Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: SVC936d3eLvhN0eOyW9l4gkZYEnHFHEN7CNLHFPXgZw=
Subject key identifier: 8D:73:AB:02:05:EF:25:FC:BE:96:9D:01:CF:14:4B:E3:A6:11:22:73
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019F047393DF747316120EAEDEACF76A8042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1996
Signing time: Fri 26 Jun 2026 15:01:51 +0000
Manifest this update: Fri 26 Jun 2026 15:01:51 +0000
Manifest next update: Sat 27 Jun 2026 15:01:51 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
3: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
4: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
5: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
6: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
7: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
8: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: jHaRREYl9LoZi95eF3Im42SCSYwzqjOuhkFIzKriUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:73:93:df:74:73:16:12:0e:ae:de:ac:f7:6a:80:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jun 26 15:01:51 2026 GMT
Not After : Jun 27 15:01:51 2026 GMT
Subject: CN=8d73ab0205ef25fcbe969d01cf144be3a6112273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:93:00:aa:7a:4c:38:be:6b:9f:aa:82:bf:
7f:6d:44:17:fc:b2:6b:fe:b8:15:2b:fe:ee:b6:d9:
41:04:ce:af:04:4c:2f:ec:23:49:d2:43:d4:df:2e:
3a:15:7b:c3:f9:6b:5f:80:61:17:43:af:69:bb:bd:
80:a8:be:c9:45:98:55:74:47:3e:08:1f:61:e1:86:
1e:9f:39:bd:8f:30:c6:5e:b4:6d:d6:f1:af:eb:af:
32:94:ad:1c:1b:c4:27:c5:6b:a2:51:1a:f3:36:db:
1d:4a:78:af:33:98:ff:97:68:32:dc:6d:aa:78:5e:
e3:90:da:ee:77:60:7b:93:e1:f0:83:83:de:bd:38:
7f:ca:db:77:f9:91:2b:8e:2f:78:55:d2:0d:f3:86:
e2:0c:5c:23:86:87:ea:2a:31:61:13:c5:92:88:34:
35:d3:06:c2:c5:ee:62:2f:6f:70:69:c7:c5:1e:d9:
0c:4e:1e:6e:d6:8e:0d:41:37:88:62:cf:b2:ea:3c:
cc:dd:ac:90:d5:86:ba:95:58:49:ff:c9:fb:af:dc:
78:6e:a3:1d:03:91:10:e5:9e:67:21:c3:d9:1d:cf:
8a:e4:52:38:0e:7d:ba:57:d6:8d:33:cd:21:d4:a9:
b6:dd:c4:9f:55:43:45:ea:77:5a:6a:e3:0d:7f:d3:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:AB:02:05:EF:25:FC:BE:96:9D:01:CF:14:4B:E3:A6:11:22:73
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:45:53:5e:90:3f:ab:8a:9a:47:1d:7a:3f:35:14:69:66:9b:
6a:ff:dd:c5:55:0f:fa:1e:93:44:a5:52:f1:c2:42:57:99:2d:
12:8a:ca:a2:41:e3:38:2f:b7:e5:3d:41:8c:6b:d7:c3:70:78:
83:71:a5:73:44:f0:66:63:9f:f8:89:ba:f6:a8:3f:25:5f:ba:
32:d1:2d:10:f1:ee:e8:75:87:c5:17:e5:7b:37:a0:88:dc:dd:
61:55:6e:57:18:4f:75:d2:eb:32:23:59:31:c5:ec:15:87:aa:
52:31:f3:97:d9:7b:99:1c:91:eb:55:35:55:75:ab:7e:cd:f4:
b7:c7:c0:18:a2:5a:0c:7a:12:b3:2b:b5:e8:4f:37:70:75:ab:
6d:51:15:a8:58:df:9b:49:f8:f8:60:0d:a2:e3:15:c6:b5:9a:
f3:9e:03:68:41:5e:21:ff:cc:61:34:b6:5b:39:d3:34:25:d8:
bc:04:5d:35:c3:99:1d:56:5c:57:1f:6b:4e:6c:38:67:99:ba:
e0:9c:72:f7:6b:a2:5f:d1:e0:00:02:60:4a:cc:87:72:4e:21:
8c:76:3f:66:5a:5b:cc:db:9f:ff:cb:b1:ae:fd:4e:c0:8e:83:
ac:9d:f2:b6:5f:8e:3b:1f:0e:b1:f2:ae:48:45:0d:b2:5d:80:
af:1d:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 21:36:15 2026 by rpki-client