Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier: AsU0PatB2L5YClKrsxE4JeQNFT2SCeUEHuRVluQwGDE=
Subject key identifier: 40:2A:1C:E1:7D:3E:52:A1:EE:6F:DF:73:50:12:AD:C2:55:2E:02:34
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 019FAAF529DBDCC03C43BD6AA8D4F7FB2C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:00:21 +0000
Manifest this update: Tue 28 Jul 2026 23:00:21 +0000
Manifest next update: Wed 29 Jul 2026 23:00:21 +0000
Files and hashes: 1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: i2UJLecndWoPCP5vsMZ8/zB8g81tJOZlCpdclXUFnD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:29:db:dc:c0:3c:43:bd:6a:a8:d4:f7:fb:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Jul 28 23:00:21 2026 GMT
Not After : Jul 29 23:00:21 2026 GMT
Subject: CN=402a1ce17d3e52a1ee6fdf735012adc2552e0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:c2:91:df:d1:86:98:2c:90:ed:f2:49:6a:
05:88:d0:e9:eb:a4:8f:e4:ce:ed:ee:14:26:d4:1b:
c7:cc:7c:5e:57:7d:e7:4c:68:a3:f4:7a:16:3b:4b:
f7:57:cb:c2:a0:4f:ad:eb:9c:b0:2e:1b:d1:ea:8b:
5d:8e:02:64:11:9c:d3:60:e7:35:0c:8e:54:78:3c:
92:14:c8:b6:85:6e:d3:0c:75:ca:10:4e:45:08:02:
92:a6:1e:6f:99:18:89:df:62:8d:2c:91:5b:c1:5f:
e3:c0:46:c7:d9:cb:a3:c5:1a:9e:12:36:15:0a:d7:
86:9a:86:ca:86:ca:54:d8:6b:17:51:59:72:7d:17:
9e:11:25:ca:30:52:96:99:fc:e7:b6:8b:aa:96:7b:
d5:0d:f8:0d:06:3f:d8:1b:03:f6:f1:55:82:69:56:
81:11:ca:aa:9a:4b:4a:8d:24:d8:d4:58:71:ad:ad:
7e:6f:6c:16:09:28:b4:ab:c3:4b:fa:85:45:e7:7f:
ff:73:0b:97:f6:a2:47:17:8f:1f:8c:da:32:f5:55:
c8:11:ef:2f:f3:fa:b0:14:fa:70:24:c4:0f:2e:d3:
57:de:d0:4b:d3:ae:9c:cf:56:9b:f4:77:ae:14:de:
b6:02:98:4b:18:ed:dd:e7:2e:fd:4b:10:cc:ad:1e:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:1C:E1:7D:3E:52:A1:EE:6F:DF:73:50:12:AD:C2:55:2E:02:34
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:59:ad:bb:8a:d1:b5:c9:ac:25:ac:7e:f0:6e:54:fe:08:23:
39:5c:bc:f7:2b:e2:88:66:9f:cd:46:aa:95:de:73:09:8c:c3:
b4:b9:ed:b2:6e:5e:7e:91:1d:e3:e8:70:06:9d:f7:00:08:b6:
55:54:41:21:49:77:06:3f:71:6e:a6:1e:28:62:d0:c3:05:46:
b6:d6:a8:e4:49:c4:e1:0c:80:78:98:88:94:8e:25:73:35:20:
ad:52:28:f5:dc:03:d4:41:8a:03:13:17:bb:01:32:80:01:3d:
08:cc:25:c1:94:df:9c:42:eb:5f:8a:c4:3c:a4:19:12:ca:a1:
62:f2:9b:d8:e7:bc:6b:d3:d0:90:6e:67:4f:04:c3:09:45:60:
3d:90:11:aa:15:93:4b:9c:ee:f2:d9:c9:8f:49:6a:a8:72:5f:
20:8b:0a:e3:74:de:74:5b:0b:e1:91:f9:68:74:34:38:e1:78:
50:66:f4:49:07:02:cd:be:50:4c:65:15:7c:6d:97:fc:9c:94:
1f:ba:ba:3a:06:00:1a:79:98:59:32:3c:a5:7e:5f:a5:6c:9a:
85:56:c9:67:29:44:ff:50:5d:c2:af:5c:bf:8e:ff:3f:11:09:
72:a8:b6:36:7f:7e:da:08:9f:7e:80:d4:1b:69:2b:1a:18:68:
53:ea:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:03 2026 by rpki-client