Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: bGsttirgWjLLPXWKZlS986dZ3L4VN8vutg2fU20cRuE=
Subject key identifier: B0:14:93:A7:FC:DE:CE:7A:A0:F0:FC:F2:4E:68:89:A5:B5:1A:F9:60
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 01A0E407AB1A357623B7793013A37F1BDA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 18:01:42 +0000
Manifest this update: Sun 27 Sep 2026 18:01:42 +0000
Manifest next update: Mon 28 Sep 2026 18:01:42 +0000
Files and hashes: 1: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (hash: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=)
2: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
3: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
4: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: XI7qlYv1fW7z1B2rrHPMoXCIKrqPBGvoeKUobX6f+8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:ab:1a:35:76:23:b7:79:30:13:a3:7f:1b:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Sep 27 18:01:42 2026 GMT
Not After : Sep 28 18:01:42 2026 GMT
Subject: CN=b01493a7fcdece7aa0f0fcf24e6889a5b51af960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:bd:07:f5:b1:91:c3:6d:5f:8a:27:16:6b:
48:17:09:65:82:f1:f6:ae:c0:25:45:83:7c:08:ca:
6c:a5:18:e2:e8:fa:19:9b:32:a3:6e:f2:c5:cc:3f:
1e:17:e1:00:58:61:b4:7f:8c:fd:93:e8:c6:4e:a9:
39:72:02:d2:4e:68:d9:3e:1c:84:3d:38:dd:75:3b:
ca:83:fa:3c:27:35:75:f2:d7:07:da:50:1e:c1:ab:
61:f8:9b:8c:61:10:db:e3:13:fa:d7:8f:7a:e5:2b:
b0:d6:e8:9d:d7:9a:b8:0f:6a:88:6f:ad:63:c0:5b:
fa:e4:ef:aa:9b:eb:8c:9f:8d:bd:2c:c8:3e:71:9b:
32:3d:19:d3:5f:0f:af:e9:2a:d0:8a:2a:d9:6f:94:
58:bb:16:8f:fc:fd:b4:ee:6f:3f:78:72:2b:21:27:
35:1b:d8:17:69:ab:64:6c:6f:2b:1d:14:52:1a:42:
2c:fa:5e:20:ee:24:bd:ec:a2:4a:22:31:4e:d3:c1:
39:af:be:0d:84:05:09:0c:52:ae:cb:1d:28:5c:4b:
fa:ea:22:24:e5:6e:67:e3:14:44:d3:57:1d:7a:61:
ba:ab:a7:35:ee:b5:ff:1f:df:93:b0:a4:23:20:8f:
7c:62:85:a4:c3:06:fd:7f:8e:16:26:d4:15:40:20:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:14:93:A7:FC:DE:CE:7A:A0:F0:FC:F2:4E:68:89:A5:B5:1A:F9:60
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6a:ab:29:df:14:fc:54:e8:c6:c7:90:e0:b0:e1:e8:42:3c:
33:ef:e8:71:f7:df:7c:51:61:4f:83:1b:1d:ba:92:e2:12:11:
2f:8f:56:e3:12:c2:90:79:35:43:73:1a:09:34:57:1e:f9:16:
42:83:4c:b8:df:f7:90:31:a3:63:0d:bf:3a:d5:2f:54:87:e9:
f6:7c:34:15:8c:c2:52:bd:12:09:dc:82:14:1c:fd:40:8a:79:
41:de:75:18:03:37:e9:6e:fc:a7:a6:99:d0:d5:b3:45:62:04:
28:25:77:9e:e4:ee:39:ee:ce:a4:f4:4e:77:cb:98:89:5e:a6:
df:a5:40:51:1a:3c:fe:59:1a:8c:8e:c4:c9:2f:4d:fe:b8:ec:
9b:d3:bc:3a:e4:af:ec:36:79:ad:1d:e6:74:d1:40:fe:e5:b8:
7a:26:11:34:26:a7:26:13:df:6f:cd:3b:5c:07:41:a6:7e:d6:
25:3c:ac:d3:a7:5d:30:58:84:02:f0:5f:aa:98:4a:c9:2b:b7:
6e:17:08:37:12:21:a4:b0:7f:70:25:40:cc:a5:c3:37:80:e2:
2a:47:e6:64:96:92:94:b4:cc:2f:75:09:6c:5c:c1:95:de:f7:
1b:2c:68:c9:59:41:b2:50:0d:e2:4d:95:24:52:de:f5:b6:dd:
67:f9:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:19:25 2026 by rpki-client