Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: mjvhyvTt3VO1gPGTr96CTqPDvHcULWnS+mNmySN6uLE=
Subject key identifier: 1E:B1:B6:E8:83:63:F1:78:45:60:61:F2:7A:01:BF:E6:7F:97:FB:8C
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01A0C5C5795E60103EBE8F1A51369F3D8D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 1445
Signing time: Mon 21 Sep 2026 21:00:48 +0000
Manifest this update: Mon 21 Sep 2026 21:00:48 +0000
Manifest next update: Tue 22 Sep 2026 21:00:48 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: L5srmWIodcn1LxMhmSLK3B1cvB2qt27Kk/eqDxe2nJA=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:79:5e:60:10:3e:be:8f:1a:51:36:9f:3d:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Sep 21 21:00:48 2026 GMT
Not After : Sep 22 21:00:48 2026 GMT
Subject: CN=1eb1b6e88363f178456061f27a01bfe67f97fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:86:10:4d:41:66:fb:b4:95:1d:68:f1:66:
56:1a:3f:92:19:a5:85:4b:0e:5a:a4:d4:2f:b5:99:
8c:85:21:c5:22:17:35:35:7b:73:b4:a6:e1:e0:ac:
bf:fd:f0:03:22:9b:27:4e:96:e9:a4:9e:b1:fc:c3:
4e:03:40:2b:09:3f:49:4e:a4:18:b7:3b:1f:c7:e2:
b7:45:95:b2:7f:cc:c4:1d:b6:5a:36:59:55:8f:68:
05:64:6d:e3:9f:24:42:93:ce:e4:47:f4:73:4d:67:
15:27:9f:b6:d1:dc:7a:23:65:4a:0f:e2:73:43:11:
37:ea:ec:91:db:91:2e:9a:7c:43:66:1e:64:0b:05:
4c:a3:28:f2:fc:36:0d:80:0b:a6:20:52:7f:62:cf:
37:4f:c6:ad:26:ab:b0:22:69:36:b0:ac:05:01:30:
bd:9d:dc:14:75:f5:8c:88:64:e6:55:fc:36:59:f6:
5d:66:b9:b1:c6:45:f3:08:f5:84:56:8f:f6:b6:6a:
68:e9:1a:ab:a1:02:37:3a:30:53:05:1f:46:f6:b6:
b5:bc:ef:b4:5f:df:7e:a3:16:14:3b:4a:79:59:85:
b7:8d:7b:93:87:4b:99:94:cc:9a:4c:8b:58:fc:bb:
6b:27:35:f9:31:ca:c3:35:ce:d4:98:0e:d0:9f:0f:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:B6:E8:83:63:F1:78:45:60:61:F2:7A:01:BF:E6:7F:97:FB:8C
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:64:8e:f4:66:2c:46:26:f2:c6:26:fd:b2:e2:04:2b:7e:32:
99:9e:2c:cc:96:70:72:7b:0d:60:88:12:15:7d:77:e0:68:37:
cc:f3:6b:44:d5:3c:ad:07:f1:be:ab:f7:a5:f6:3a:03:f7:b8:
6b:3d:db:21:d8:d8:43:2a:b3:9b:49:78:f8:9f:a1:8d:82:3c:
73:dc:14:ce:62:62:e3:8c:88:30:c6:f0:92:d2:e5:fd:72:90:
33:73:8f:31:6a:ec:32:6d:73:a3:21:7c:7e:ec:9e:e2:69:83:
c5:9d:d7:9d:18:00:f2:02:7a:60:b0:9e:cb:28:1a:b2:a3:8f:
30:b4:2a:1f:7e:58:22:3d:f0:f7:fe:c7:6a:ed:f2:92:a5:79:
5e:ee:b1:cc:83:b8:1a:f2:59:a6:86:47:e2:66:02:c5:27:4e:
1b:72:7b:47:bd:47:9d:91:19:bf:91:0b:84:1f:41:ef:54:f9:
8e:29:01:25:fe:44:e0:57:6e:4e:74:02:30:cc:f7:89:31:78:
b5:0d:bc:f7:e3:be:2c:2d:f5:53:b9:7b:99:a2:0e:cd:27:4a:
41:df:f3:b7:10:a0:e8:b1:2d:13:3e:ce:c5:8e:b9:50:b7:9d:
11:3b:cc:fc:27:96:8a:53:1c:93:65:2d:52:09:07:39:15:ea:
1f:9f:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:32:16 2026 by rpki-client