Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: A5t5643PQazTvEU3Lg8DhI5RpD4LulsJtssF14Nvdto=
Subject key identifier: BE:A3:93:C8:EE:25:B7:C9:D8:B3:C0:48:E1:0A:22:5E:46:EF:23:90
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 01A175149180A7E00CBF58116FB14282E0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 16FE
Signing time: Sun 25 Oct 2026 22:00:44 +0000
Manifest this update: Sun 25 Oct 2026 22:00:44 +0000
Manifest next update: Mon 26 Oct 2026 22:00:44 +0000
Files and hashes: 1: qzd9o-_JiX_l76O5Toy8ycbxuhE.roa (hash: TNX6LTjXXsKrAnEOQqUJfMcNqI7RLl9C9s26ZxP+cXs=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: ZZZicSt1zYT+KcvlwYOpHxtb7tSiWoqpKeqj+80sizI=)
3: sg7jqSCfk6vdfH37pm3TzVlblT0.roa (hash: ZBPGJ9WGvg3FX3KkXrx/GUxbkgnG+QnxoGyWHwFNqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:91:80:a7:e0:0c:bf:58:11:6f:b1:42:82:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Oct 25 22:00:44 2026 GMT
Not After : Oct 26 22:00:44 2026 GMT
Subject: CN=bea393c8ee25b7c9d8b3c048e10a225e46ef2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:4b:55:86:c1:f9:a5:dc:ee:9c:77:11:c9:
3c:aa:d5:d8:3e:15:50:1d:5d:84:63:3d:6a:e0:1e:
9b:b3:28:d4:73:3b:ed:68:e2:26:5b:6a:3e:2d:62:
e3:4b:f7:08:9b:43:44:1d:52:71:e4:8d:79:b5:05:
e5:7e:7c:76:f6:e4:79:ec:82:bd:a5:83:42:4e:cf:
b1:64:e4:37:80:27:32:b9:ad:63:6b:6e:0c:3e:5c:
24:3f:c7:be:7d:3c:cc:ff:01:32:be:d4:28:91:dc:
f3:46:cd:36:82:65:b7:d4:27:8d:24:08:93:47:d2:
96:a7:1a:a7:db:6f:43:05:e2:e9:ef:3e:06:f7:6b:
ce:76:a2:66:c5:53:40:56:b7:fa:c9:97:dd:66:9a:
8b:72:ad:cd:4b:57:32:78:a3:c6:d5:88:84:cc:98:
e6:de:a7:b3:3c:8a:f4:58:aa:7a:8d:c1:bf:c0:c6:
75:c5:c0:f1:93:b9:9d:9e:fb:03:69:97:c8:fa:c2:
8a:97:69:d8:f3:08:cc:a4:f6:ed:e6:73:ea:c3:9e:
75:b7:32:d0:dc:ff:53:6d:cb:89:f5:35:24:f6:7f:
04:d6:82:02:1c:07:27:77:46:67:9a:14:c5:4a:1f:
c3:4d:9e:7c:3e:00:9a:21:09:b0:fe:52:b2:ee:14:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:93:C8:EE:25:B7:C9:D8:B3:C0:48:E1:0A:22:5E:46:EF:23:90
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d5:b9:d7:45:70:29:6d:ff:40:9e:61:9e:f3:02:75:e7:47:
0e:31:f3:a2:77:90:98:2a:b9:85:81:5f:13:97:57:47:ab:52:
ef:57:f7:2e:a5:a5:a2:a8:cc:37:2a:07:22:b1:40:e1:20:6d:
e5:a4:8a:43:3e:d9:a0:de:d1:93:37:22:3f:a1:c2:37:38:c9:
83:2a:7f:e8:8b:a6:f0:e2:96:e3:3a:e8:0d:9e:2c:fe:ba:50:
9e:46:bf:33:17:69:8f:43:1b:cb:2d:86:22:8f:da:48:d7:52:
c1:10:4e:33:df:e5:68:70:99:d7:3e:61:aa:76:61:94:ac:52:
27:cb:78:a0:7e:57:54:7f:d9:f7:a1:58:f3:6f:43:24:a4:b2:
44:d1:e7:50:6a:52:f8:0a:52:fa:5b:68:68:1b:2e:89:ea:8f:
ae:a9:ce:72:c9:3a:34:d0:04:b4:00:4b:78:d7:f1:f0:4c:39:
90:69:52:24:57:67:bc:da:ba:6c:1f:b8:fd:9c:25:fc:2a:13:
34:51:20:84:14:ec:c6:aa:a6:ea:27:f6:2e:bb:67:a6:b8:76:
cd:8b:1b:08:6c:42:3f:33:94:56:a7:d3:76:3d:31:17:1e:d5:
56:1b:6a:63:ea:77:10:de:c4:b9:f8:60:2a:cf:5d:5b:4c:b7:
a8:a8:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:21:51 2026 by rpki-client