Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: A4yYjc7hOTQrmAtYEOKzcVTsRL1udkYyA5DFbhgiH00=
Subject key identifier: AE:9E:D7:92:32:5D:16:30:73:FA:BD:9A:8D:63:99:EF:11:25:B0:F9
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019D28BB8A65A2F6E8B5E2787E6FAE48CF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 1266
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 5vD4IDroEhUl3u/korarjxjtu6o87p6lzGi/FwNaD2M=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8a:65:a2:f6:e8:b5:e2:78:7e:6f:ae:48:cf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=ae9ed792325d163073fabd9a8d6399ef1125b0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:3e:48:9d:80:5b:97:cb:61:56:7b:77:39:
22:b4:f0:22:cf:4c:6a:24:31:91:58:86:e4:d9:ab:
54:07:fa:74:fa:37:fa:5d:48:3b:e8:9e:d9:aa:03:
6e:30:e6:ad:76:8c:e4:75:d1:73:ff:49:3e:7a:56:
88:67:b1:21:0d:77:fb:e3:bd:4d:c1:6b:2b:b6:c2:
68:f1:22:0a:ff:30:c0:81:8f:5e:43:37:3c:a2:e2:
a9:33:08:63:9a:0e:c9:58:9a:96:cb:a0:0a:ac:84:
17:ef:4f:7f:0a:76:9a:30:71:03:a5:8b:6f:5f:bc:
a0:a0:c3:63:0f:22:5f:c9:26:7b:fa:2a:4e:c7:21:
dc:e8:d4:2f:a4:3b:46:cc:a6:04:c0:45:dd:61:02:
41:50:88:63:d3:fb:cb:40:ef:00:00:76:fc:7f:90:
72:c9:b9:a1:1b:d0:3a:49:72:30:04:01:2e:91:3a:
c9:4e:13:ae:f6:95:e1:76:31:00:27:6b:db:72:13:
55:2c:7c:19:5c:45:d8:72:93:3e:fa:26:98:19:b2:
27:ee:b2:5b:3b:21:73:26:3e:b1:c0:cb:55:1f:b5:
71:25:03:98:2e:db:67:b6:ee:bb:e6:a2:8d:b0:bd:
83:4c:2b:07:c9:84:19:14:47:5a:94:15:e0:0e:40:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:D7:92:32:5D:16:30:73:FA:BD:9A:8D:63:99:EF:11:25:B0:F9
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:f9:7a:7e:8b:14:f2:ee:3e:1e:be:ad:fc:2b:ff:2c:59:
52:a6:be:07:ab:51:0e:08:dd:bc:a5:02:25:a0:25:1f:d0:1b:
b2:e7:ac:18:f5:31:f8:5a:b8:db:3e:4c:43:32:d8:5f:15:57:
40:4c:70:15:b2:d5:40:81:bb:27:9d:c0:3d:16:f4:2f:30:9a:
47:61:7b:35:c2:d7:55:12:2a:b9:88:fe:eb:aa:83:d5:ad:09:
b5:55:c8:99:eb:83:78:49:8b:04:34:09:3d:82:15:bd:a8:f8:
d4:96:d7:26:c2:d1:d3:f6:2d:26:a6:a1:19:5b:75:a4:c6:e9:
1e:86:dd:27:ab:e4:49:86:55:a3:9b:41:65:34:35:35:b9:19:
a9:fb:1f:3d:5a:a8:1a:82:a0:84:7c:45:c1:37:aa:bb:88:a7:
4b:a4:8d:ff:d7:79:73:77:86:d9:41:30:4e:ad:08:79:0c:82:
68:fa:82:2a:6a:d0:f4:15:72:00:72:2d:17:1d:2e:eb:29:4c:
b1:25:7d:1e:2f:6c:10:b7:c2:1c:5d:df:9f:43:c2:48:95:13:
11:56:4d:43:90:5d:4b:1a:06:44:90:6a:32:6a:87:ee:be:04:
a3:e2:2d:17:eb:bd:3b:e9:d6:26:c5:20:4d:53:d6:fc:e7:35:
cc:89:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:13 2026 by rpki-client