Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: H0A/8cPcBpR4pEqQYnNfzeWTKmd2HGwaNK6D1ovoLdc=
Subject key identifier: 5E:87:15:4F:B5:79:C4:0C:79:44:83:F3:1A:D7:D6:79:B3:15:79:B0
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019E1D900E200DBE63A6FCF2E4502A8C8F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1543
Signing time: Tue 12 May 2026 19:00:40 +0000
Manifest this update: Tue 12 May 2026 19:00:40 +0000
Manifest next update: Wed 13 May 2026 19:00:40 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: MAKDd1QCPeFxJp5jc1ZJ7cedipAllWqy13HwkG18wDY=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:0e:20:0d:be:63:a6:fc:f2:e4:50:2a:8c:8f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: May 12 19:00:40 2026 GMT
Not After : May 13 19:00:40 2026 GMT
Subject: CN=5e87154fb579c40c794483f31ad7d679b31579b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:98:fc:bb:77:87:67:a1:6c:e0:ed:40:05:
99:95:80:ed:31:d1:29:93:f0:a0:04:51:21:37:77:
7a:14:36:df:2f:53:a6:7d:c0:f5:fa:f0:bd:5c:13:
0f:cd:77:15:31:34:8b:88:a2:32:3d:19:28:ec:1b:
a3:7c:dd:26:43:60:34:64:d3:62:c8:ca:00:ae:91:
ee:84:e4:4e:12:78:c2:67:6e:a9:11:1d:a8:6f:25:
28:70:3a:97:65:a5:22:dc:08:5c:a9:2c:e9:2d:00:
35:63:87:6c:16:fd:fe:82:27:9e:b2:12:e7:9c:1a:
9c:49:d9:68:55:c2:39:b7:bb:9b:af:b8:fd:94:fb:
2f:1e:f2:cc:a5:58:e1:ad:81:cb:42:23:6f:51:27:
fc:39:2c:64:5e:ec:53:c9:fa:0c:7d:ec:be:b9:6d:
53:ac:6b:6b:c2:28:e8:82:07:17:3e:1d:89:35:3f:
d5:6b:60:cf:6e:cd:b9:ee:c9:18:7b:9f:a1:ec:5a:
59:ea:40:29:0b:a5:d4:aa:db:ce:73:ff:fc:78:30:
8a:f9:ad:70:8b:7e:19:4f:84:3a:9d:67:1a:b6:98:
6b:28:14:f0:4b:44:9b:b1:2c:db:45:3a:97:fe:79:
5c:c8:2c:ee:87:03:d9:ba:c7:31:3d:b9:33:1c:ef:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:15:4F:B5:79:C4:0C:79:44:83:F3:1A:D7:D6:79:B3:15:79:B0
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ce:32:73:0c:41:cb:bf:c4:88:45:ce:0c:19:4a:80:5a:84:
c3:26:85:1b:11:1b:78:0b:fa:b2:5f:0a:10:10:be:fd:48:71:
56:89:54:1d:8e:99:ab:2f:81:f3:87:da:bc:0a:4c:26:a0:53:
69:71:0f:d4:06:1b:b6:68:e3:9c:74:c4:6f:b8:0e:2a:85:06:
01:5e:7b:a9:03:f8:7f:a5:59:ef:3c:7d:a8:66:57:fa:43:cd:
00:ed:0a:f0:21:da:d6:c8:27:67:ff:95:0e:ca:ad:7b:9a:d0:
c0:a4:51:23:1c:c6:29:25:03:9d:90:0e:0a:95:c5:b3:2b:e1:
bd:c1:d7:36:1c:c0:89:0c:cb:22:9c:5a:1e:51:55:21:6f:d5:
d2:d0:0d:3b:67:d6:95:85:7d:64:d8:b2:a1:61:bd:c3:7b:80:
7e:72:9a:87:4d:fb:94:83:8d:ff:e6:61:ff:ac:40:95:41:02:
57:ce:ff:44:88:06:95:24:f1:ad:35:e6:ec:5b:92:e8:a7:4f:
0c:5b:23:6d:b6:41:2a:27:e2:1d:cf:17:bd:87:23:80:16:40:
1f:41:47:57:a9:02:50:18:35:55:50:11:6b:99:f7:c2:a9:a9:
f8:1d:9e:96:32:da:1a:af:77:92:ef:c2:39:de:cc:dd:d1:17:
6d:72:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:43 2026 by rpki-client