Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: Zw4+ZgBg83xQOw/ZoquAYAbD7a1Qjg8JwbTGordAohs=
Subject key identifier: CF:04:A1:D2:F0:0F:99:B6:38:6E:48:6E:8A:9F:DB:F9:EC:57:66:84
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D99D0B4B999D42F1374B2430DA7997957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 18D8
Signing time: Fri 17 Apr 2026 05:01:24 +0000
Manifest this update: Fri 17 Apr 2026 05:01:24 +0000
Manifest next update: Sat 18 Apr 2026 05:01:24 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: RvZozUX7Z5UhqcahWOpJl1ey56TE3uESDhe0hYs9xkw=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b4:b9:99:d4:2f:13:74:b2:43:0d:a7:99:79:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Apr 17 05:01:24 2026 GMT
Not After : Apr 18 05:01:24 2026 GMT
Subject: CN=cf04a1d2f00f99b6386e486e8a9fdbf9ec576684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:15:2c:6d:eb:74:d5:b7:e5:10:05:94:8a:
62:a6:d7:3e:45:9b:03:75:e1:d3:6a:00:0d:d2:32:
65:12:a8:16:37:ad:30:da:c9:8f:fc:24:bc:d8:64:
6e:92:22:b8:11:20:23:a5:11:9c:f0:4c:8c:87:cc:
11:12:62:ba:84:bd:b3:27:14:09:07:f4:b7:85:2c:
c9:99:7e:97:07:b3:02:c1:f4:44:a3:ba:46:37:b9:
86:dc:ea:e9:ed:4e:4f:4e:4f:31:34:42:d0:2d:b5:
cc:a6:f2:52:3b:9c:c9:21:e0:9f:0c:a5:0d:fb:e3:
f9:f6:17:32:70:e1:b3:8a:e8:36:30:bc:7c:78:fa:
7b:d9:bb:de:dd:40:53:99:e0:94:b9:c3:85:5c:0f:
df:59:43:c1:bd:84:9e:3b:2d:3c:35:2a:a1:98:54:
82:db:0e:a6:d0:b1:6e:43:9a:75:55:d7:94:dd:51:
45:45:1e:91:08:59:b0:65:53:14:ba:03:d1:d2:a6:
96:d2:22:98:a5:92:a2:91:3e:3b:73:9b:27:3b:72:
c6:42:8e:30:7e:c7:bd:c0:1d:df:c7:22:f6:92:86:
aa:b5:f6:a3:80:1b:ab:bc:8a:5e:6a:69:c4:4a:44:
cb:65:95:b6:18:d1:fd:d4:80:eb:91:20:86:ef:78:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:A1:D2:F0:0F:99:B6:38:6E:48:6E:8A:9F:DB:F9:EC:57:66:84
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4a:04:bd:3b:be:d5:89:16:e0:f1:62:77:b8:6c:01:d8:3e:
ab:e1:73:14:05:cf:e1:3f:d3:3a:84:59:c7:98:65:88:db:d8:
6b:a7:b5:d2:0f:65:06:78:57:ea:f5:05:29:1d:df:8b:cd:7f:
51:6b:ea:13:4a:1c:9c:22:22:89:1b:24:3f:9e:75:d8:49:73:
a4:92:ec:67:7b:5c:c9:3c:04:88:6c:05:fd:25:e9:03:71:11:
db:3d:e3:73:47:ec:99:b3:96:50:26:0b:34:9b:f5:83:8b:44:
f1:f2:da:24:b9:40:19:34:e6:40:96:82:05:cc:ba:f5:0a:2a:
9d:ed:d8:38:7d:e1:a7:ad:e7:d4:fd:1c:9a:79:7e:70:77:48:
9e:c3:40:0f:4f:f5:8e:2d:c1:34:eb:66:48:d9:82:33:e4:28:
b4:0d:aa:2d:01:b4:95:44:59:89:2e:08:d4:1d:a1:d0:4e:94:
7d:a5:c1:54:6f:14:5f:3f:12:8f:62:80:1e:cc:18:da:d0:31:
24:24:63:77:39:52:2c:1d:4e:56:ba:02:bc:1a:e4:ed:6a:da:
ec:5c:1d:65:74:e0:f3:ca:3c:56:47:60:65:9f:4b:3b:60:cf:
b4:ca:14:03:16:14:66:b0:31:f5:3c:88:65:d6:86:9e:fa:45:
7b:fb:ec:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0LS5mdQvE3SyQw2nmXlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwNDE3MDUwMTI0WhcNMjYwNDE4MDUwMTI0WjAzMTEwLwYDVQQD
EyhjZjA0YTFkMmYwMGY5OWI2Mzg2ZTQ4NmU4YTlmZGJmOWVjNTc2Njg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUwVLG3rdNW35RAFlIpiptc+RZsD
deHTagAN0jJlEqgWN60w2smP/CS82GRukiK4ESAjpRGc8EyMh8wREmK6hL2zJxQJ
B/S3hSzJmX6XB7MCwfREo7pGN7mG3Orp7U5PTk8xNELQLbXMpvJSO5zJIeCfDKUN
++P59hcycOGziug2MLx8ePp72bve3UBTmeCUucOFXA/fWUPBvYSeOy08NSqhmFSC
2w6m0LFuQ5p1VdeU3VFFRR6RCFmwZVMUugPR0qaW0iKYpZKikT47c5snO3LGQo4w
fse9wB3fxyL2koaqtfajgBurvIpeamnESkTLZZW2GNH91IDrkSCG73gkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8EodLwD5m2OG5Iboqf2/nsV2aEMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEoEvTu+
1YkW4PFid7hsAdg+q+FzFAXP4T/TOoRZx5hliNvYa6e10g9lBnhX6vUFKR3fi81/
UWvqE0ocnCIiiRskP5512ElzpJLsZ3tcyTwEiGwF/SXpA3ER2z3jc0fsmbOWUCYL
NJv1g4tE8fLaJLlAGTTmQJaCBcy69Qoqne3YOH3hp63n1P0cmnl+cHdInsNAD0/1
ji3BNOtmSNmCM+QotA2qLQG0lURZiS4I1B2h0E6UfaXBVG8UXz8Sj2KAHswY2tAx
JCRjdzlSLB1OVroCvBrk7Wra7FwdZXTg88o8VkdgZZ9LO2DPtMoUAxYUZrAx9TyI
ZdaGnvpFe/vsLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:36 2026 by rpki-client