Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: rCjZAJ2Hcf4rtpSkM0PnYIgx4aw4XgkBStTEXuKx4UY=
Subject key identifier: BC:A8:B2:03:6A:87:B5:BD:5A:8A:E0:2F:D2:7C:1A:23:84:DB:E0:1C
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019F728706FDF39DABE75681A24E6007E817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 19D0
Signing time: Sat 18 Jul 2026 00:01:19 +0000
Manifest this update: Sat 18 Jul 2026 00:01:19 +0000
Manifest next update: Sun 19 Jul 2026 00:01:19 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: PD7e/ZbAeOxMgHI8gCkUJPhzH3al2X2i9gBF8ezx4yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:87:06:fd:f3:9d:ab:e7:56:81:a2:4e:60:07:e8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 18 00:01:19 2026 GMT
Not After : Jul 19 00:01:19 2026 GMT
Subject: CN=bca8b2036a87b5bd5a8ae02fd27c1a2384dbe01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:7e:aa:35:97:6f:1a:f5:e1:75:29:88:50:
1d:36:09:13:1a:c9:b4:1e:e1:91:38:cd:1e:b4:72:
4c:23:36:5c:0e:f6:ac:b3:02:89:12:08:81:c5:c2:
3c:46:b1:26:ed:9e:23:3a:e9:ea:90:dc:28:d5:2e:
f2:05:8a:a8:40:2f:b1:57:c4:f7:80:72:41:11:50:
34:08:98:dd:08:15:af:94:0d:23:f6:c9:33:92:07:
40:4c:99:0e:7b:e4:95:de:be:bc:0a:c2:86:b3:59:
77:08:2c:35:ab:d7:0e:99:15:9f:fb:4e:85:68:99:
2b:8c:a8:16:79:b9:e0:48:55:29:c6:c6:0a:c2:62:
de:a7:63:0c:d8:59:fc:23:48:0f:3b:8f:38:75:99:
78:c2:ae:04:6e:51:cb:6a:5a:6e:cc:31:44:88:65:
9c:d2:16:7e:6f:a0:79:ec:d0:a5:53:01:fd:6f:5c:
53:b8:86:79:f7:7c:db:9d:a5:7f:89:d8:6c:56:7f:
fd:31:62:c3:df:4a:47:87:0c:31:2a:b8:44:d0:cd:
d3:d4:17:e0:43:4b:2b:4e:7a:de:89:2c:4d:30:5c:
17:5b:fa:dc:1d:31:2a:f7:72:8f:0e:0b:4a:c0:8f:
4a:60:5c:79:d8:4d:64:ae:57:ff:79:52:ae:2f:25:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:B2:03:6A:87:B5:BD:5A:8A:E0:2F:D2:7C:1A:23:84:DB:E0:1C
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:18:f1:27:c2:65:ca:8a:4a:e6:d2:7a:1f:65:c9:e4:44:94:
61:34:b2:7d:5a:e9:1a:95:6f:c1:9a:d0:cf:a6:e4:8e:13:2f:
46:e9:44:38:e3:20:91:2e:ef:e3:d4:51:36:a9:27:72:0e:52:
6d:7d:f0:73:f6:8a:96:11:d8:44:ad:84:4b:c2:35:42:9d:49:
27:83:7c:43:81:80:1b:e0:57:8e:a2:9b:ec:5d:24:35:a4:44:
71:10:00:d4:bf:9b:d5:b5:e5:2f:f1:3f:5f:2b:7c:6e:aa:f7:
4b:37:02:dd:b2:3b:cd:b8:8d:98:4e:d0:31:e3:3a:89:59:b1:
1a:df:55:13:ba:50:a2:91:8d:1c:3d:d2:12:06:03:63:28:ec:
c4:21:2a:dd:df:9a:78:64:31:61:b2:e4:0c:3e:13:15:58:d1:
07:58:b7:13:c5:a4:fc:69:5b:f0:11:9a:c4:66:2b:4b:5b:ea:
4c:b9:70:6c:78:3d:0f:d0:b2:48:d0:87:30:31:36:ae:05:8d:
07:f7:b8:8f:39:9d:14:a4:01:33:0c:ae:d2:6d:2d:96:c0:09:
e4:9c:36:94:9a:47:08:8b:8a:89:46:99:f5:69:ba:95:78:b0:
98:d8:bd:c8:a1:0a:46:c5:c1:28:08:8f:1a:9d:ff:b1:9c:6e:
f2:32:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:17:12 2026 by rpki-client