Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: fsVXypWNaPxT76M3u2bnov6GXL47AMNFPaW9JvNKpK0=
Subject key identifier: B3:9A:74:47:F4:E3:B7:98:52:24:4E:79:21:B0:C7:21:3A:FD:F3:8E
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019D265F296F170CFFD0E84AF11B11933FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: SbimelmGLXaBG1YVmAQ4yL9Ixipvqn0TvFsW4imCo88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:29:6f:17:0c:ff:d0:e8:4a:f1:1b:11:93:3f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=b39a7447f4e3b79852244e7921b0c7213afdf38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:6a:ed:9c:7b:51:57:0a:e4:2e:1e:07:73:
50:c3:fc:a1:47:5c:0b:4b:3e:f9:6d:dc:cc:45:22:
1f:5d:98:25:d5:45:68:40:5c:d1:04:18:2d:fb:ed:
ce:f2:f5:78:93:dd:c5:41:1f:09:41:e0:51:da:78:
4d:43:51:f2:05:15:be:f9:48:02:23:63:31:f8:c2:
08:69:ab:c1:de:dc:53:a0:ba:52:b3:51:60:65:f2:
52:00:06:ff:96:42:6d:98:72:c0:fe:da:54:4a:f6:
f6:00:b0:4e:57:f9:f3:57:c6:8e:0b:5d:c2:c9:07:
f8:c3:ea:a5:e7:12:05:e0:4f:41:bc:26:e9:ae:4d:
c0:6c:2d:68:a4:ad:da:cd:3b:ad:d0:2b:d2:fe:13:
3c:6f:a5:09:c5:87:b5:c7:96:51:80:50:39:a3:83:
e7:89:44:85:82:8f:63:40:08:51:2c:75:68:09:8d:
53:54:31:c9:9c:79:26:eb:31:b3:7c:91:46:0c:cb:
ef:31:15:96:54:14:0c:57:a0:6f:3f:8e:18:55:75:
c9:1d:f8:61:fc:21:c3:91:7b:93:8e:e4:4a:6d:94:
59:82:10:d8:cf:75:d9:7c:0a:88:a5:e8:6b:30:f3:
bc:04:08:27:53:63:d9:6c:21:8d:df:45:bb:f2:d9:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9A:74:47:F4:E3:B7:98:52:24:4E:79:21:B0:C7:21:3A:FD:F3:8E
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:25:ed:04:fa:43:51:1f:e0:4c:8c:e4:0b:32:48:2c:be:
77:0d:cf:f5:04:94:87:27:a2:52:fb:b1:22:ee:7b:15:d9:cd:
b3:11:3f:64:b2:06:ad:aa:f5:f4:cc:b4:72:57:96:3e:34:48:
65:7f:ee:82:5a:f7:71:e6:46:5b:0a:ed:f7:2e:db:d4:25:a4:
9e:f7:6f:a2:6f:33:3c:29:79:73:22:03:90:3f:f3:41:3a:7c:
ef:46:b1:bb:df:b4:5e:6a:5d:8d:1f:28:b2:5f:fa:99:dc:78:
31:67:32:68:17:fe:d3:3e:f7:1e:57:4c:63:e4:16:64:a4:0d:
36:ea:5b:85:2f:e0:31:93:8f:14:75:b3:82:d9:b0:4a:64:ea:
a0:7b:dd:79:6b:8c:d6:dd:b7:44:14:e4:2d:87:0a:95:3f:35:
15:0e:88:60:da:85:a9:da:6a:0f:4b:1c:8f:97:0f:36:40:36:
d1:c2:07:3b:eb:a5:1a:f1:fa:c1:84:d7:fc:83:e4:c8:9e:ee:
b2:b3:ec:18:70:7e:56:f6:14:5c:97:ee:ef:c0:fd:b3:ff:d7:
92:77:e1:31:42:c5:d0:eb:b1:d0:1c:2d:6c:ae:97:0d:c6:86:
89:5e:51:52:e6:1f:5f:d7:18:ad:3d:96:12:bf:5b:bc:2d:6a:
93:2b:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:09 2026 by rpki-client