Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: ZIsFxzZtUyEyJD1r9rtXiEO/8xEX6JZBD62sCSBQtE4=
Subject key identifier: 8A:27:D7:FC:D9:B6:25:98:B8:A5:D9:17:37:13:CE:7D:80:56:BB:FB
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019CB27FFC37C5975840E7EE9E3E10021563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1487
Signing time: Tue 03 Mar 2026 07:00:57 +0000
Manifest this update: Tue 03 Mar 2026 07:00:57 +0000
Manifest next update: Wed 04 Mar 2026 07:00:57 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: uD2Wnwh8z9KYaE0BCv/pV2OKFKZBAyenMyuOpllktTM=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:7f:fc:37:c5:97:58:40:e7:ee:9e:3e:10:02:15:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Mar 3 07:00:57 2026 GMT
Not After : Mar 4 07:00:57 2026 GMT
Subject: CN=8a27d7fcd9b62598b8a5d9173713ce7d8056bbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:1f:3d:a3:b8:5a:ac:50:d0:a1:35:5d:ab:
81:7d:2f:bd:fe:19:2d:7f:34:2c:75:1f:1b:fc:83:
22:8c:f0:0d:76:e8:83:2b:31:43:14:95:14:b3:84:
8c:4d:c2:35:90:ae:d7:68:28:5d:25:09:1f:99:6f:
28:28:d2:6a:ef:3b:94:51:61:66:60:f7:a8:b9:ee:
68:73:4c:cd:43:74:e1:5e:d8:95:a1:cf:59:6a:5d:
be:c3:78:fd:bf:a5:cb:81:a1:5c:94:ff:0f:30:d4:
43:c5:5c:58:c8:a5:d6:75:f4:f8:46:59:1f:e0:36:
b7:84:01:98:02:f2:6c:c5:65:13:ef:da:51:6c:d4:
7c:5a:17:2f:e5:00:c4:6b:06:2d:46:61:25:d1:b5:
cb:0c:5f:97:99:d7:66:a7:ca:9d:cf:a3:a1:60:4c:
52:8c:47:40:f6:26:3e:95:ac:b6:68:95:35:ee:47:
85:f1:ed:3c:b1:b5:c7:3c:61:2d:a8:a0:67:49:7b:
33:50:4f:e9:f9:9d:f8:f8:c0:4e:9d:fb:3f:f9:3a:
b1:bf:77:a7:d9:6f:a4:f9:bb:5f:4e:20:6a:b5:8c:
49:89:b3:4e:ee:81:ce:0f:26:9f:ac:e1:a5:2e:a1:
3e:ee:33:22:52:05:1b:9a:7e:b3:21:04:27:cc:b9:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:D7:FC:D9:B6:25:98:B8:A5:D9:17:37:13:CE:7D:80:56:BB:FB
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:2d:67:f9:8c:6a:49:d7:7e:36:c8:c1:b8:fe:09:a9:eb:
ee:eb:6f:0f:5c:33:c2:cc:4b:22:fe:6c:cf:99:65:ba:9c:70:
fb:f6:82:16:70:fb:78:1f:60:f0:7d:f4:c4:1a:6d:ff:6e:be:
a1:a1:e2:59:ac:93:5f:fa:65:3e:59:74:f4:29:5a:79:da:5f:
82:19:d3:55:dc:8e:c8:bb:29:65:40:21:2e:fc:23:23:91:f6:
b2:f1:95:3e:d0:a9:e8:b4:fe:94:02:60:74:f1:90:46:0b:0d:
91:bb:0e:81:1b:bd:e9:cd:65:74:59:a3:bd:48:52:b8:b1:f7:
21:7b:b0:03:4a:51:15:2d:1a:eb:b7:d3:38:de:3a:8c:1a:62:
3c:9b:c0:48:a1:fd:89:6d:5d:83:98:ce:71:88:9b:5f:e5:da:
9c:29:8d:85:b7:40:96:a4:d4:03:fd:01:3f:8a:65:46:70:e1:
44:a9:ee:f2:0d:77:f9:d4:2c:68:46:56:14:32:17:3c:57:1d:
ed:99:ca:2a:c9:ae:29:4c:6a:6b:86:ec:55:5b:b7:d9:3a:60:
4e:01:37:be:5d:aa:b5:8b:71:fc:6e:fa:05:39:ab:d6:be:5f:
de:23:b6:1c:52:89:ae:7c:ff:78:95:f7:12:8c:fe:2a:15:af:
b5:1a:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:55:45 2026 by rpki-client