Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: nsJcRxQ2sYLTLEY8FInzYnG7Vbz41//rL9Bo2sX8v/Y=
Subject key identifier: 9B:E4:82:A5:3C:CF:A4:A2:51:4B:39:E9:BB:2D:91:F2:E5:2E:B4:F6
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019D37C105D58DD95ADE583F64FEEC15F85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: RZCw3P28USdB1fo5IYY9LwzrEvy+3affuvW8a3fNBuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:05:d5:8d:d9:5a:de:58:3f:64:fe:ec:15:f8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=9be482a53ccfa4a2514b39e9bb2d91f2e52eb4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:e8:d7:9e:7b:09:2e:45:95:71:e4:5e:9e:
56:c3:63:17:b7:3d:62:9d:e8:40:6d:ca:40:d1:33:
0a:75:e2:1e:d7:f6:da:63:17:ce:b4:f2:71:bd:db:
fd:c7:1f:52:01:b2:a8:9f:9c:43:b4:51:f2:40:8c:
2b:16:f5:f2:c0:40:4f:0e:18:62:36:50:96:b9:12:
d5:44:29:38:99:d4:61:38:9b:d8:01:da:ba:56:c8:
1c:1c:28:32:81:9e:ed:8c:44:44:b1:87:e1:65:bf:
13:ae:9e:67:c7:cf:f7:7b:d1:13:2f:e4:49:f3:81:
c4:de:ff:7e:57:9f:5c:a8:88:13:ed:29:27:e9:38:
2d:69:46:6c:3a:16:f4:07:22:af:db:91:67:93:97:
f4:28:a8:95:03:99:55:21:98:e8:15:26:85:94:aa:
e5:47:03:ae:1e:a6:85:17:58:5e:3b:53:a9:5f:d5:
29:97:a0:50:27:5e:ff:a1:79:e6:21:a6:cd:00:1a:
80:38:de:bc:99:1e:7a:56:63:7e:10:2d:0d:3b:ea:
78:ba:40:4b:d0:05:86:c0:c2:95:19:c2:3d:7a:fb:
7f:20:49:58:35:6d:3b:62:7e:20:ed:7c:8e:d2:c3:
50:c2:9e:4b:52:35:00:12:d5:2b:9f:12:13:48:35:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:82:A5:3C:CF:A4:A2:51:4B:39:E9:BB:2D:91:F2:E5:2E:B4:F6
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d8:62:a9:b6:a9:c5:a8:28:a3:61:fd:0b:08:52:2c:e1:52:
d2:29:c4:4a:5f:3d:d6:4f:8a:bb:8a:99:cc:c8:a1:8e:ad:1e:
57:ad:50:10:8f:5b:bb:19:72:15:d2:96:fa:28:23:13:05:00:
e3:13:fe:21:62:2f:44:16:5d:db:b7:7a:19:c2:f3:ef:18:67:
02:68:7c:9d:9d:06:94:db:93:67:bb:7d:4e:4c:c6:da:bc:c8:
12:f5:7b:36:99:e6:e3:48:5d:3c:4f:ed:b6:df:11:8e:02:c0:
50:5c:33:2f:3a:78:cb:13:24:ec:c6:5a:b6:7e:cf:49:da:0b:
5b:8b:3d:9d:a6:c3:36:6e:44:0b:09:08:37:15:d9:d9:34:14:
92:b6:83:db:21:42:3e:be:d9:25:66:e4:57:48:d1:c6:8a:da:
70:30:a2:15:f5:5e:52:d9:29:b4:c8:db:ab:53:8d:88:7e:b4:
59:57:b4:a5:05:90:b0:2f:6a:2e:f0:24:28:3c:26:c4:e1:e6:
d5:6b:2e:ec:df:e7:f2:6f:64:d0:ba:3d:74:1a:4e:09:e8:ea:
dd:63:35:24:ea:3f:cf:8a:43:7c:aa:1f:8e:61:c2:e2:8c:97:
ce:23:ee:eb:57:c6:c6:64:ab:0e:de:f6:79:c1:0e:92:66:f0:
a5:9b:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:45 2026 by rpki-client