Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: 69QZHvjHBvFDpYMxAtF2DtmtVrEtVKhFwI4Dijgs2Dg=
Subject key identifier: 69:07:B4:D8:F6:22:4E:7F:D6:7C:89:F5:3E:E2:18:73:49:9B:CC:20
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 019D27728D5E10ADDF8F7A660B54DCEC3A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: HpnTbfS7S6BAaVqaUfZX-c0MU08.roa (hash: W27m8UR8xxwgjtT+uRjFRwsVQNdm+D+G6MLGi6nWkCc=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: Cx56QMFB1BPyxFHlTv5WdmsqLnj897OIlaOCRJAc60w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8d:5e:10:ad:df:8f:7a:66:0b:54:dc:ec:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=6907b4d8f6224e7fd67c89f53ee21873499bcc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:68:c1:49:57:97:18:ba:23:2e:f5:72:03:
89:9f:1d:22:1c:e8:7b:f8:cb:6f:a8:22:94:4b:86:
ca:2c:96:07:5f:62:56:f7:4e:dd:1e:0d:82:9c:2c:
df:3b:ed:21:1a:20:90:b4:ae:69:85:e9:b3:cc:a4:
22:fa:29:d3:87:eb:71:9e:8c:2e:d0:49:9d:40:29:
00:bc:eb:f1:0d:a2:29:2f:b1:24:5a:69:c3:fc:73:
cc:2f:9f:e7:ae:93:39:fa:d3:66:4c:72:4d:36:d9:
bb:2f:9d:0b:87:81:8f:63:fe:4e:16:f0:9c:64:ac:
a3:62:5e:94:c7:c3:86:59:27:75:d4:ea:5f:96:a9:
b5:1c:bf:99:bb:82:09:67:b9:a4:8e:6f:03:f3:ed:
1b:a2:98:36:49:e5:65:e3:b9:cb:fd:b3:3b:02:26:
55:18:0a:0a:4f:0d:83:b3:2a:fb:bb:8f:5a:5c:f5:
d1:27:d4:7e:d5:9f:cb:41:2b:05:31:35:ed:f4:48:
d5:83:82:ef:72:70:11:3b:51:20:eb:66:94:9c:c4:
3f:fb:57:68:9d:9c:ce:07:87:50:8b:97:df:83:2d:
53:9c:9a:89:1e:e3:8c:1e:81:fe:62:82:24:08:0b:
b3:b8:bc:91:fe:37:c3:49:7f:7b:0e:f7:39:2e:06:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:B4:D8:F6:22:4E:7F:D6:7C:89:F5:3E:E2:18:73:49:9B:CC:20
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:b3:9b:40:95:38:00:ea:c9:03:53:a6:29:3f:d1:9f:58:
ba:1d:d6:8d:d0:6d:b0:db:a6:fb:8e:93:11:ad:e4:96:ff:42:
8e:eb:97:0e:54:a7:da:fb:89:e7:bb:9c:1d:04:18:fc:60:b9:
21:8e:dd:d9:20:a0:8a:ea:b4:67:0d:3f:6a:27:2a:42:98:15:
28:18:7a:1e:69:19:dd:a3:29:73:5d:f2:6b:f7:02:0d:f8:5d:
4c:ad:33:3f:16:48:41:50:53:a0:0d:d2:11:27:2c:09:d9:62:
83:5b:0c:b0:1e:df:26:34:25:19:81:00:ab:22:a1:79:6a:9b:
04:e1:5b:a3:5e:07:ba:da:5e:8b:50:28:ef:b0:d3:e7:ec:77:
2b:b9:b7:a5:08:cc:66:29:63:00:bc:55:ea:2e:63:14:a3:a0:
51:8c:84:49:ed:2c:7b:2b:25:36:87:2a:f1:6a:93:3a:26:4b:
87:fe:1e:5c:25:62:9b:f5:70:ae:44:54:60:9e:81:a5:7b:2e:
bd:a4:45:d0:0b:05:52:2b:05:6f:ba:88:30:d5:b5:0e:3d:9b:
46:6c:dd:fc:bd:1a:a1:28:6e:75:ee:53:0b:46:e3:44:7a:99:
14:29:22:99:9e:8f:0e:91:f9:b9:d6:40:8c:75:81:80:f9:7a:
6f:70:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:07 2026 by rpki-client