Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: kqxkX7NbEWv9qv9EhiKRsds4UDO/NeDkZjnO1dAuh1k=
Subject key identifier: B3:72:64:88:42:92:B4:8A:C2:0B:96:50:96:86:D3:0A:2F:73:7B:64
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 01A1DCB97DB13932EE48C7F11847DC9D57E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: 0294
Signing time: Sun 15 Nov 2026 01:01:46 +0000
Manifest this update: Sun 15 Nov 2026 01:01:46 +0000
Manifest next update: Mon 16 Nov 2026 01:01:46 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
3: ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa (hash: Mugd9gLE6hvJKv2zQiEqD0piVAHiUgLK+6JoN1CkxKs=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: coKNEMLjS5VY6X8ExjzGxXNoMpmGCyodzyagq86ar/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:7d:b1:39:32:ee:48:c7:f1:18:47:dc:9d:57:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: Nov 15 01:01:46 2026 GMT
Not After : Nov 16 01:01:46 2026 GMT
Subject: CN=b37264884292b48ac20b96509686d30a2f737b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:e5:2b:9c:17:57:a3:8b:3b:89:94:7f:c6:
3e:61:4a:95:6b:29:c4:8b:d5:b8:cf:b7:30:4a:dc:
56:7a:67:7e:d8:d9:f3:90:53:74:b3:18:fd:dd:82:
72:e2:05:24:26:56:e3:ed:b4:6f:42:14:d1:cb:26:
77:5f:88:c3:d7:6b:0b:09:dc:2a:92:1c:d9:da:2d:
09:39:ac:a0:9d:f1:b4:6c:36:5b:65:be:29:32:0e:
52:dc:aa:29:6d:20:a2:7f:64:a0:de:72:18:b5:0b:
75:1e:da:7d:1f:d0:dc:e1:75:5a:3e:5a:5f:d8:e1:
5e:42:91:8f:63:55:9b:04:f6:8d:f0:45:c1:4d:49:
9a:f4:d0:27:13:c2:67:52:fc:ce:30:9d:a1:92:93:
29:48:2b:59:7b:13:6f:be:49:c8:86:fa:d6:cb:53:
07:20:1f:5a:99:df:63:c7:53:66:6e:bd:2a:39:e0:
44:d1:12:ed:19:67:c2:c7:0a:f5:b7:63:b9:16:92:
cd:4c:e3:60:10:db:bb:86:d5:06:66:6b:49:38:af:
26:87:b7:b0:42:d0:34:17:c9:f7:67:67:75:23:ae:
ac:5a:26:7a:42:23:4b:59:0b:70:cf:51:d3:cd:28:
ad:94:dc:05:ec:cc:27:3f:fa:f2:53:d0:90:a8:74:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:72:64:88:42:92:B4:8A:C2:0B:96:50:96:86:D3:0A:2F:73:7B:64
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:ad:0e:cb:84:7a:d6:d4:dd:bd:a9:55:86:58:e1:09:a3:
a6:fd:e6:d2:f9:68:ee:82:b0:10:26:52:80:94:2b:b2:51:0c:
6a:79:ef:85:e6:87:53:3b:aa:b0:de:14:c3:78:7a:dc:59:7d:
03:96:9a:ee:26:49:6b:b7:e6:e8:a1:16:29:25:db:8e:ff:f2:
2c:e2:34:6b:09:c9:87:c2:1d:ae:91:e8:4c:b0:d9:24:f7:22:
0a:eb:c0:0e:18:2d:38:50:cb:43:e0:80:b0:c0:5b:07:36:57:
b3:52:f8:c9:48:f8:ea:ce:b0:92:22:7d:1c:3b:81:93:65:19:
05:33:c7:aa:a0:db:b2:fb:04:fe:dc:b4:c0:59:39:ec:f3:fc:
0e:1e:9e:cb:28:73:dc:b1:01:89:c2:e3:52:50:54:f7:e6:53:
67:95:50:4e:08:1f:bd:65:21:3b:03:64:79:85:d1:c1:59:9b:
95:e7:4c:ab:3a:a6:3b:5c:80:23:a9:c3:43:90:f4:ec:b1:dd:
c5:25:82:3b:ee:22:7e:04:9f:45:a5:20:1b:9a:b9:2f:3e:34:
f2:7f:12:f6:e3:d9:70:97:82:cb:ef:f8:57:0f:59:d4:f7:f5:
25:0b:1a:b9:54:59:bb:01:ec:65:b2:73:94:67:50:a2:04:81:
f3:f4:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:48:34 2026 by rpki-client