Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: bU5AMtkLBbtABM8zymBkWIUArxVjuzfFPGwwqVC2zFc=
Subject key identifier: 47:6B:32:6F:8D:0E:5A:A6:7E:9B:6F:26:DC:5B:A4:18:1F:7D:8B:BD
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 01A0D426B3B0BAADB9272567C8DFB0AF1052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: 020B
Signing time: Thu 24 Sep 2026 16:01:40 +0000
Manifest this update: Thu 24 Sep 2026 16:01:40 +0000
Manifest next update: Fri 25 Sep 2026 16:01:40 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
3: ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa (hash: Mugd9gLE6hvJKv2zQiEqD0piVAHiUgLK+6JoN1CkxKs=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: agiEXpamR33uvf86M7/getVpMWPkGhyKtbqfaDX/SS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:b3:b0:ba:ad:b9:27:25:67:c8:df:b0:af:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: Sep 24 16:01:40 2026 GMT
Not After : Sep 25 16:01:40 2026 GMT
Subject: CN=476b326f8d0e5aa67e9b6f26dc5ba4181f7d8bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:88:ba:aa:8d:35:68:6d:cf:05:09:ff:16:
fb:29:3b:12:69:45:63:c5:29:66:5c:e6:6d:78:5c:
cb:9c:a8:5f:c3:6a:16:64:59:dd:94:f4:ca:95:1e:
ae:f3:a6:bd:94:73:19:93:85:4d:61:3d:65:10:cb:
01:97:f6:cf:74:39:41:54:87:ee:50:64:72:10:4b:
41:6d:5a:a9:33:a3:a0:00:78:6b:99:84:f2:23:70:
ce:3a:6b:ec:58:cb:6e:cc:54:11:d0:8e:f7:22:50:
f1:7c:ff:73:4a:0c:2c:5c:1e:bf:26:47:6f:bb:3c:
64:cb:b6:97:f9:7d:42:63:02:00:3c:a1:e4:16:60:
64:26:f7:ee:82:a8:78:56:dd:65:f5:7e:ab:97:7d:
6c:e8:6d:a5:9c:10:a6:5c:eb:7d:ce:63:a4:cb:e8:
e1:99:09:d7:2b:1e:f0:88:07:90:d2:84:0b:01:c0:
63:cc:23:62:dc:6e:5f:fe:4e:a6:35:76:b5:d8:4c:
7e:fd:c1:2e:2e:66:62:6d:91:b7:fa:c1:8a:85:93:
1a:b8:76:d4:63:10:72:88:21:8d:e0:65:5b:be:63:
19:02:59:dc:66:6d:e8:3c:ee:11:b5:c7:e8:59:f8:
db:ba:94:39:65:08:0d:6f:24:d5:e2:28:b9:13:33:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6B:32:6F:8D:0E:5A:A6:7E:9B:6F:26:DC:5B:A4:18:1F:7D:8B:BD
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:84:52:9b:59:b0:fa:6a:46:1c:0c:1f:37:fe:7c:9f:25:a5:
21:19:e5:a3:14:21:c6:4c:87:2d:d3:82:5c:6e:43:b8:50:1c:
6c:65:82:10:87:d2:ad:2b:84:d5:a6:31:46:eb:d9:3e:4b:92:
32:53:26:37:f8:28:52:d2:35:0a:09:41:f1:da:8c:ec:e1:fc:
49:6b:59:40:13:f4:18:60:2d:c3:29:3c:3a:6e:d2:fe:12:e0:
e8:b3:dd:f3:97:d4:36:4e:38:ca:e9:2a:94:bd:b9:61:77:3e:
6e:e1:51:d1:6b:d3:d1:cf:39:a7:e8:65:cf:82:1a:23:2a:0c:
4f:68:d0:f1:46:ba:b8:8c:f7:1a:1d:0b:51:de:a7:33:59:52:
df:94:aa:03:7d:c7:c5:c2:62:17:84:04:ce:60:c9:96:ff:de:
58:73:69:0d:b2:fb:ab:6a:28:e8:88:b1:8b:77:f7:ee:e6:e6:
64:ba:5f:c4:fa:ec:57:fa:61:93:f0:5b:99:6b:e5:8b:89:e3:
4c:3f:80:a1:1e:1f:16:f1:c3:e1:0d:4b:54:cf:75:cb:e1:28:
1e:1d:95:56:31:b5:5e:5f:7e:06:bb:98:43:69:e3:77:2c:14:
d3:40:14:a0:3d:9c:bc:dc:28:aa:de:6f:78:4a:a2:a4:39:06:
cd:c0:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:35 2026 by rpki-client