Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: Ykf3znl5JA+WKs0HYiNHckVfTXFF8W3GIXiCKXlsWgc=
Subject key identifier: 28:31:55:B2:3C:E4:BA:B2:0E:8E:53:D5:D8:59:91:DA:07:7A:BB:81
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019DF6831138703D37AD481EA9BFB1C58E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1908
Signing time: Tue 05 May 2026 05:01:17 +0000
Manifest this update: Tue 05 May 2026 05:01:17 +0000
Manifest next update: Wed 06 May 2026 05:01:17 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 3OzfcekO1kLxnEuErbauEwuKMNxAGrw7YXLkHOd+uAI=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f6:83:11:38:70:3d:37:ad:48:1e:a9:bf:b1:c5:8e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: May 5 05:01:17 2026 GMT
Not After : May 6 05:01:17 2026 GMT
Subject: CN=283155b23ce4bab20e8e53d5d85991da077abb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:01:b1:2f:f6:2c:fb:e5:88:ca:17:2e:2d:73:
70:98:da:19:d0:fb:8b:18:f4:ff:2c:5e:d3:b5:cd:
22:91:a3:0d:73:38:3e:3f:b7:ef:46:a7:13:c5:54:
76:51:a7:b1:a3:cd:7b:e1:a3:c2:87:9a:52:a4:eb:
9b:e0:41:f9:c8:03:f6:91:da:3d:cc:2f:b0:16:e7:
84:88:43:94:07:a9:56:cc:ac:0f:29:c6:8a:9c:7a:
02:97:38:42:95:3e:2e:ca:ad:e5:69:85:a1:3c:7a:
93:66:c3:19:bc:1e:bf:ff:20:76:91:e5:af:e1:e5:
17:f3:8f:f6:74:cb:a5:26:bf:e8:d3:8b:b5:69:f0:
3a:a0:8a:7e:54:33:50:4e:d5:0d:69:89:60:4b:aa:
52:b0:8f:65:fd:23:a5:3b:b2:d6:a0:49:10:f8:1e:
74:22:12:3e:b5:0e:e3:1a:19:ea:13:3e:ff:92:b8:
28:77:e4:ec:5e:18:98:d9:13:0a:26:77:80:1f:be:
2d:f4:4f:84:21:87:8b:8f:5c:fb:82:fc:6d:09:cb:
36:ce:e8:b0:3e:79:92:8e:a3:7a:7e:e8:ca:53:8a:
36:ef:d1:cd:97:7a:02:2c:c4:36:b2:e8:47:7f:f9:
bc:14:45:f7:4d:d0:b3:89:10:3a:1f:6a:78:c5:c6:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:55:B2:3C:E4:BA:B2:0E:8E:53:D5:D8:59:91:DA:07:7A:BB:81
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:fa:97:29:4c:6f:7b:3f:c1:da:b1:15:25:22:4c:7a:b9:fa:
bc:1b:5e:67:ef:82:99:5a:0b:4c:4d:e1:bf:56:3f:d3:02:60:
cb:ea:0d:03:99:bd:c4:f4:4b:9d:df:13:37:30:dc:24:bf:03:
13:46:57:42:5a:52:64:a1:68:6e:76:74:0d:52:1a:b9:2f:1a:
b1:a6:89:29:c8:4f:8d:92:70:19:09:4d:10:d7:02:38:09:40:
67:89:18:74:62:c0:6d:d6:d8:31:62:44:f8:7e:01:b8:a4:f5:
0d:d8:a9:9c:46:8b:ab:8b:32:70:17:3d:2e:20:f0:2b:5c:ee:
0b:a3:5a:68:04:ca:d5:ec:8f:7b:c9:52:0e:3e:09:36:4b:c5:
de:8d:75:0c:05:f7:98:91:cc:1e:8e:9e:35:aa:df:8f:e7:c1:
55:5e:c5:42:7d:07:45:44:cb:cd:f8:e5:0b:c6:e2:07:9a:fe:
c7:51:3c:bc:01:26:a7:d3:e2:9c:83:24:34:37:db:3f:fc:47:
8b:5b:81:82:ed:2d:3c:26:5d:41:92:2a:ba:f4:8c:62:37:31:
48:c6:8e:8a:33:3e:8c:bc:46:5f:40:fa:41:41:90:d5:e5:46:
8f:b2:e1:0e:e0:a3:4f:47:b0:77:4c:aa:e5:80:5f:03:4e:49:
57:98:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 07:55:21 2026 by rpki-client