Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: 4nHpKPyIDGRRj4Ybd+SZURmh+ZAWdbEM+22tPzcybWQ=
Subject key identifier: 1B:F7:C5:E9:1F:9E:8F:60:78:D4:F1:FD:E3:B1:49:4A:69:CB:C5:C7
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019E89B5A0BA52E4340D3CBFB86A83E4416A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 157B
Signing time: Tue 02 Jun 2026 19:00:42 +0000
Manifest this update: Tue 02 Jun 2026 19:00:42 +0000
Manifest next update: Wed 03 Jun 2026 19:00:42 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: kYSf+qRZ+zTnhh1XXRCTFCSxyCT7E6+RQ5laadSgmKo=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:b5:a0:ba:52:e4:34:0d:3c:bf:b8:6a:83:e4:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jun 2 19:00:42 2026 GMT
Not After : Jun 3 19:00:42 2026 GMT
Subject: CN=1bf7c5e91f9e8f6078d4f1fde3b1494a69cbc5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:2c:fe:60:81:9f:e0:7c:a8:5f:70:f6:c9:
30:52:63:c9:10:9b:c2:26:06:a7:0d:63:cd:7e:f4:
b7:37:a9:d4:bb:23:9d:cc:01:c0:9d:a9:81:4e:1d:
8d:1e:66:3c:80:70:86:3e:2c:d6:80:22:6f:43:4a:
27:43:61:9f:4d:d5:e2:fa:6b:5d:15:bd:31:3c:4a:
ef:6d:c3:b5:4c:b6:19:c9:8f:5f:2c:f8:3c:9c:cb:
02:7a:09:04:73:e9:30:d9:32:33:e0:da:17:ed:85:
95:c6:c3:df:83:9f:45:4e:0f:33:b8:5a:e2:df:6e:
83:81:4e:99:92:2b:dd:0f:eb:67:b2:78:80:0f:7e:
7d:8c:a2:a7:ee:3c:42:8e:02:cd:89:d9:70:bf:2c:
da:03:a6:03:95:57:bd:16:49:b0:a0:84:71:f5:fe:
f4:20:71:bb:db:f8:f9:21:c6:da:d9:d7:07:2f:c6:
cf:22:69:00:7d:d5:54:f0:39:81:b4:c1:0c:59:da:
f5:be:d2:a1:c1:54:fc:8b:51:01:8d:ce:b3:21:80:
05:0c:cd:a3:8b:83:f5:f2:fc:d1:3c:c8:bb:5e:08:
35:2b:2c:bb:e1:95:95:b0:98:a7:46:90:a5:60:ef:
0f:3d:95:6a:d0:cc:39:ea:90:2f:47:c7:9f:03:be:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:C5:E9:1F:9E:8F:60:78:D4:F1:FD:E3:B1:49:4A:69:CB:C5:C7
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:35:5d:a4:ef:5d:6b:ab:ba:ec:ef:8c:86:c8:f1:c0:af:67:
df:b7:d4:84:74:7b:58:5e:eb:53:45:07:fe:d4:37:03:e2:5b:
26:b0:db:3c:cd:39:a4:02:86:01:c5:06:00:12:c3:d5:b1:39:
9e:63:1b:b5:84:ad:07:b7:e8:cd:91:9e:a7:21:33:12:ba:ef:
8c:a4:39:85:8b:3d:09:2f:9e:5b:63:95:84:55:d9:76:ea:e3:
a0:4a:9d:11:e5:5d:d5:59:75:37:33:dd:78:b9:7d:9a:a4:9f:
0c:d3:e3:ad:7a:71:30:11:f8:dd:5d:dc:6c:30:17:ba:f1:92:
72:6c:de:be:ac:1b:89:e3:eb:38:ca:4f:9e:bb:30:ab:ac:2b:
c2:f6:f4:00:6a:bb:24:12:51:63:29:1e:67:12:49:85:bb:42:
55:fd:bb:5f:40:4f:34:15:e5:ed:d2:cd:cc:d1:7b:5a:31:d1:
ff:d1:ca:7c:92:8b:94:92:9b:86:28:98:88:8b:87:87:78:f4:
fc:cb:dd:24:7d:89:9e:7b:ba:3e:2a:1a:5d:db:d8:f6:43:f1:
56:62:68:50:61:e5:84:86:e3:2f:4e:4f:90:d8:ab:6b:23:73:
1b:00:33:84:d9:44:0f:63:5f:38:18:46:1e:7e:ac:2c:9a:d0:
c1:c8:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:28 2026 by rpki-client