Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: ueRj8gMtqRSd/n4NMg0qSVFjl1PpfpUVhy62aVn5/cw=
Subject key identifier: 7C:4F:47:11:65:13:1F:C8:DB:54:6D:D5:6D:CE:26:BA:94:C0:14:D3
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 019E1BD8F585973B0C86C290149733D19085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: A2
Signing time: Tue 12 May 2026 11:01:03 +0000
Manifest this update: Tue 12 May 2026 11:01:03 +0000
Manifest next update: Wed 13 May 2026 11:01:03 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: WLZwejPiTsGj3L9WWmyBlMUa03Q.asa (hash: NvnlIzfI7uEtt14QTA2ioVybslPnmkhw44zqG8hYsrI=)
3: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: +ZN05KMLkhLT6Z1YcZlr9+8EPuoJpGLdYIp4IzYweUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f5:85:97:3b:0c:86:c2:90:14:97:33:d1:90:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: May 12 11:01:03 2026 GMT
Not After : May 13 11:01:03 2026 GMT
Subject: CN=7c4f471165131fc8db546dd56dce26ba94c014d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:68:f2:81:01:b1:75:56:61:d6:b8:34:f4:
7a:ec:7a:a8:41:1c:6b:5a:4d:d9:b0:f7:41:25:5e:
84:f2:91:1c:41:b7:f9:63:93:41:a7:6d:f4:8f:9e:
b3:74:fb:cb:a3:bd:e6:43:d1:08:1a:a2:b5:cf:c7:
14:c3:c8:c4:0b:a2:cc:65:c8:2e:b9:52:1c:21:f3:
2f:b6:39:e1:79:14:dd:04:e3:c0:de:27:b1:de:61:
cc:6d:5a:5a:7f:2d:5f:16:a8:ae:51:23:7b:90:a3:
06:67:37:ec:e6:29:47:4f:de:25:2d:2a:a2:48:50:
ce:aa:4d:75:60:9e:dd:db:b0:7d:69:bb:fe:86:93:
14:db:dc:91:57:41:e5:d8:3d:f2:e9:ce:2a:40:b8:
4a:94:6a:05:3f:5b:5b:79:3f:25:69:c9:61:3d:b7:
a5:b3:bf:05:2c:ff:6d:72:01:79:c7:82:b4:95:4d:
72:44:22:74:0e:31:b3:1c:1a:e9:e2:e4:4d:31:11:
79:90:3c:e7:7a:8b:31:64:2a:fb:e0:f6:1a:06:87:
02:56:60:fe:2d:0e:4e:e2:f7:1b:74:0c:a9:3d:d0:
82:4f:6a:ab:e9:b5:cc:80:e5:34:a9:8c:be:d0:53:
39:83:e3:5a:48:39:d0:73:2a:22:f5:02:81:7e:0e:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:47:11:65:13:1F:C8:DB:54:6D:D5:6D:CE:26:BA:94:C0:14:D3
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:46:86:28:05:a2:65:3e:93:70:4e:9f:eb:5b:7f:74:fa:
c3:3f:1b:3d:4d:e4:58:23:08:07:8f:3e:b2:9f:b3:7a:f0:cb:
77:02:4b:5b:44:a5:d4:69:7c:5c:2c:56:07:a8:44:21:9c:15:
10:40:7f:40:5d:bf:d3:39:e8:5d:ff:7a:17:cd:e8:f4:3f:66:
45:a5:64:ee:12:be:89:29:ff:0b:1c:7b:d1:81:1c:c0:bc:52:
ce:c0:20:48:86:cf:63:49:c3:d1:4e:df:f8:50:64:41:81:93:
2c:c3:3b:4c:8d:2a:d2:67:c2:8a:2f:a3:e8:94:6d:e2:5e:03:
1f:29:5e:ea:6c:34:b6:d1:28:4d:fb:b1:0d:ba:99:4b:39:7b:
f8:d8:db:4a:e8:42:17:6f:68:c0:46:95:b3:00:60:c5:a6:b5:
f5:f8:83:f1:8e:d8:c0:c5:ff:1b:2e:48:ac:2f:38:7d:db:20:
8a:e7:35:43:b4:1a:39:21:9d:9d:63:74:ea:f5:7a:14:59:e1:
84:b8:91:94:8d:77:55:d4:9c:15:68:3f:15:0f:b5:c0:5f:7e:
57:f6:4e:f1:e7:bc:a0:31:03:c9:e8:27:a6:25:29:2d:c7:40:
68:ae:f2:3b:f6:61:76:b2:f9:46:e8:0f:0c:51:9e:04:c6:89:
cc:0f:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:16 2026 by rpki-client