Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File: s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier: eVIE4Wmvt2MW4OOX6+MhUjGJd81wWFBI1rLo5O7HlLA=
Subject key identifier: E3:A5:39:9B:D6:33:C2:CA:30:1D:85:7D:50:5D:D5:A2:9D:72:EC:82
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer: /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial: 019D2C982A09B8C9FC6CB997D6E4AC67A2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number: 1884
Signing time: Fri 27 Mar 2026 00:01:02 +0000
Manifest this update: Fri 27 Mar 2026 00:01:02 +0000
Manifest next update: Sat 28 Mar 2026 00:01:02 +0000
Files and hashes: 1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: eqOXwHGSPjEuZ+5f+sjnV2j2gRPSQTc1ilgHmzNc/dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:2a:09:b8:c9:fc:6c:b9:97:d6:e4:ac:67:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Validity
Not Before: Mar 27 00:01:02 2026 GMT
Not After : Mar 28 00:01:02 2026 GMT
Subject: CN=e3a5399bd633c2ca301d857d505dd5a29d72ec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:c2:51:cc:47:4d:de:fc:82:2f:68:e8:df:
6b:35:79:7c:b3:8f:f2:42:e3:d2:a5:9a:f6:e1:80:
96:e5:7b:7e:c0:8b:b4:92:04:7b:4b:7b:2b:8f:60:
e5:2f:0a:4b:44:a7:a6:cb:f9:e5:4a:bf:24:a6:59:
e3:ea:3d:a6:2b:9e:38:31:48:77:de:4e:4b:0c:8f:
e5:40:64:a2:b3:0c:ef:17:d0:38:5f:1f:78:1b:d8:
75:98:9e:fd:29:b7:21:08:21:38:48:b6:27:93:7b:
ac:a0:bf:43:36:fd:b4:60:65:8f:63:fe:20:2b:09:
a8:45:20:4d:0d:72:d6:c9:09:89:89:a1:b3:f4:48:
65:dc:8c:ae:ec:e8:5f:c4:fe:a6:ff:2a:70:82:d4:
be:ba:9e:84:e8:c3:e5:bc:06:85:83:34:ea:f4:c0:
a7:98:df:d6:96:4b:12:3a:13:75:10:3e:ba:b4:a6:
60:20:9f:84:7c:99:3c:48:17:47:fe:47:ea:d3:b4:
59:39:d5:6d:bd:16:78:67:6c:ba:00:b1:ee:f6:5d:
1f:b1:15:b4:73:ed:16:ed:99:b0:91:5d:1c:50:94:
1b:10:2d:8c:e7:1f:de:00:a2:8f:3f:38:3d:bd:6c:
a7:17:f3:bb:47:f6:fb:a2:cf:2b:3c:87:dd:1c:0d:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:39:9B:D6:33:C2:CA:30:1D:85:7D:50:5D:D5:A2:9D:72:EC:82
X509v3 Authority Key Identifier:
keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6f:55:3b:d1:e5:2d:00:87:05:a9:2b:d3:04:ff:ea:c4:9a:
7a:01:05:9a:a3:f3:47:c0:4b:c5:e5:8c:e7:a5:bb:16:d4:cc:
5a:a6:f7:c9:57:37:ab:d4:2a:cb:88:75:c2:13:09:2f:10:48:
e6:c5:0e:e6:f8:ae:98:e4:84:26:c6:00:17:e2:a8:a2:37:98:
4c:e1:61:c6:25:e4:1f:f6:40:a3:c9:f3:e0:35:fc:93:16:97:
3f:ba:a9:17:99:3c:da:ae:aa:d9:f0:91:01:15:8f:3a:b0:54:
4a:8c:fe:a0:da:2b:6e:0f:be:ba:af:78:45:58:a3:0a:34:7d:
e5:83:68:a4:7a:6e:94:14:19:6f:99:ff:8e:fa:1c:da:2a:9b:
aa:4b:1d:fc:e9:4b:45:2a:e9:52:5d:95:22:88:cc:d5:68:e2:
59:29:ac:cf:2c:a8:99:03:c4:45:aa:19:95:cc:76:87:0f:ca:
11:34:6a:f4:7f:1f:52:a9:b7:93:4e:0f:e7:b3:7d:5e:fd:79:
ba:ff:5a:0e:f5:08:92:58:d6:bc:50:7a:b5:df:ec:01:31:06:
d9:2d:6a:5d:dc:82:4b:c5:c5:8e:a1:f3:6c:1e:7f:db:36:8f:
ef:26:5a:43:f3:57:d5:e1:92:ce:bc:ee:d8:8c:d1:eb:04:39:
cd:0a:af:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0smCoJuMn8bLmX1uSsZ6LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDlmMTdiOThjM2E5NjQxMzg1NjYzYjhjZDViNzVmZTFm
MGE0OTgwHhcNMjYwMzI3MDAwMTAyWhcNMjYwMzI4MDAwMTAyWjAzMTEwLwYDVQQD
EyhlM2E1Mzk5YmQ2MzNjMmNhMzAxZDg1N2Q1MDVkZDVhMjlkNzJlYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zCUcxHTd78gi9o6N9rNXl8s4/y
QuPSpZr24YCW5Xt+wIu0kgR7S3srj2DlLwpLRKemy/nlSr8kplnj6j2mK544MUh3
3k5LDI/lQGSiswzvF9A4Xx94G9h1mJ79KbchCCE4SLYnk3usoL9DNv20YGWPY/4g
KwmoRSBNDXLWyQmJiaGz9Ehl3Iyu7OhfxP6m/ypwgtS+up6E6MPlvAaFgzTq9MCn
mN/WlksSOhN1ED66tKZgIJ+EfJk8SBdH/kfq07RZOdVtvRZ4Z2y6ALHu9l0fsRW0
c+0W7ZmwkV0cUJQbEC2M5x/eAKKPPzg9vWynF/O7R/b7os8rPIfdHA0GDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOlOZvWM8LKMB2FfVBd1aKdcuyCMB8GA1UdIwQY
MBaAFLPZ8XuYw6lkE4VmO4zVt1/h8KSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlueGU1akRxV1FUaFdZN2pOVzNYLUh3cEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81ZmU1ZTYtMWE2Zi00NmYxLWE5OTkt
MThlYzZhMDA4YzU2LzEvczlueGU1akRxV1FUaFdZN2pOVzNYLUh3cEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81ZmU1ZTYtMWE2Zi00NmYxLWE5OTktMThlYzZhMDA4YzU2
LzEvczlueGU1akRxV1FUaFdZN2pOVzNYLUh3cEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW9VO9Hl
LQCHBakr0wT/6sSaegEFmqPzR8BLxeWM56W7FtTMWqb3yVc3q9Qqy4h1whMJLxBI
5sUO5viumOSEJsYAF+KoojeYTOFhxiXkH/ZAo8nz4DX8kxaXP7qpF5k82q6q2fCR
ARWPOrBUSoz+oNorbg++uq94RVijCjR95YNopHpulBQZb5n/jvoc2iqbqksd/OlL
RSrpUl2VIojM1WjiWSmszyyomQPERaoZlcx2hw/KETRq9H8fUqm3k04P57N9Xv15
uv9aDvUIkljWvFB6td/sATEG2S1qXdyCS8XFjqHzbB5/2zaP7yZaQ/NX1eGSzrzu
2IzR6wQ5zQqv2w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:11:04 2026 by rpki-client