Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: Ze2VTJz9RSFHCx5O29gcGjidPNkdTjPhQPp3ogd2mjg=
Subject key identifier: 51:7E:04:18:13:06:DA:BE:76:C0:BB:B0:70:CC:A6:F2:AC:05:D5:EE
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019D284E0D0889C37657DA0E75BFBC56BC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 14C4
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: b7wvAy5MxqPZl26I95Bwg2jQ5cwtXHpTjGt5WbdfUqE=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0d:08:89:c3:76:57:da:0e:75:bf:bc:56:bc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=517e04181306dabe76c0bbb070cca6f2ac05d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:89:bd:7d:0f:b9:d0:b3:3f:42:5b:44:8a:
0b:2d:b5:60:32:73:bf:0a:ef:d8:5f:a4:c8:9e:ce:
7c:33:3e:be:c3:b6:f4:2a:76:fd:c1:2a:61:12:b1:
16:a2:94:da:7b:df:ee:ba:8b:cf:91:63:6e:06:b3:
57:36:19:46:81:b8:2a:5b:b4:e3:38:19:e5:67:30:
7d:db:e6:a9:05:c9:64:9a:1a:0b:a1:94:4d:55:6b:
4a:8f:6a:4d:16:fe:85:fc:38:bc:6a:fd:bb:f5:67:
39:ab:65:60:ca:24:7e:b6:06:b2:9a:fb:13:63:1c:
ca:10:0d:55:b8:de:c9:aa:d0:ea:bd:04:6b:f4:ac:
5c:47:d8:16:2b:c9:b3:3d:94:92:75:19:f8:46:3b:
ef:ed:94:e5:5d:a4:9c:04:a1:4e:8c:ad:32:7d:97:
88:ba:ce:6b:4d:31:7c:91:93:80:7f:42:a1:b3:a4:
b4:ac:34:86:6b:bf:17:64:aa:b6:cd:20:8a:8f:60:
21:6a:fb:b8:ed:49:9b:a5:8d:09:a3:e8:6b:c1:a8:
9d:bc:1d:21:b0:9c:20:b9:01:4b:f6:26:85:40:5d:
b3:31:5e:0d:c0:91:10:9b:d0:12:15:53:b4:f4:e1:
ba:4b:19:06:af:e6:72:11:6e:73:aa:b8:61:03:cb:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:04:18:13:06:DA:BE:76:C0:BB:B0:70:CC:A6:F2:AC:05:D5:EE
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:67:b1:b6:c8:49:28:7a:2c:a3:c9:8a:a0:b6:8a:dc:83:
36:72:86:cb:53:d0:c1:36:0e:86:af:a5:45:cf:44:c8:c0:1e:
50:c5:7a:16:76:d9:5e:ae:b6:a0:2d:a0:34:ec:c5:d0:54:86:
94:b2:c7:aa:63:81:04:c2:8d:4c:9c:fc:17:66:b0:6f:75:9d:
89:a1:c7:e2:23:da:e1:75:99:67:de:77:63:08:21:18:57:91:
66:fe:62:92:59:b5:26:d8:d5:b2:cb:33:e0:22:b7:6d:f8:4e:
f9:6c:c8:f4:0c:c8:31:e6:b3:ae:51:bc:62:66:fc:17:ff:60:
55:59:79:63:17:64:37:2c:e7:ef:e8:cd:ab:f2:59:64:d8:61:
d6:6a:0c:2d:8a:eb:a2:a7:3b:ad:9d:f2:d7:f5:71:a5:30:fd:
a8:6e:7f:3a:80:49:2c:70:ac:05:7e:82:da:d3:81:9c:ad:85:
52:9f:05:fe:1e:61:44:82:ed:81:b7:71:93:66:46:03:c7:8c:
7a:e7:29:57:00:2b:5d:da:b9:56:54:47:62:ff:f4:39:e3:04:
b3:b2:e9:ec:69:53:6b:10:18:1c:63:ac:f9:fe:be:fb:70:23:
c7:92:30:6a:68:32:c0:a8:72:80:b0:67:70:c1:cf:36:0a:c6:
5f:cf:c7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTg0IicN2V9oOdb+8VryEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzJlOTM1YTEwZjljZTIxNmUwOTkzYWU0MTk5Yzk2ZjUy
NzNhZjQwHhcNMjYwMzI2MDQwMTM2WhcNMjYwMzI3MDQwMTM2WjAzMTEwLwYDVQQD
Eyg1MTdlMDQxODEzMDZkYWJlNzZjMGJiYjA3MGNjYTZmMmFjMDVkNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUWJvX0PudCzP0JbRIoLLbVgMnO/
Cu/YX6TIns58Mz6+w7b0Knb9wSphErEWopTae9/uuovPkWNuBrNXNhlGgbgqW7Tj
OBnlZzB92+apBclkmhoLoZRNVWtKj2pNFv6F/Di8av279Wc5q2VgyiR+tgaymvsT
YxzKEA1VuN7JqtDqvQRr9KxcR9gWK8mzPZSSdRn4Rjvv7ZTlXaScBKFOjK0yfZeI
us5rTTF8kZOAf0Khs6S0rDSGa78XZKq2zSCKj2Ahavu47UmbpY0Jo+hrwaidvB0h
sJwguQFL9iaFQF2zMV4NwJEQm9ASFVO09OG6SxkGr+ZyEW5zqrhhA8tKgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF+BBgTBtq+dsC7sHDMpvKsBdXuMB8GA1UdIwQY
MBaAFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMt
YThmMGVlMDBiMmFkLzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMtYThmMGVlMDBiMmFk
LzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKFnsbbI
SSh6LKPJiqC2ityDNnKGy1PQwTYOhq+lRc9EyMAeUMV6FnbZXq62oC2gNOzF0FSG
lLLHqmOBBMKNTJz8F2awb3WdiaHH4iPa4XWZZ953YwghGFeRZv5iklm1JtjVsssz
4CK3bfhO+WzI9AzIMeazrlG8Ymb8F/9gVVl5YxdkNyzn7+jNq/JZZNhh1moMLYrr
oqc7rZ3y1/VxpTD9qG5/OoBJLHCsBX6C2tOBnK2FUp8F/h5hRILtgbdxk2ZGA8eM
eucpVwArXdq5VlRHYv/0OeMEs7Lp7GlTaxAYHGOs+f6++3Ajx5IwamgywKhygLBn
cMHPNgrGX8/HNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:40 2026 by rpki-client