Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: eH+S0/1QeX0v0B+ZujspCUijrbEop2C2zw++7e1vfUs=
Subject key identifier: F5:51:18:04:04:0E:B8:3D:9E:29:4E:12:9D:3B:FA:00:2E:17:01:57
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019F935AE85231B4AFCB6A81E8B0FBE078A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 19E1
Signing time: Fri 24 Jul 2026 09:00:36 +0000
Manifest this update: Fri 24 Jul 2026 09:00:36 +0000
Manifest next update: Sat 25 Jul 2026 09:00:36 +0000
Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
8: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: xKREWGX+RiIMwSo/k/or2g1v8t7f/fzvxkWGeZFlCfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e8:52:31:b4:af:cb:6a:81:e8:b0:fb:e0:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jul 24 09:00:36 2026 GMT
Not After : Jul 25 09:00:36 2026 GMT
Subject: CN=f5511804040eb83d9e294e129d3bfa002e170157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:10:b3:51:2d:62:6c:75:62:a1:6d:52:8e:
4f:79:66:4d:8f:1f:71:d8:4f:77:a9:d1:05:8b:10:
f3:cf:9a:78:cc:07:cf:31:8f:ee:f3:78:06:e1:e8:
d4:fd:5d:b1:4e:ae:37:b0:f3:34:0d:d8:39:00:c2:
a2:e9:d9:61:36:b2:0e:e3:ff:8f:04:d4:86:b5:1a:
f1:c8:ea:39:3e:41:e0:27:8b:95:4d:8e:4d:c5:b6:
03:0b:69:d8:38:1a:90:f3:48:7a:0f:61:c8:53:d7:
95:49:f1:c7:83:e2:f8:bb:c1:d5:46:a6:6b:be:52:
8b:16:df:8b:b0:0d:e8:d5:e9:3e:57:31:a4:be:53:
d4:77:b0:90:69:c4:49:75:eb:36:b6:98:ee:c7:84:
45:79:ff:e7:1c:d3:aa:fb:d3:42:e9:d5:5a:20:aa:
ed:cc:4d:b1:79:c5:7e:2a:45:23:fb:91:09:4b:76:
51:9a:21:af:8a:f9:ec:77:c3:88:43:e1:14:79:b8:
65:82:e4:b6:06:5c:d1:44:c6:3a:94:c2:40:ea:f4:
bc:38:31:81:e4:cd:09:07:78:c4:07:ce:d3:94:c8:
93:3c:56:a5:05:53:04:67:0a:04:19:24:47:2d:c7:
da:68:d6:1c:8e:52:1a:ee:74:1b:c9:9a:02:94:6b:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:18:04:04:0E:B8:3D:9E:29:4E:12:9D:3B:FA:00:2E:17:01:57
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9c:78:73:37:cd:69:f0:18:83:9d:71:84:75:13:fd:c0:fb:
51:07:ba:45:9c:d0:5f:c9:da:a0:11:7e:bd:62:35:d4:5e:b2:
cc:f1:af:11:2b:ab:eb:49:4f:c1:a7:2b:9f:51:44:99:4e:56:
84:7f:00:91:16:f8:2e:cc:e2:ee:1c:38:fb:cb:35:5b:82:e4:
ab:be:98:a2:72:76:a7:b3:50:84:2e:ba:c7:b4:11:7a:8d:cb:
7e:4e:b1:5f:89:a3:da:f5:b9:cd:5c:db:6c:f2:39:bd:3e:a8:
57:e0:fb:8c:e6:15:3c:72:5a:47:24:6f:5c:82:d6:ea:b6:f7:
cd:38:07:61:3f:bb:f2:17:93:c3:38:93:92:0d:e8:d9:df:0a:
b7:04:bf:94:e2:31:bb:64:86:62:42:de:68:6a:1f:dc:7a:5a:
50:b9:5a:5b:81:14:c4:0a:08:54:51:88:21:2f:25:ae:8a:52:
67:0f:0f:70:84:f9:42:b6:38:0a:f9:ce:e9:bb:65:9e:12:1c:
a2:18:03:1c:f6:26:a3:7c:ec:ee:5e:cd:f4:b0:fa:ea:2c:29:
79:e5:ba:7d:eb:11:80:97:21:44:ef:93:2a:be:0e:2c:2e:f3:
6c:79:8e:5e:22:cf:bc:64:6d:2e:3f:20:fb:04:9f:5d:68:4a:
81:a9:82:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:36 2026 by rpki-client