Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: 08KzdyeET30+EI42v6gtJpZ3MqcaHfHF3iSBVAir0UY=
Subject key identifier: 24:01:67:8D:65:1B:A1:EB:79:54:73:47:D7:D2:89:E7:D3:E0:15:2B
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019FA9E30D17F70E60283F24F8D46D367D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 13B2
Signing time: Tue 28 Jul 2026 18:00:57 +0000
Manifest this update: Tue 28 Jul 2026 18:00:57 +0000
Manifest next update: Wed 29 Jul 2026 18:00:57 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: hWQRS5Q7ffRDW4UyFW8ywX6AJ8+w1iVBZUuj905PSoQ=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0d:17:f7:0e:60:28:3f:24:f8:d4:6d:36:7d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Jul 28 18:00:57 2026 GMT
Not After : Jul 29 18:00:57 2026 GMT
Subject: CN=2401678d651ba1eb79547347d7d289e7d3e0152b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:0f:f9:2b:72:c8:1b:90:ff:26:fc:40:86:
e6:3e:17:62:8b:c6:87:f5:a6:d0:8e:06:3c:af:ce:
23:fa:30:7f:d2:70:a8:c9:f1:21:76:76:29:ea:15:
0a:a9:8d:ce:27:b9:1a:a5:07:cf:95:7a:e9:ba:16:
fa:fb:ec:9a:5d:aa:37:60:9a:d8:7e:8c:d9:d0:22:
98:c0:26:1a:fd:54:ae:f9:f2:29:89:83:49:48:62:
25:f5:c5:e9:d8:7e:e5:d8:48:72:1d:86:be:9f:85:
e5:df:64:5b:78:fc:15:dd:60:76:8d:5d:12:ed:66:
76:15:ef:1e:17:92:b5:28:d6:af:b1:84:ef:ab:5b:
af:30:b0:31:bd:78:0b:62:ac:a0:34:72:82:3e:18:
2d:f8:54:07:a4:8f:33:94:8a:6f:1f:02:a1:e2:86:
84:f1:c1:1f:44:d4:30:bd:11:a6:7c:40:56:b8:61:
0e:19:90:0d:8d:ba:47:a1:42:bd:7d:e5:2d:e6:ba:
4c:f7:f1:56:c6:de:21:77:d9:bf:ef:38:00:ba:fb:
f0:ea:e1:c0:a6:7f:e6:91:e8:04:7d:88:67:ef:cf:
15:ab:5b:63:4a:bc:ba:1b:d6:23:f9:27:93:5b:79:
f2:43:b2:0c:d9:44:85:b9:97:a1:10:46:35:94:4d:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:67:8D:65:1B:A1:EB:79:54:73:47:D7:D2:89:E7:D3:E0:15:2B
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:8c:a9:5a:4c:26:27:78:fc:e7:f4:f2:49:cf:48:d9:d4:
1b:90:c5:73:0d:2e:00:77:79:44:bb:af:43:76:88:98:89:b0:
5f:82:9d:d8:3e:cf:04:93:08:c7:2a:15:f6:b7:17:14:64:68:
0f:c5:e6:11:c4:c5:13:8d:04:65:8b:8f:82:5a:c6:48:82:fa:
17:b1:f5:63:26:09:17:71:8a:80:10:3b:d7:c0:8c:f4:6a:ad:
1c:85:10:ea:87:cd:fc:9c:2a:0e:d7:16:23:7e:21:fe:7f:b3:
ee:43:6d:33:05:be:b6:37:d6:eb:bc:6f:c1:17:09:27:09:36:
8c:f2:cd:63:00:90:39:b6:e0:25:af:37:1b:37:cf:78:72:20:
ba:ba:07:c6:ab:30:76:2c:fb:b7:0a:cb:c9:de:11:20:0a:99:
9d:67:0f:71:46:ad:56:44:06:24:bd:32:96:a3:c7:db:02:cf:
8a:f8:61:57:64:f4:07:ae:94:f5:da:cf:6f:ea:c7:70:4a:87:
5f:73:a3:05:84:0a:c5:a6:3d:43:87:9b:c5:f0:01:5c:7f:84:
1e:85:bb:e0:c8:4d:f6:eb:63:61:1e:e0:8f:d2:9d:d6:81:14:
c4:bf:67:ce:ff:d8:c1:91:55:3c:12:81:9b:b1:29:55:f6:ae:
c6:5f:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:37 2026 by rpki-client