Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: RzU11KOUctgLvdn2AGC+IU1n+Uwv6jFfZZltKo2v0ac=
Subject key identifier: BC:46:16:A3:95:47:66:01:8C:DF:2C:03:8D:D0:11:75:60:31:2E:26
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019D25F18E59AEB8653C1D7ADB23EDE0AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 189C
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: gQA91Wiggo/2OEpyeM4/eShfMovJHBCi5+u+MFCJS1I=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8e:59:ae:b8:65:3c:1d:7a:db:23:ed:e0:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=bc4616a3954766018cdf2c038dd0117560312e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:88:f2:84:a9:14:f4:94:78:c8:62:83:68:
da:a1:c2:88:ac:12:f3:95:e3:8b:ca:de:77:0c:05:
c3:5e:71:74:3d:3d:b0:34:98:c7:a2:42:b7:1f:0c:
56:b1:82:68:f0:3b:99:ba:f2:8b:a3:de:69:83:aa:
63:0c:d8:fc:b7:ae:fe:a5:69:a6:2a:d8:08:60:a3:
31:d5:22:b7:d1:35:cd:ec:34:1c:c7:18:c7:f6:bc:
a6:0e:e6:16:7c:c7:f1:04:c1:db:cb:03:b1:d3:9f:
9b:ba:0d:16:41:7a:6c:f2:a7:87:0a:90:d8:a4:d0:
68:aa:b1:31:d1:1c:e9:f4:b6:b8:d4:e5:fb:77:69:
4b:00:af:aa:8c:ea:55:3f:02:16:72:d6:b9:84:31:
2d:d2:91:5a:20:c6:89:fb:3b:3f:bf:fa:e2:ab:ce:
ce:36:55:70:f7:77:e0:b3:de:2d:cb:6f:39:28:f1:
10:ad:b0:78:be:21:6d:b4:50:6f:5c:02:66:3f:10:
62:12:d4:97:6b:71:e4:29:b8:6f:d7:67:a1:70:d2:
0f:d7:af:f9:0a:ba:30:da:38:0f:60:a8:1f:6b:30:
44:f7:c3:c1:d5:0c:a3:c6:45:dc:82:a3:71:28:b9:
df:3c:38:34:3d:60:47:96:ce:60:c5:f8:77:35:ef:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:16:A3:95:47:66:01:8C:DF:2C:03:8D:D0:11:75:60:31:2E:26
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dd:8e:93:e4:2f:c0:a0:0a:c2:64:76:68:ab:7f:b8:1f:81:
8a:8c:f2:22:30:5e:5a:11:c9:1e:c1:9f:ee:6c:44:fc:18:62:
6f:f4:c0:98:79:84:b6:c9:8b:2e:68:6c:ad:76:51:ec:00:11:
4d:57:c2:09:a4:13:67:09:69:4f:92:be:84:00:3b:f9:b1:70:
1f:81:91:f2:14:3c:a5:94:d0:a6:03:8f:66:62:4e:59:86:92:
e7:d5:b0:d9:6e:57:9f:d1:3f:c8:4b:d1:3f:92:87:c8:37:2a:
5e:ee:1c:44:43:f6:5d:0a:d6:c2:5f:b8:11:f2:ad:84:d1:17:
fc:33:d3:ca:d9:a4:32:ae:b9:e5:5f:62:68:07:f7:f3:61:71:
61:45:fa:cc:59:ac:f5:a3:68:a1:0c:98:fa:2c:7c:93:29:eb:
97:8f:db:9d:86:e2:dc:74:8f:8b:4d:2b:71:07:6b:25:2e:01:
65:b6:0e:73:97:de:d1:68:41:90:8c:48:db:94:cb:e6:7a:da:
5a:b1:43:87:f1:87:cf:9f:12:6c:b6:ce:f9:ca:92:66:15:0e:
60:5e:0f:51:ce:a9:f5:e9:8e:b4:e3:e2:28:b5:b4:1f:15:96:
16:c2:c9:da:fc:2b:19:9e:8f:58:e9:e1:df:68:1f:c4:60:16:
cc:c7:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:55 2026 by rpki-client