Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: qhsBd7oJJrJtEgmK1dGbevlj/RJ5Lw/U2escEgrATrw=
Subject key identifier: 97:57:EE:5E:92:CA:56:88:BA:DD:4B:B3:C9:2A:52:87:A1:15:B1:0B
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01A1DB6F6D5BA1BB51A14A0D2DD6E8188024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1733
Signing time: Sat 14 Nov 2026 19:01:15 +0000
Manifest this update: Sat 14 Nov 2026 19:01:15 +0000
Manifest next update: Sun 15 Nov 2026 19:01:15 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: v825h1E+ditYgGuNmBemubXFl1TRkNaM9yMcVZ9TlYg=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:6d:5b:a1:bb:51:a1:4a:0d:2d:d6:e8:18:80:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Nov 14 19:01:15 2026 GMT
Not After : Nov 15 19:01:15 2026 GMT
Subject: CN=9757ee5e92ca5688badd4bb3c92a5287a115b10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:dc:24:95:79:b5:53:58:9d:ce:f7:2b:14:
ed:f9:e0:29:dc:2a:22:4e:ae:32:78:80:53:e1:fc:
0d:b5:82:26:e8:c8:d0:d2:43:c4:1e:bc:32:69:ad:
c3:6a:7d:ef:29:84:4e:ba:31:09:24:14:98:ad:34:
be:65:fa:f1:63:59:bb:ea:3c:7c:24:06:4b:f7:29:
5c:49:31:6c:a7:dd:9a:09:d0:03:9e:8f:6b:39:76:
ea:84:4f:e3:a3:25:14:86:af:20:25:7e:12:09:ae:
4e:46:8c:e9:8d:40:c1:33:35:e9:93:78:e4:f7:98:
3c:fb:b4:54:4b:2c:ae:03:2e:03:b3:01:c1:98:ac:
b6:b7:fd:af:cd:81:7b:f5:e1:e5:06:90:f1:40:16:
62:d4:f2:a0:93:af:ff:5e:39:57:44:55:f6:7a:72:
3c:78:b6:a7:ec:e8:98:e3:4d:09:b2:74:81:d1:aa:
0a:6c:a1:d7:15:fc:42:f1:38:f3:e5:b3:6d:d6:64:
05:14:84:21:1a:0f:e2:10:2c:27:38:8e:5c:4f:28:
98:8c:91:8b:25:12:0e:dc:b6:9c:2e:55:c0:1c:7b:
81:5e:8a:b6:52:71:5c:35:74:d7:4f:ed:f1:df:c4:
66:75:3d:d3:3a:4d:74:56:f4:d6:aa:7d:ef:97:0e:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:EE:5E:92:CA:56:88:BA:DD:4B:B3:C9:2A:52:87:A1:15:B1:0B
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:59:f5:f7:33:71:34:69:15:95:f4:5b:05:6c:1b:70:b1:4d:
cb:92:60:1b:b9:fe:93:70:75:cd:85:d6:8d:7e:68:49:f7:b9:
20:9a:b3:70:c1:8a:4f:f6:9e:9c:9c:fa:8a:ce:6b:0c:e9:36:
83:48:69:7c:fd:d3:01:74:eb:40:00:b2:cc:bf:ec:cb:75:14:
26:d9:35:bb:61:5c:bc:ba:06:aa:45:09:d9:71:2d:97:7e:9f:
88:49:47:86:cd:a6:41:e5:88:23:e7:c6:f1:4f:ae:b2:b7:64:
e6:c7:b4:c0:9c:cb:31:09:d9:fd:a1:65:fc:9e:58:ee:d2:8b:
30:c9:1c:44:8d:ad:bf:a9:47:83:e9:ea:65:94:c2:a5:55:5b:
8e:00:b8:0a:2f:65:19:31:ba:5c:57:66:53:20:80:33:09:e0:
1e:d3:dd:02:9a:45:ca:52:4b:0e:e5:ce:63:f3:76:01:af:05:
3d:28:33:83:12:0e:94:e4:05:4a:41:3b:9c:d9:5e:9c:c3:88:
24:85:9d:50:03:4f:e3:f2:5c:1b:4c:5e:07:2f:74:60:cd:11:
67:0b:54:ec:3f:18:2a:f0:91:5f:5f:98:6d:da:b7:35:43:ef:
fc:bc:2a:5e:19:ed:b5:8d:2d:21:4e:ad:14:56:5f:5c:83:6d:
67:a6:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:52:45 2026 by rpki-client