Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: yXp98/+2FhxuxiPUkhggsH4/t8WFEUMqAgtPqOzJ7c0=
Subject key identifier: 12:3B:26:BA:D4:6F:02:75:83:F9:5C:47:49:60:A4:CB:9B:AC:E3:73
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01A0D727E52D8D97F45155823B343C178C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 144E
Signing time: Fri 25 Sep 2026 06:01:51 +0000
Manifest this update: Fri 25 Sep 2026 06:01:51 +0000
Manifest next update: Sat 26 Sep 2026 06:01:51 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: +l7PT38w9PglYbXm0XHpWTQQu3NT/uGagUz1sVRCxSo=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:e5:2d:8d:97:f4:51:55:82:3b:34:3c:17:8c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Sep 25 06:01:51 2026 GMT
Not After : Sep 26 06:01:51 2026 GMT
Subject: CN=123b26bad46f027583f95c474960a4cb9bace373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:ae:2f:ed:81:4c:bb:0e:63:34:d6:83:b1:
7f:fe:9e:df:82:2c:95:06:79:37:46:d8:c9:02:07:
bc:7d:20:a2:9d:3c:9e:95:16:4c:c0:6c:46:45:8d:
14:89:04:07:42:6b:8b:94:a2:1e:eb:77:16:77:36:
df:4d:c9:2e:ab:df:f0:52:15:23:6e:9d:12:c4:7c:
7d:c7:0a:12:62:0e:d0:49:fc:71:1b:25:fc:53:ed:
47:02:1f:fd:b1:cb:45:94:6b:e1:cc:b3:1b:0b:f5:
08:61:1c:72:70:b0:1b:6d:5f:f0:52:21:cf:a0:28:
40:ad:8c:5c:85:8f:52:d8:eb:51:aa:35:76:bf:96:
e2:35:c5:34:49:7a:cd:ae:c0:53:6c:4f:c9:00:51:
0b:de:dc:18:b8:7d:53:b9:f7:55:b0:f6:5a:24:35:
92:f6:7c:52:8d:39:0c:1a:00:fb:40:87:65:40:ea:
e3:07:8f:1c:de:27:4d:44:4d:14:5f:fa:84:8d:d0:
34:3b:d4:0a:41:61:88:7d:2e:0d:6b:83:d5:b6:e1:
6b:6b:f1:5b:92:86:dd:7b:9d:94:e5:21:9b:ba:57:
69:f1:90:81:64:67:73:ef:f8:85:ec:88:94:6d:db:
59:97:5e:78:45:10:46:dd:b7:65:f3:9d:ec:43:f1:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:26:BA:D4:6F:02:75:83:F9:5C:47:49:60:A4:CB:9B:AC:E3:73
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fc:4d:bf:d4:b3:55:45:e0:b1:42:51:61:76:e0:c3:5f:c5:
98:f7:ea:d3:0d:3f:9b:1f:02:90:ab:3b:0e:f4:4e:97:2c:84:
63:e8:9b:f1:be:53:d9:b5:cb:aa:a0:95:42:61:2d:d3:55:14:
ba:b3:c2:54:fe:d3:b5:59:f6:4e:30:13:a0:f7:b9:87:62:91:
8e:b5:18:1f:a8:11:3b:24:b2:b9:bc:77:64:87:10:9c:42:4b:
f0:a1:d4:18:7d:c7:e5:9f:37:a2:9e:7c:02:ab:fd:a3:de:dc:
02:da:c3:bb:1c:f5:f0:2a:66:be:91:ce:b1:69:a2:2e:2c:a2:
80:c1:9a:36:5d:5e:0e:21:2c:72:45:6a:29:53:fd:6d:e7:3b:
62:bb:e7:cb:9c:35:92:b5:33:64:1e:e9:9a:4f:3a:38:22:04:
9a:fd:06:2e:1e:b4:7e:d4:bf:15:97:10:e8:24:1f:c4:24:db:
83:78:8e:df:f8:bf:cb:28:36:9a:16:07:0b:9b:59:a8:a6:b1:
ce:76:56:9a:0f:c0:90:ea:98:6b:05:d0:fc:66:d2:ab:2a:1e:
d3:5e:8f:e0:a9:e7:c7:3e:60:df:2a:c1:a7:bc:03:c7:e4:88:
1e:97:36:46:16:89:54:f9:5c:58:30:d9:68:60:8f:04:49:18:
e5:01:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:16:40 2026 by rpki-client