Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: PcUrRifnl+/UpHWXtvaEbp8S1KFmVXukiOJmHj7TFRo=
Subject key identifier: 80:44:45:FF:8B:8B:58:90:19:9E:6B:8D:F2:AA:55:6F:F1:50:8A:79
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 019D9C2D661C35D934A71326C4C8AB69494B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1500
Signing time: Fri 17 Apr 2026 16:01:54 +0000
Manifest this update: Fri 17 Apr 2026 16:01:54 +0000
Manifest next update: Sat 18 Apr 2026 16:01:54 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: CK5E9ws9Ciy7cSYoOmnEvgMUbSe8036USF47edo0LCA=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:66:1c:35:d9:34:a7:13:26:c4:c8:ab:69:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Apr 17 16:01:54 2026 GMT
Not After : Apr 18 16:01:54 2026 GMT
Subject: CN=804445ff8b8b5890199e6b8df2aa556ff1508a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:45:16:ca:4c:0d:dc:95:f8:3c:32:b3:0a:
b9:a9:18:ff:5b:e4:cc:18:f8:16:ec:ad:06:3a:ce:
a8:1b:23:b5:d8:97:ac:c0:d3:d4:c1:e4:17:c9:ef:
82:b8:a1:b8:c2:5e:f3:20:a3:0a:9a:71:70:c9:40:
8e:24:87:db:53:5a:c6:d2:e6:46:ec:20:54:2c:fe:
05:2a:40:05:00:3f:3d:28:52:9a:40:77:08:d4:e5:
23:fe:1c:88:d7:eb:ac:25:09:9d:bf:9d:b6:ea:b9:
7e:8e:e8:e0:6e:63:df:8e:fc:2a:59:bf:b3:b1:d2:
ec:83:40:82:9d:01:61:f8:36:6b:7c:dc:6d:ee:69:
ce:8a:45:01:ce:01:91:04:04:6d:7e:2b:a1:a2:e6:
02:1b:1f:3b:15:22:b1:70:86:12:38:df:23:af:08:
a3:ed:a4:10:72:ae:e2:ce:e4:71:97:74:08:a0:ac:
fa:07:91:c2:2f:df:e1:81:19:5b:e7:fb:68:00:67:
77:4b:92:2e:3a:92:77:b6:74:8b:11:7b:e8:e4:40:
0a:ae:1d:7e:8a:d5:31:0f:89:f2:d1:3d:7b:b9:03:
3e:d0:d7:4e:30:fb:79:ab:23:2d:dc:1c:68:91:f9:
83:80:86:58:46:88:45:ec:74:f3:3c:a9:59:93:5a:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:44:45:FF:8B:8B:58:90:19:9E:6B:8D:F2:AA:55:6F:F1:50:8A:79
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:59:46:37:85:8a:02:2c:f6:c6:ce:ab:39:93:6a:b9:54:99:
03:cd:0f:4c:1d:4a:48:de:5e:9a:16:d7:48:fe:b3:8c:c2:70:
ac:44:e3:4f:06:1a:d4:43:0d:20:18:bf:e9:7c:1b:99:87:e2:
9a:38:0b:45:3c:14:d9:91:63:71:55:38:3a:95:3b:10:8f:44:
d4:4c:8c:b6:56:c3:2c:22:44:55:bf:49:5e:54:57:2e:4f:6e:
82:52:f2:0d:b9:5a:9a:1b:ba:8b:a7:94:84:c1:8c:36:55:b8:
1e:27:5e:c0:9a:fb:0b:8b:8f:d3:8e:b6:3d:b0:a2:72:87:e8:
09:38:16:5b:e3:6e:09:4a:93:0b:7b:c5:37:45:87:ed:e7:b3:
f3:2f:11:23:f3:ef:e2:d2:25:9c:a4:d7:c2:a5:18:c9:ce:d7:
37:90:f5:ec:0d:df:8f:3d:c6:82:11:8e:bf:1a:3f:01:3e:80:
7e:89:4a:cd:04:9f:b3:14:ed:52:04:80:d6:c4:1a:3f:4c:6d:
d5:f4:17:10:19:98:f7:f0:a9:36:b3:fd:f3:9a:e9:1b:7b:2b:
c6:a0:35:03:2d:32:df:07:9d:cb:70:76:3c:be:42:c8:c2:24:
6d:fa:a1:38:de:4d:e2:37:c7:27:51:c4:fb:2d:3f:92:8b:48:
bd:1f:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:18 2026 by rpki-client