Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: MeEmtfXDzOsx1ue0Zmzvv1p/g3qC/jURRJDHPdcnq9s=
Subject key identifier: 0C:EC:D8:BA:46:F9:C0:DC:4F:A5:57:41:9D:49:51:D4:75:B2:AB:53
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 019D24A7E7DF092ADC80D191CC4A30A77C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: 22
Signing time: Wed 25 Mar 2026 11:01:16 +0000
Manifest this update: Wed 25 Mar 2026 11:01:16 +0000
Manifest next update: Thu 26 Mar 2026 11:01:16 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: WLZwejPiTsGj3L9WWmyBlMUa03Q.asa (hash: NvnlIzfI7uEtt14QTA2ioVybslPnmkhw44zqG8hYsrI=)
3: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: z+t5bFbPV/6U3Rn2HjPsl+BZeVZnf2MufuUiHJRgTvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:e7:df:09:2a:dc:80:d1:91:cc:4a:30:a7:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: Mar 25 11:01:16 2026 GMT
Not After : Mar 26 11:01:16 2026 GMT
Subject: CN=0cecd8ba46f9c0dc4fa557419d4951d475b2ab53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:d4:60:6b:b6:9a:b1:06:eb:fd:ab:7e:70:
8d:58:26:f5:05:56:d9:2d:7c:00:e1:e1:eb:0b:5d:
75:86:73:cc:13:f7:34:7e:98:a0:a3:e8:b1:6f:0e:
a4:3c:a5:b4:06:5b:5e:11:dc:cc:95:99:db:d9:9d:
a6:78:ab:d7:b2:05:21:d8:31:64:c3:6c:c9:5c:e9:
bd:e3:95:a2:dd:c3:0c:08:72:4f:5b:3c:59:6e:23:
1f:3b:07:29:e4:8f:20:3d:0d:55:e8:37:41:f5:c1:
47:48:d2:c0:4e:61:02:aa:5f:9f:9b:cd:51:5c:f5:
b0:59:0b:5f:1f:bf:f3:e5:bb:4d:42:56:d3:ce:7e:
a6:8f:c9:0f:86:22:e1:71:d2:f9:9e:7a:17:9a:03:
78:c9:b4:8d:bd:77:5f:2b:66:c4:50:2b:53:0d:79:
a6:b9:5f:21:1d:89:59:24:b8:c1:32:a6:d6:67:31:
fe:89:d0:97:63:2e:93:15:cc:a1:c4:9e:1d:4b:e8:
d5:2b:75:10:63:69:44:11:82:c7:60:6d:b2:95:b3:
fb:6d:f2:dc:e7:99:13:b5:87:22:ff:8a:27:10:e8:
52:c8:b3:18:51:80:14:ce:d9:bc:61:a9:8a:1b:63:
e8:70:c7:ff:bd:ac:eb:8d:c7:6c:05:b6:6c:31:73:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:D8:BA:46:F9:C0:DC:4F:A5:57:41:9D:49:51:D4:75:B2:AB:53
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:73:36:59:77:cb:e2:0a:06:5e:30:44:d9:4d:73:08:69:68:
4e:18:86:f4:1b:33:d1:65:d7:41:e9:7c:70:f5:61:7c:be:99:
dd:74:6e:98:ee:39:46:89:72:7a:03:bd:5a:01:aa:78:bd:1d:
a3:8c:52:4f:23:79:c2:30:bb:b0:60:36:dc:0e:39:04:03:cd:
04:81:9c:dc:6a:47:70:18:59:7a:53:1a:34:f5:14:93:76:3a:
45:f4:29:fb:0c:31:a6:a9:1c:4e:a5:34:d5:41:76:67:f9:c8:
f5:1e:dd:7a:fd:4a:4b:73:56:a2:f5:df:ac:90:38:e4:bb:7e:
63:7d:4c:3b:e3:49:fa:dc:61:92:5c:68:49:ab:9b:2e:fa:34:
ac:b3:ea:fe:c8:60:0a:b3:3f:28:d8:bd:21:c1:09:a6:b7:7a:
e6:65:34:11:49:34:41:f9:38:66:4c:c6:ed:7b:7e:5e:30:c1:
9a:4d:ad:35:f9:9c:5a:d3:b0:67:d0:4d:a7:65:b7:d2:4a:11:
99:89:72:67:77:26:47:52:d2:84:ba:a9:06:13:90:1e:c8:ff:
31:42:5d:d6:01:0d:3b:f0:dc:1a:1b:57:cd:f4:ad:ca:27:a1:
b1:31:aa:5c:5c:29:33:d9:25:54:b9:60:c7:ae:21:80:ec:24:
29:40:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:05 2026 by rpki-client