Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: ve4C15ZREl+h0TMUd7QuSkmn9sohIUxwLOSX3gwcqqI=
Subject key identifier: 28:6A:50:79:CE:B7:73:BF:34:EC:C4:32:98:5A:87:92:CF:33:FA:FE
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019FAA876CCD058E58235E471A8D7AB96EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 19ED
Signing time: Tue 28 Jul 2026 21:00:29 +0000
Manifest this update: Tue 28 Jul 2026 21:00:29 +0000
Manifest next update: Wed 29 Jul 2026 21:00:29 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: eFsYq+aLACR8oYh7c3SX3apRFahULf0nHlROrlcMhLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:6c:cd:05:8e:58:23:5e:47:1a:8d:7a:b9:6e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 28 21:00:29 2026 GMT
Not After : Jul 29 21:00:29 2026 GMT
Subject: CN=286a5079ceb773bf34ecc432985a8792cf33fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:6d:b2:81:23:d0:0b:d7:9a:c4:40:95:27:
93:ac:4a:27:7c:e8:b5:f1:c6:34:0e:fa:6f:50:57:
d7:8b:e6:24:23:03:12:37:f6:a9:51:92:f4:5e:be:
5c:64:ce:44:e2:cb:a6:47:22:55:e6:eb:28:e8:28:
27:39:43:5e:f8:9a:cf:93:c5:7f:de:68:d0:a9:83:
57:94:cb:6d:31:99:1a:6b:19:b3:c0:b6:c0:6b:e4:
bc:cd:70:d5:9b:e9:45:c6:01:c1:50:fc:b9:ba:77:
4c:fb:4b:d1:38:4a:11:ac:d5:f1:a2:ad:1b:e5:5f:
86:91:db:7b:41:bb:b8:54:94:c1:36:85:9b:2d:99:
16:41:95:3e:4b:49:ed:20:14:e6:e6:02:11:a2:cb:
29:a7:46:82:f3:9f:4c:71:fd:c8:9d:8c:b6:0a:91:
26:94:bb:f3:f8:d8:43:f2:9f:fc:24:11:14:77:63:
f9:7f:84:32:5c:0f:3c:ae:46:36:4c:c3:30:24:20:
3f:f6:03:59:07:ec:f9:3d:5f:0f:64:cd:8b:4f:19:
a5:3f:8f:57:fe:e4:24:05:e6:23:67:96:3b:af:3b:
04:b1:a0:e6:a0:1f:02:66:fb:26:53:23:59:59:53:
d3:99:83:71:01:39:61:83:3f:74:24:48:7e:5d:dd:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:50:79:CE:B7:73:BF:34:EC:C4:32:98:5A:87:92:CF:33:FA:FE
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b0:cc:55:6b:d2:5d:fd:3c:4e:e9:74:2a:ff:da:b4:08:a9:
00:e8:57:1f:de:59:e4:f3:f1:c0:b6:db:e3:3f:e9:17:44:29:
c8:0f:66:a8:cc:21:8c:ba:9b:f0:6c:18:a2:8c:2c:ba:5a:90:
74:84:62:39:38:53:db:ee:40:b8:fb:9d:94:b1:4c:53:53:78:
08:93:78:6f:e0:b7:55:f0:c6:36:7e:bc:06:fd:91:04:70:15:
9d:42:1a:51:c2:c1:69:21:56:4b:73:8c:ff:49:20:07:d5:31:
91:1f:8a:bf:e0:bc:ff:04:51:9c:1f:65:0c:3e:de:f0:ef:03:
53:5a:af:f7:77:6d:3c:c7:a1:ae:b8:47:8e:7c:da:70:ed:81:
71:4f:6e:93:43:93:99:3c:a8:36:0a:e2:55:76:ca:73:07:3e:
95:da:21:1b:4d:ca:17:69:8e:c6:8f:b4:9c:56:07:1d:67:ca:
6c:14:cb:c1:c0:ac:9d:c7:ef:7c:cb:7b:e8:39:ce:c8:ae:43:
ed:c6:10:ba:a8:65:e7:23:08:1f:72:c0:94:e8:6f:48:ae:ef:
33:4b:89:19:1d:63:d2:14:99:da:de:c6:72:ac:c0:6a:70:3e:
6f:91:75:7a:05:10:e8:41:11:04:38:68:44:63:88:a4:38:6b:
c2:97:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:48 2026 by rpki-client