Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: kE92NUx5neo/HAPGX/dIvmfNdbmy3MrA+00W779selM=
Subject key identifier: 08:CB:FE:AD:1C:E1:D2:F0:6F:95:6F:B3:B2:C6:6F:4C:40:6A:2D:21
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019CE6DB05F80901F2CB1D2F24F6354DDF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 11:00:39 +0000
Manifest this update: Fri 13 Mar 2026 11:00:39 +0000
Manifest next update: Sat 14 Mar 2026 11:00:39 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: oau+oV+ZvbkWfyyhSlRHh2cqeJou9+TCPIK7H/s/1vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:05:f8:09:01:f2:cb:1d:2f:24:f6:35:4d:df:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Mar 13 11:00:39 2026 GMT
Not After : Mar 14 11:00:39 2026 GMT
Subject: CN=08cbfead1ce1d2f06f956fb3b2c66f4c406a2d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:5c:82:d8:27:e6:ea:88:66:19:ef:3f:06:
b9:e2:7d:12:20:f8:f2:b3:3c:6f:47:e7:69:26:c5:
a4:3e:5f:68:08:6f:34:2d:1d:b0:2b:b4:ee:9c:f8:
5d:c9:78:9d:ec:99:26:65:52:d0:8f:12:f4:15:b6:
e0:59:46:5d:25:44:b2:9f:dc:de:5b:d9:78:b2:8e:
b0:dc:30:5d:c0:76:b7:f1:16:76:f8:f6:4d:b1:db:
05:5e:15:c9:fc:ba:6f:85:fa:c1:1e:39:48:5f:eb:
69:ef:d9:c5:48:d4:74:c5:f1:1e:99:d8:77:c0:95:
96:9b:bd:60:1d:53:e2:6b:1b:e1:e0:de:1d:b4:ea:
8a:fb:60:50:b4:ce:3d:b2:9d:0b:86:1f:5e:bc:c3:
43:b0:c4:38:2d:95:74:27:2a:a3:9b:01:9f:1c:40:
0d:f5:2b:7c:e8:80:aa:39:54:26:b6:8a:b3:08:2e:
ce:a5:d2:cb:44:eb:06:9d:af:67:1d:e4:5f:0a:64:
7e:34:ac:ed:45:7b:23:79:4f:af:33:08:28:72:a0:
e9:86:65:81:05:30:c2:67:81:92:74:a3:ca:28:cd:
66:80:20:ef:b4:e9:75:ab:43:ec:a5:5a:bd:82:db:
7a:ef:98:27:d0:3d:37:9e:03:35:76:05:72:8b:4e:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:FE:AD:1C:E1:D2:F0:6F:95:6F:B3:B2:C6:6F:4C:40:6A:2D:21
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:84:3d:df:c6:c5:54:c3:ee:9d:aa:c4:8f:24:27:31:9d:8b:
44:1e:94:0c:c8:94:69:99:da:45:c3:94:35:ba:bb:df:14:60:
68:8a:ec:35:4b:63:f8:d4:15:3e:56:f3:a3:22:99:f3:90:4b:
c2:1c:cd:d7:ff:90:2f:b2:bc:17:0c:cd:76:2b:9e:6b:a6:a5:
29:64:57:1e:d8:fa:6b:d5:73:93:24:d1:86:38:81:f3:3b:05:
44:de:57:6f:3e:d7:a1:c4:6a:8b:11:5f:4c:44:29:52:2e:97:
d7:6f:a0:d2:c8:38:8d:f2:b0:72:55:34:7a:dd:b0:ce:0e:06:
0d:c2:d0:c7:5d:41:28:34:3e:19:9b:55:53:f6:f0:aa:3d:6f:
7f:4a:92:89:74:3a:c2:5d:ec:41:43:96:b0:61:64:ee:5f:8e:
01:69:fb:43:b7:96:f2:bb:06:23:d5:c8:4c:71:74:02:fa:7d:
3f:6b:9d:80:f7:13:72:d8:3b:db:30:ba:37:b1:70:28:10:50:
73:fe:6d:b7:a3:64:1b:27:e4:67:04:d8:b8:19:60:33:b3:6d:
b8:af:2c:60:ad:f9:76:e1:de:dd:3f:74:28:b6:af:04:03:38:
a5:08:50:31:e3:21:90:80:d4:05:5a:97:92:d4:81:6c:6f:d2:
a0:9b:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:59 2026 by rpki-client