Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: 2LBLgWJaYuxDViofO39681DpQpTlsqGjv7JsFb589rc=
Subject key identifier: C9:84:BE:58:BF:34:D5:BD:E1:67:7B:72:C7:F5:04:E9:D3:74:C8:FA
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01A0D2DDD343A4D64BA968DD59CBB57A2BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 16AA
Signing time: Thu 24 Sep 2026 10:02:27 +0000
Manifest this update: Thu 24 Sep 2026 10:02:27 +0000
Manifest next update: Fri 25 Sep 2026 10:02:27 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: Zb/4lZziNmJTTQyq7DjA4qCsM8Z2/5sHJbQ2cCaiiBk=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:d3:43:a4:d6:4b:a9:68:dd:59:cb:b5:7a:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Sep 24 10:02:27 2026 GMT
Not After : Sep 25 10:02:27 2026 GMT
Subject: CN=c984be58bf34d5bde1677b72c7f504e9d374c8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:7a:df:fc:55:a7:27:c5:51:36:16:b7:91:
62:b5:78:c7:24:91:f2:40:02:a7:b0:e0:1e:1f:ff:
7c:8d:b2:e8:76:33:70:56:08:1a:95:38:c7:40:ce:
57:32:0d:29:6c:d6:01:ee:8e:5d:01:ca:89:eb:a2:
4f:b8:a6:2a:f7:6e:a1:54:29:dd:4d:98:d7:5c:0e:
b3:ae:75:11:f0:f7:df:dd:50:07:58:ff:c5:2f:01:
a8:d4:1e:c6:1a:4f:c2:f7:db:fe:a7:d9:54:7d:e3:
82:97:32:a0:ec:e7:6e:be:86:18:1c:a4:b5:be:44:
47:a7:39:c5:a0:ab:6f:c5:b6:a6:9b:6b:9a:15:3f:
4b:ff:cc:fa:b4:01:30:45:fb:c7:90:0e:cb:19:7a:
63:cc:47:fc:f0:3c:4c:ca:a0:d2:de:24:ab:3a:0b:
46:57:c4:c1:ff:dc:60:c2:b0:6a:ac:27:6f:1d:43:
de:84:a9:9f:b1:f0:bc:cd:10:41:14:4e:81:ee:d5:
40:9b:14:33:fa:10:9b:49:d5:07:4a:a8:17:33:11:
e4:b6:7c:8f:90:4b:39:b9:c8:be:29:1d:a1:dc:be:
b9:89:60:9f:03:7b:02:9a:c2:71:f0:8c:e4:09:5b:
62:4c:bb:0c:df:b3:2a:e1:77:8c:b7:53:b7:af:95:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:BE:58:BF:34:D5:BD:E1:67:7B:72:C7:F5:04:E9:D3:74:C8:FA
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:52:08:36:17:3b:aa:7c:c4:d3:52:eb:55:89:17:da:ea:2e:
9e:9b:df:86:11:9e:c5:9e:b7:20:73:44:b5:ee:7a:85:93:62:
7f:55:a8:0a:7d:a0:5b:8d:70:15:c1:7f:89:e0:f0:fe:2f:31:
d5:27:f3:9e:d4:06:b5:13:9f:2d:ff:4e:11:94:69:87:c4:25:
9b:67:fa:14:38:a9:b3:c0:a4:6f:82:cb:88:c2:af:df:ed:48:
95:c9:3d:7b:02:4f:f2:49:fe:47:a3:e3:8f:04:60:fc:19:b8:
04:7a:66:5c:c3:55:75:85:e9:2c:98:de:44:cd:86:b8:6a:28:
4c:4b:a2:8f:6e:d3:83:85:1a:44:5e:b3:df:ec:75:d6:03:16:
fa:47:7f:17:8f:95:a7:02:9b:39:a1:b1:3e:29:5b:5a:e6:51:
dd:78:c9:4f:fe:64:52:12:9f:f0:6a:09:c3:2f:98:99:c5:65:
7d:66:37:6d:42:87:29:d0:5e:82:8b:35:4b:35:4b:79:8a:9e:
18:12:74:5c:5f:98:fd:a7:cd:22:32:08:05:9d:ab:f5:10:90:
7a:67:be:66:07:eb:15:53:e9:15:4d:60:91:bf:56:29:68:bf:
22:db:b3:a6:93:90:ba:83:68:2b:d1:20:5b:c9:43:48:be:0e:
e8:6c:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:20 2026 by rpki-client