Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: zU4fE4utoy3KxTQrjkwy0UvrlpVBL97bAvPeVd86RVk=
Subject key identifier: A1:BD:96:F1:23:78:FF:03:A1:8F:A7:54:49:7A:A6:E6:B8:AC:E3:2E
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019F9059FF4C528592E267BCA285045EBFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1603
Signing time: Thu 23 Jul 2026 19:00:44 +0000
Manifest this update: Thu 23 Jul 2026 19:00:44 +0000
Manifest next update: Fri 24 Jul 2026 19:00:44 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: rSQaMzGvVOClQOb2MrNkSeKNVdYfj0yUdNNa8j/WRig=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ff:4c:52:85:92:e2:67:bc:a2:85:04:5e:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jul 23 19:00:44 2026 GMT
Not After : Jul 24 19:00:44 2026 GMT
Subject: CN=a1bd96f12378ff03a18fa754497aa6e6b8ace32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:c6:48:46:e7:7c:cd:99:39:c6:77:2e:e0:
7e:30:3e:2b:8c:af:db:19:3a:00:83:01:6f:a8:1b:
46:5f:db:24:7f:93:80:01:a0:c1:34:8c:bd:b1:25:
d2:8a:4f:bf:34:bf:fa:45:8b:8f:07:bf:62:23:91:
50:d3:14:32:1d:82:9c:c5:ed:c1:f3:95:ff:be:46:
5b:6b:34:11:bb:06:fb:28:19:d6:af:4d:d0:9c:e8:
f9:0a:d3:ee:e7:b3:e6:65:15:28:3a:d5:03:b5:6e:
2d:24:c9:9a:8d:f5:fb:32:c5:b7:18:74:dc:f2:72:
ce:fa:a5:d2:d7:0d:50:9e:0b:14:b8:a2:5c:c4:b3:
46:71:19:96:2e:15:58:ed:6d:2d:d4:76:37:83:44:
b5:fc:27:d8:15:53:a5:4d:e1:2e:30:31:2a:11:50:
3c:85:fb:26:fd:3a:e5:71:2e:69:a6:29:91:5c:db:
40:5f:4f:9f:c1:9b:6e:f4:6f:e9:e9:71:c8:fe:49:
7d:1e:02:92:4c:95:fd:71:c7:45:49:0b:15:43:46:
59:ce:34:cb:86:4d:7d:53:41:9b:40:f0:3d:57:13:
e2:37:71:85:38:79:e7:49:0e:2b:73:e1:a2:51:3a:
2e:ac:5d:33:99:c6:83:ec:13:44:14:da:66:ab:84:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:96:F1:23:78:FF:03:A1:8F:A7:54:49:7A:A6:E6:B8:AC:E3:2E
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:ff:c4:06:fe:7e:8b:7b:f4:60:41:46:e3:44:fb:ce:e8:
ee:ab:d3:50:ed:fb:ab:fa:3a:a7:44:ec:d2:55:4c:98:9c:54:
78:f6:74:5f:ec:d6:eb:d4:68:7e:4c:f8:95:5b:88:92:07:10:
a6:9d:83:ac:94:50:b3:42:8d:fb:cb:c4:f6:f7:da:61:8f:fb:
7e:a2:a5:12:84:60:23:3e:ff:96:b4:ce:12:d0:b8:98:a6:8a:
85:04:a1:0b:20:e4:a8:f1:03:fb:08:70:1c:99:c7:0a:84:fb:
44:a7:97:c3:fd:0f:92:c6:1d:bb:63:7d:06:cc:09:6e:a6:3f:
03:03:a1:7f:32:38:1d:b5:a1:d6:ab:3b:2a:3e:f0:ca:b1:69:
92:e6:4e:4d:ab:4a:cc:20:fd:80:ce:ee:00:af:c1:6c:a9:75:
9b:85:40:61:e7:48:e4:5b:0d:74:9c:bd:3a:3a:c2:31:52:b0:
cf:e9:8e:54:05:95:52:fc:c2:52:4d:62:33:76:ec:6e:a5:34:
ac:89:f3:f1:a0:b7:47:24:42:a2:dd:ff:9b:c3:36:07:50:7f:
83:78:e9:49:c4:a4:e4:cf:39:d2:33:bf:f2:a3:01:f2:84:9b:
49:3c:17:73:08:77:24:22:f7:bb:82:81:47:91:95:e4:83:ca:
15:8e:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:39 2026 by rpki-client