPP76+L
RnEHrW1fCUYMavS/saW6My4BrDexHuEmWxNIomu3YHVf7bvEo5/TGJzVfTIegLJI
1A8jRK+Ekp/mmw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:40:19 2026 by rpki-client