Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: vm4Hjqyi+a9rWRUp39qtJr0UYDTo29p+TvaJfOoJqqk=
Subject key identifier: AE:A4:B1:07:11:D0:EB:87:A1:91:80:EE:43:4D:E0:EA:68:E5:CB:12
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019E4F59291CF4DDEDCF025F282458D7F512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1936
Signing time: Fri 22 May 2026 11:01:43 +0000
Manifest this update: Fri 22 May 2026 11:01:43 +0000
Manifest next update: Sat 23 May 2026 11:01:43 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 3kaP+fQ2GLPVdqxRTS/q1u0+G5V19XcfBBSg+rRfkqM=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:59:29:1c:f4:dd:ed:cf:02:5f:28:24:58:d7:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: May 22 11:01:43 2026 GMT
Not After : May 23 11:01:43 2026 GMT
Subject: CN=aea4b10711d0eb87a19180ee434de0ea68e5cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:2d:c9:63:e9:fd:0b:fb:5c:35:22:3f:98:
e9:c6:67:6a:3c:3c:91:0b:70:fc:1e:bf:70:43:26:
2c:14:8d:39:16:66:04:c5:29:8e:25:f0:3d:1d:59:
fd:c0:8d:6f:27:b2:45:02:9a:7a:06:01:10:97:2c:
ab:d2:64:b4:3d:d4:91:0a:99:8d:19:be:6b:b8:db:
09:35:f8:65:d8:a0:c3:8d:e0:ec:84:e5:74:8d:93:
d5:45:be:8b:0b:ef:93:0b:9f:4b:90:9d:b2:a2:da:
dc:fc:1f:ba:ec:f0:d7:fb:3c:de:44:05:1d:20:76:
a1:7c:2c:c8:5b:8f:84:18:91:c4:23:b7:c8:00:42:
7e:4a:cc:25:76:cd:f0:f8:b9:b1:95:d1:b6:34:a0:
ec:2d:4d:f1:db:6c:d0:c9:47:e5:0e:a4:eb:8f:e7:
e1:e3:99:f5:2d:19:d2:25:09:8e:61:e1:b9:23:da:
56:34:5f:43:6a:fa:38:f8:60:d1:7d:71:e6:a2:a2:
7a:49:56:5a:61:dd:24:d7:de:24:89:50:22:e2:44:
fb:99:4c:bd:b4:02:55:95:9b:33:a7:7f:9e:94:67:
be:3c:f2:5a:27:01:5e:ad:b1:f5:0c:e0:c1:5f:1f:
4c:1f:7a:49:6d:5c:3e:3f:19:74:05:d1:e3:e8:3f:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:B1:07:11:D0:EB:87:A1:91:80:EE:43:4D:E0:EA:68:E5:CB:12
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b8:af:04:5a:b4:1b:b5:7d:7e:a7:15:3f:91:09:16:e1:f9:
2c:13:66:2b:89:c9:ed:62:48:cf:92:77:78:cc:76:af:18:a3:
92:32:a1:b0:8d:84:48:f2:55:a4:6f:30:d3:1a:cf:98:de:b5:
82:81:3b:d2:cb:6c:ac:10:fb:be:f3:a9:34:0c:27:6f:4f:be:
cb:83:3f:d3:a3:0d:4b:8d:53:61:2f:7c:94:66:bf:1d:3d:96:
17:f1:50:5d:c3:3e:0a:c5:c1:68:cf:89:22:75:6d:32:e2:70:
98:f9:9a:55:11:47:d5:5f:96:f7:e4:f8:e5:06:26:a9:0c:cd:
8d:3a:70:32:53:b1:3e:62:8d:93:e0:41:f5:fc:b3:bd:06:64:
96:1c:a6:76:c6:de:d1:0e:6e:2e:14:3d:d0:fd:5f:d1:68:37:
b8:a7:42:f9:0e:49:d4:d4:72:c1:6e:13:ad:ad:24:d4:b3:95:
19:d1:89:57:66:52:13:84:b2:7f:3f:27:8b:b7:71:bb:f2:ae:
2d:55:e3:88:a1:78:82:1e:8c:5c:1e:34:27:d5:9b:75:d5:83:
15:9b:f7:29:64:63:29:e6:a0:97:fd:dd:b6:8d:58:9d:ad:07:
91:92:01:e5:e9:af:d9:94:c5:1a:90:62:ba:32:48:48:67:cc:
bb:b5:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:54:08 2026 by rpki-client