Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: jsHDxTwNTWzri6yYrsWomlOKlC41QdN5mTsxV9Bc5EY=
Subject key identifier: 83:61:41:B5:54:E4:DD:5F:15:EE:ED:59:A5:10:67:93:0F:E7:C4:DA
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 019D2B84EBF93CDB7E60E24D3D847045F6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 0D6D
Signing time: Thu 26 Mar 2026 19:00:24 +0000
Manifest this update: Thu 26 Mar 2026 19:00:24 +0000
Manifest next update: Fri 27 Mar 2026 19:00:24 +0000
Files and hashes: 1: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: n68FyXzMzwiR8vbO1vjA3o0ie1ascW5zkTmt0j1HYSE=)
2: zO8hQmSxtEXmRdrwqFPkVEGSdWg.roa (hash: MmT0Cb8d42MmUiiW2gdoJjBjTgQPDMLhJCGUAeZAyRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:eb:f9:3c:db:7e:60:e2:4d:3d:84:70:45:f6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Mar 26 19:00:24 2026 GMT
Not After : Mar 27 19:00:24 2026 GMT
Subject: CN=836141b554e4dd5f15eeed59a51067930fe7c4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:b1:37:e4:65:91:72:06:f1:cb:8c:13:2d:
35:10:cf:ab:50:06:a5:c8:e0:6e:ab:bb:ef:1e:62:
81:a5:e4:a0:1c:e0:b6:ca:44:fc:88:20:f8:68:d4:
15:dd:d1:9d:87:7b:d4:50:e6:17:2f:ec:19:6e:ab:
08:19:99:80:f4:ab:fe:b2:4f:61:da:1c:fe:47:9d:
c0:1f:68:8c:2e:87:c8:4f:ba:57:4f:67:7a:c5:f2:
41:c5:25:f0:07:c8:55:5b:1d:4a:82:cc:0d:2f:c9:
27:74:61:c3:dd:40:ef:6e:c7:55:45:35:7b:cd:a5:
45:14:e5:8c:bb:cd:83:a1:9c:09:96:4c:22:66:81:
6e:7e:e6:c8:8c:b8:61:62:d4:03:bc:67:60:1a:9a:
30:ff:fd:3f:51:16:c8:c1:d9:24:55:46:18:f5:6a:
9a:dd:ec:12:03:e2:2e:e4:11:fa:19:a6:34:7d:a4:
bd:a4:de:57:9e:27:53:af:08:ba:78:27:20:b7:ab:
10:7b:be:d3:b7:19:85:c8:50:93:74:54:8a:22:1b:
e9:bd:58:c6:fb:42:6c:08:1b:f5:8b:14:5b:b1:75:
bf:1c:94:55:0a:c9:4a:59:d1:a7:d0:d4:66:b3:f5:
e5:7a:1f:3b:95:c1:05:5e:85:6a:5e:09:d2:e8:ff:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:41:B5:54:E4:DD:5F:15:EE:ED:59:A5:10:67:93:0F:E7:C4:DA
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:9f:97:fc:a5:2d:a4:94:90:d8:02:31:70:e9:11:c5:75:d7:
4f:db:7b:d1:34:c9:a4:d9:ec:29:4a:8b:75:44:14:da:1e:04:
8c:32:d8:48:c8:fc:68:82:64:7a:6c:44:d2:c3:ba:b5:b2:5b:
c6:aa:29:1e:91:52:7f:d1:58:08:06:17:b9:32:2b:57:37:a2:
b0:e3:af:e2:43:9e:85:54:50:4b:15:bc:61:b5:f5:f4:13:a9:
40:d8:36:db:7c:25:4a:21:39:d1:08:26:a3:e9:3c:f5:3c:08:
5c:2e:f3:57:34:be:25:a9:83:46:2b:cd:92:c4:bd:32:41:df:
b4:a1:dc:d6:9e:2e:e4:29:7d:e3:ae:e9:77:89:11:67:4c:1a:
dd:4d:61:d1:2a:81:9c:01:69:ec:c0:dd:82:59:e4:d7:7a:df:
0a:84:1e:a6:99:c5:f2:d8:b5:29:5d:19:be:59:20:50:e6:16:
be:fb:16:35:f0:2f:82:66:20:cb:33:dc:0a:c1:35:51:c2:85:
e0:56:93:c0:68:e7:c4:50:ed:ec:83:d8:d6:c5:1c:61:fd:77:
cf:22:eb:b0:57:a9:b1:d9:e4:23:60:3b:f0:88:62:98:b3:5e:
6e:f6:54:7a:d5:05:b4:59:e5:b8:22:6b:13:4d:62:40:ec:85:
9c:a9:5d:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhOv5PNt+YOJNPYRwRfbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzk3MWJmZWE3OGQ2YWE1YjQ5ZWQ1YWMzNWM3N2I2YTMw
YTA4OTQwHhcNMjYwMzI2MTkwMDI0WhcNMjYwMzI3MTkwMDI0WjAzMTEwLwYDVQQD
Eyg4MzYxNDFiNTU0ZTRkZDVmMTVlZWVkNTlhNTEwNjc5MzBmZTdjNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHixN+RlkXIG8cuMEy01EM+rUAal
yOBuq7vvHmKBpeSgHOC2ykT8iCD4aNQV3dGdh3vUUOYXL+wZbqsIGZmA9Kv+sk9h
2hz+R53AH2iMLofIT7pXT2d6xfJBxSXwB8hVWx1KgswNL8kndGHD3UDvbsdVRTV7
zaVFFOWMu82DoZwJlkwiZoFufubIjLhhYtQDvGdgGpow//0/URbIwdkkVUYY9Wqa
3ewSA+Iu5BH6GaY0faS9pN5XnidTrwi6eCcgt6sQe77TtxmFyFCTdFSKIhvpvVjG
+0JsCBv1ixRbsXW/HJRVCslKWdGn0NRms/Xleh87lcEFXoVqXgnS6P9kuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINhQbVU5N1fFe7tWaUQZ5MP58TaMB8GA1UdIwQY
MBaAFLE5cb/qeNaqW0ntWsNcd7ajCgiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEt
NDdiMWJkZjhkNTMwLzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEtNDdiMWJkZjhkNTMw
LzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA45+X/KUt
pJSQ2AIxcOkRxXXXT9t70TTJpNnsKUqLdUQU2h4EjDLYSMj8aIJkemxE0sO6tbJb
xqopHpFSf9FYCAYXuTIrVzeisOOv4kOehVRQSxW8YbX19BOpQNg223wlSiE50Qgm
o+k89TwIXC7zVzS+JamDRivNksS9MkHftKHc1p4u5Cl9467pd4kRZ0wa3U1h0SqB
nAFp7MDdglnk13rfCoQeppnF8ti1KV0ZvlkgUOYWvvsWNfAvgmYgyzPcCsE1UcKF
4FaTwGjnxFDt7IPY1sUcYf13zyLrsFepsdnkI2A78IhimLNebvZUetUFtFnluCJr
E01iQOyFnKldXw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:44:56 2026 by rpki-client