Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: kLI9g9PVYHW5YRis4xiYx+vX2GdNqLjHSjYmfFTP5n8=
Subject key identifier: 76:C0:82:9E:B8:AB:68:BA:F4:C2:02:31:23:6C:88:5C:50:80:F5:9C
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 019D38D2B5FD2863BBF1EA06BC2B4FA5C5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: HpnTbfS7S6BAaVqaUfZX-c0MU08.roa (hash: W27m8UR8xxwgjtT+uRjFRwsVQNdm+D+G6MLGi6nWkCc=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: AKyAVnXm8oTWb92luAkipxMy17mhNoRdfy1OHhS6D5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b5:fd:28:63:bb:f1:ea:06:bc:2b:4f:a5:c5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=76c0829eb8ab68baf4c20231236c885c5080f59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:d2:cd:b8:17:0c:ca:79:ec:d9:27:ec:75:
80:47:ec:19:6c:29:f9:a8:78:a3:05:a1:92:c4:b5:
23:a3:1d:23:83:76:52:75:98:76:7d:21:11:05:25:
bf:f0:b6:62:58:d5:10:6e:e3:32:96:36:9c:fd:cf:
16:4f:6e:21:77:58:c8:43:25:af:fa:cf:f5:d2:ad:
e5:34:8d:42:e9:c9:d4:f5:2f:ae:c2:bd:55:29:dc:
bc:cc:fa:cb:91:77:89:49:6d:8f:3e:77:99:7f:97:
ad:f6:4a:0f:de:d6:d2:7d:88:54:d4:62:3b:f7:3a:
cc:8f:8e:3a:3c:b8:ca:c3:bc:53:31:2a:59:22:c1:
5d:08:4f:2c:92:b3:e6:b0:c9:25:02:9b:7a:be:3c:
ab:aa:9f:78:98:16:67:66:72:87:22:84:fb:a9:1f:
b3:fa:55:c9:cd:58:60:51:d9:4a:b8:84:72:01:e7:
cc:d4:87:fd:32:83:70:0d:33:92:62:5a:d8:b9:36:
1f:50:f8:41:cf:8e:aa:ee:31:12:da:77:cd:33:03:
56:88:ec:d7:06:a5:90:80:42:aa:0b:cf:01:7d:17:
72:7e:81:06:62:89:85:a2:c5:6e:15:05:fb:c1:1f:
98:63:1d:46:3c:26:dc:87:af:fb:69:6a:25:80:87:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:82:9E:B8:AB:68:BA:F4:C2:02:31:23:6C:88:5C:50:80:F5:9C
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6c:d5:33:97:a2:da:a0:1b:c2:15:97:44:3a:96:32:ed:62:
f3:d9:d7:be:de:13:50:e5:08:2e:0e:59:1e:38:e5:84:fb:a2:
cc:7d:e8:7c:ba:fd:8e:53:55:79:7a:e6:20:3b:ba:a4:68:44:
0b:c3:27:0d:78:e3:4d:dd:dd:07:95:ab:50:88:0e:9f:e7:b1:
68:be:3a:7d:07:5d:6e:48:21:7d:82:e7:eb:2c:63:cb:2b:53:
04:88:19:4f:59:38:30:97:17:dc:45:32:4b:a6:f8:b2:2b:3a:
91:d6:ee:c3:29:6c:fc:6d:01:89:c0:65:8a:cd:6f:e8:90:f3:
1f:ad:cf:21:57:66:8d:d0:e1:a1:94:f7:c8:60:06:60:05:42:
40:64:e3:eb:94:52:e1:9f:5c:3a:ac:3f:c3:c9:b5:4e:96:30:
a6:53:ea:e5:1f:cc:55:dd:50:03:e7:97:ea:44:aa:01:35:16:
d4:70:44:50:52:86:b0:07:ed:59:73:4b:60:83:7f:84:8f:b0:
49:9c:bc:25:c6:fb:17:3c:65:7b:35:74:76:dc:24:75:79:2c:
bb:db:92:af:4d:21:0c:cd:7b:0f:28:94:4e:34:aa:f9:1c:1c:
4c:29:75:70:60:d4:6a:ee:cc:42:5b:94:d0:2c:9c:3b:05:da:
42:dd:6a:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rX9KGO78eoGvCtPpcXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw
NzhiOTAwHhcNMjYwMzI5MDkwMDI2WhcNMjYwMzMwMDkwMDI2WjAzMTEwLwYDVQQD
Eyg3NmMwODI5ZWI4YWI2OGJhZjRjMjAyMzEyMzZjODg1YzUwODBmNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRbSzbgXDMp57Nkn7HWAR+wZbCn5
qHijBaGSxLUjox0jg3ZSdZh2fSERBSW/8LZiWNUQbuMyljac/c8WT24hd1jIQyWv
+s/10q3lNI1C6cnU9S+uwr1VKdy8zPrLkXeJSW2PPneZf5et9koP3tbSfYhU1GI7
9zrMj446PLjKw7xTMSpZIsFdCE8skrPmsMklApt6vjyrqp94mBZnZnKHIoT7qR+z
+lXJzVhgUdlKuIRyAefM1If9MoNwDTOSYlrYuTYfUPhBz46q7jES2nfNMwNWiOzX
BqWQgEKqC88BfRdyfoEGYomFosVuFQX7wR+YYx1GPCbch6/7aWolgIeEFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbAgp64q2i69MICMSNsiFxQgPWcMB8GA1UdIwQY
MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt
Mjg0ZjdjOTYyMmI1LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1
LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGzVM5ei
2qAbwhWXRDqWMu1i89nXvt4TUOUILg5ZHjjlhPuizH3ofLr9jlNVeXrmIDu6pGhE
C8MnDXjjTd3dB5WrUIgOn+exaL46fQddbkghfYLn6yxjyytTBIgZT1k4MJcX3EUy
S6b4sis6kdbuwyls/G0BicBlis1v6JDzH63PIVdmjdDhoZT3yGAGYAVCQGTj65RS
4Z9cOqw/w8m1TpYwplPq5R/MVd1QA+eX6kSqATUW1HBEUFKGsAftWXNLYIN/hI+w
SZy8Jcb7FzxlezV0dtwkdXksu9uSr00hDM17DyiUTjSq+RwcTCl1cGDUau7MQluU
0CycOwXaQt1qfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:39 2026 by rpki-client