Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: dcK6GZtLS/iDySILv9M7HZjTk53gMakchUn3oWO8NEM=
Subject key identifier: 12:00:88:C3:70:17:FB:25:70:9B:4B:41:A9:5C:8E:9B:5B:A3:34:5E
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019E1F1112067FE07AAA94B23B48D9CAA18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 191D
Signing time: Wed 13 May 2026 02:01:12 +0000
Manifest this update: Wed 13 May 2026 02:01:12 +0000
Manifest next update: Thu 14 May 2026 02:01:12 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: NTPK4QPYOrRHLjt+Irf0sDg5DBCITXE5RqBoCBmm8TE=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:12:06:7f:e0:7a:aa:94:b2:3b:48:d9:ca:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: May 13 02:01:12 2026 GMT
Not After : May 14 02:01:12 2026 GMT
Subject: CN=120088c37017fb25709b4b41a95c8e9b5ba3345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:0c:bc:fc:30:1f:c5:22:a5:0b:fb:bb:e2:
b1:e8:15:8b:1d:ba:50:4f:7d:b5:64:76:a7:36:d0:
b6:60:da:57:a4:3f:35:ad:02:7d:c0:94:6e:59:41:
05:bf:42:99:8e:51:60:ab:1c:e8:d9:bb:63:01:af:
ff:91:df:f4:d6:83:72:41:43:2d:1f:c1:ab:48:b7:
c6:b2:5a:5e:39:f9:78:76:2e:36:a3:bf:2b:0e:75:
29:11:bc:53:48:d6:bc:d2:45:f5:73:75:07:31:34:
4b:8c:8d:7f:70:73:63:f8:0a:61:95:ff:86:04:73:
22:32:90:8f:16:f0:a5:6e:f9:9e:54:3b:fc:3f:9e:
62:63:6c:04:9e:9a:d7:27:6a:f6:41:7e:53:61:22:
75:b0:9c:85:3f:0c:f5:73:73:cb:36:ef:ef:d8:75:
09:15:c4:7f:60:cd:1a:2a:6f:cd:4c:27:16:6a:88:
4b:d5:dd:8a:79:09:de:b8:f0:9c:b8:11:d9:a2:9d:
42:23:d9:0b:5e:80:2e:d3:09:46:4a:d7:b8:d5:b4:
e6:ab:c0:3f:87:f9:83:d4:db:48:bf:04:af:81:18:
3b:aa:a9:b5:fd:99:d4:1b:39:9b:2d:64:ca:2c:b1:
78:2f:94:92:9c:58:10:ca:ec:cc:2c:5a:d1:87:2f:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:88:C3:70:17:FB:25:70:9B:4B:41:A9:5C:8E:9B:5B:A3:34:5E
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:20:c4:d4:8a:9d:33:14:4c:92:ce:5c:e9:81:d0:01:57:12:
f6:25:78:48:45:90:8e:e0:4a:bc:a4:ea:a9:e7:99:4e:b3:7a:
71:ac:40:32:2e:05:05:b7:81:bc:4f:18:c0:ab:5e:34:8c:5a:
51:48:81:90:92:0f:33:f0:0d:36:86:f0:57:4d:fc:c9:b3:6f:
2f:3a:71:45:9c:4e:7c:e2:29:66:df:6e:f1:69:6c:be:4d:83:
16:f6:e4:eb:bf:5e:d4:2b:9e:04:b3:6d:f8:93:aa:09:87:64:
99:3c:02:cc:b0:82:dc:ad:0e:c0:70:0e:b4:7f:74:26:4a:51:
34:70:64:57:4a:e9:04:19:65:58:32:a2:13:a0:e1:44:06:86:
b6:f2:33:55:c4:25:dd:79:be:d9:40:44:70:4f:b6:b1:8c:74:
5d:52:df:70:00:48:0b:56:81:76:59:c2:cc:5c:e7:47:a9:64:
9d:cd:e1:59:64:fa:16:f6:12:be:89:e1:a4:af:42:62:49:ad:
e0:99:f2:02:7b:98:6f:56:b4:53:8f:1b:2c:32:17:41:2f:7a:
f5:ed:37:12:d0:a7:14:3f:f7:af:83:09:91:e8:06:40:67:11:
8a:d6:02:dd:ee:73:b3:e1:3e:fa:ba:10:3b:a3:92:70:1c:2d:
16:e0:e8:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERIGf+B6qpSyO0jZyqGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwNTEzMDIwMTEyWhcNMjYwNTE0MDIwMTEyWjAzMTEwLwYDVQQD
EygxMjAwODhjMzcwMTdmYjI1NzA5YjRiNDFhOTVjOGU5YjViYTMzNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux0MvPwwH8UipQv7u+Kx6BWLHbpQ
T321ZHanNtC2YNpXpD81rQJ9wJRuWUEFv0KZjlFgqxzo2btjAa//kd/01oNyQUMt
H8GrSLfGslpeOfl4di42o78rDnUpEbxTSNa80kX1c3UHMTRLjI1/cHNj+Aphlf+G
BHMiMpCPFvClbvmeVDv8P55iY2wEnprXJ2r2QX5TYSJ1sJyFPwz1c3PLNu/v2HUJ
FcR/YM0aKm/NTCcWaohL1d2KeQneuPCcuBHZop1CI9kLXoAu0wlGSte41bTmq8A/
h/mD1NtIvwSvgRg7qqm1/ZnUGzmbLWTKLLF4L5SSnFgQyuzMLFrRhy808QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIAiMNwF/slcJtLQalcjptbozReMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiDE1Iqd
MxRMks5c6YHQAVcS9iV4SEWQjuBKvKTqqeeZTrN6caxAMi4FBbeBvE8YwKteNIxa
UUiBkJIPM/ANNobwV038ybNvLzpxRZxOfOIpZt9u8Wlsvk2DFvbk679e1CueBLNt
+JOqCYdkmTwCzLCC3K0OwHAOtH90JkpRNHBkV0rpBBllWDKiE6DhRAaGtvIzVcQl
3Xm+2UBEcE+2sYx0XVLfcABIC1aBdlnCzFznR6lknc3hWWT6FvYSvonhpK9CYkmt
4JnyAnuYb1a0U48bLDIXQS969e03EtCnFD/3r4MJkegGQGcRitYC3e5zs+E++roQ
O6OScBwtFuDoHw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:12:50 2026 by rpki-client