Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: dJihreR2Iwe1+6GrZkGt+4jxQJVx9W88W27RanzND2Y=
Subject key identifier: D8:DA:FB:0E:8C:67:75:AD:72:A8:3B:BB:5F:10:A2:6C:1E:61:53:21
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A04AD1BE1E03CA9021404C109DA8DE9A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1A40
Signing time: Sat 29 Aug 2026 00:00:54 +0000
Manifest this update: Sat 29 Aug 2026 00:00:54 +0000
Manifest next update: Sun 30 Aug 2026 00:00:54 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: jSBB8eMKtSQ75KWWwR6ylc+UTTg02gr0pQ+mStJp2wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:d1:be:1e:03:ca:90:21:40:4c:10:9d:a8:de:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Aug 29 00:00:54 2026 GMT
Not After : Aug 30 00:00:54 2026 GMT
Subject: CN=d8dafb0e8c6775ad72a83bbb5f10a26c1e615321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:e9:22:e0:5a:20:b5:16:c2:72:22:a4:a4:
a4:1e:3a:e0:3f:84:ee:be:66:2a:04:91:8a:51:cd:
b8:f3:f1:4c:fb:17:a5:52:10:14:0e:32:db:27:45:
59:5c:ef:d7:32:a1:97:e2:7f:13:83:0b:92:59:ff:
01:c4:02:bd:ca:27:e8:c1:cd:17:d5:36:84:71:ad:
2d:19:7c:84:13:72:6c:e9:e1:89:d1:e8:e8:59:d4:
1c:74:b1:b5:e6:88:29:93:7e:1d:0f:ed:2d:76:ae:
48:4c:6f:02:e8:41:8d:73:cb:0e:89:7b:d9:d3:8d:
3b:87:2e:4b:ea:9f:d9:f8:af:12:17:11:73:b3:bd:
86:b7:f2:18:ce:1f:a7:7a:da:10:82:91:04:18:e5:
08:26:08:a5:a4:60:b1:3f:3e:b5:c3:c5:78:ad:5a:
06:b4:44:d5:cb:51:e1:c7:f3:bb:e6:5a:d6:5c:ef:
73:f2:06:c4:64:8a:a8:26:1b:c9:25:db:5b:b0:35:
bc:2f:0b:85:38:51:4a:b4:be:90:1b:39:1a:64:26:
87:82:c6:8f:db:37:e2:56:8e:1f:b2:9a:1b:4f:08:
68:03:d0:58:f8:1b:35:ad:8a:07:1d:99:9e:05:49:
1f:bc:aa:d3:d9:3b:95:c9:6a:67:89:91:94:d9:8f:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:FB:0E:8C:67:75:AD:72:A8:3B:BB:5F:10:A2:6C:1E:61:53:21
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:8b:e0:4c:c5:3f:0b:99:21:a7:0e:9a:f3:4b:9a:c2:d7:
92:18:19:9b:15:bb:3c:4f:19:26:c6:f8:a8:c9:e5:cd:f1:8e:
47:ce:e1:df:92:3b:5f:19:90:2a:19:49:f8:f7:4f:22:11:58:
ef:83:8e:26:9f:94:2d:b8:d0:27:13:46:b4:bc:f1:2b:c1:f0:
f8:84:d2:0f:a7:61:88:4e:7f:83:10:06:31:8a:0c:18:d6:5a:
18:45:1e:95:a6:c1:b0:0f:b5:d8:b4:c5:80:b3:34:24:1d:57:
35:d5:28:51:53:e6:d4:df:52:a3:c8:2d:10:ba:5b:40:26:be:
51:75:52:39:f2:6a:94:ed:d8:ad:84:44:57:f5:fd:aa:8e:b7:
9e:96:4e:b2:5d:c5:3a:7a:b6:19:b4:09:f4:90:e3:a6:75:6f:
5a:a4:6a:ad:eb:86:fb:1b:9b:99:90:18:13:2d:cc:a9:77:5c:
d6:06:b4:6e:13:e2:59:33:19:e2:e9:6d:c0:26:37:ba:34:6f:
a1:24:13:32:f9:09:06:c0:77:06:dd:53:55:84:d1:a6:81:9f:
8d:ca:dd:01:17:4e:45:ea:8f:c7:35:c4:8f:f4:a7:42:ef:28:
7f:9e:b0:fc:eb:65:5b:38:74:64:67:64:73:2a:03:63:3b:41:
a0:4b:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 03:08:24 2026 by rpki-client