Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: l9C9cw8z3Y+t7mSCm27DZC1AAmt24XB5gv8smCKNJdk=
Subject key identifier: 24:B7:E2:8B:AA:99:F6:BB:B6:E4:B8:36:7F:65:51:3C:16:BC:80:EE
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019E4EEAB07E958003C5720D180CB5460D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1920
Signing time: Fri 22 May 2026 09:01:03 +0000
Manifest this update: Fri 22 May 2026 09:01:03 +0000
Manifest next update: Sat 23 May 2026 09:01:03 +0000
Files and hashes: 1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
3: lL17tuBDoLvw-pd1vpQwvUHTCM8.roa (hash: minPejjWJuMMJn1mp0vvXo5sojqAMoVldEghqvBYb48=)
4: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: 2YPwNOUiOI4ydOilHBpnoYnlF8LLmCEwfV0rubANNys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:b0:7e:95:80:03:c5:72:0d:18:0c:b5:46:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: May 22 09:01:03 2026 GMT
Not After : May 23 09:01:03 2026 GMT
Subject: CN=24b7e28baa99f6bbb6e4b8367f65513c16bc80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:5b:34:ce:c3:ca:f2:0f:98:55:f5:60:27:
76:bf:c0:45:62:5b:68:81:5a:27:aa:94:04:1a:29:
b1:15:57:dc:d1:32:18:2f:76:ce:18:3c:79:34:bb:
10:56:89:33:5f:97:a9:f7:76:70:17:3b:cb:e7:fd:
3e:0b:67:a0:28:c0:db:2f:ce:c7:64:08:2a:c0:55:
b4:eb:09:e4:dc:71:7b:3f:fc:bd:be:68:c2:9d:37:
f0:ea:c3:cc:50:c4:0c:c4:6d:5b:3d:72:33:a9:b2:
b6:39:21:fc:e3:0b:0e:b0:0f:13:d3:f8:de:a0:02:
ea:80:a5:93:96:55:24:c9:bb:8a:d2:5e:49:dc:1f:
71:58:6f:66:be:81:81:a6:25:18:72:d9:aa:76:f7:
8b:c5:21:1c:0a:b3:6c:94:13:be:96:f5:82:62:3a:
61:5f:55:76:75:e3:d4:8e:3c:44:0c:a8:da:e1:f1:
bd:69:fb:ca:19:cb:33:31:6f:c2:68:59:21:52:71:
a2:99:2a:22:08:4f:71:d4:97:bc:dc:f1:9d:26:d9:
fd:57:eb:eb:ce:c5:81:fc:54:43:4e:9d:b7:04:ae:
8f:fc:df:7c:47:fe:20:ff:24:e2:6a:e8:cf:9c:54:
d8:83:45:e7:46:31:52:02:ce:06:86:5c:04:8a:cf:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:E2:8B:AA:99:F6:BB:B6:E4:B8:36:7F:65:51:3C:16:BC:80:EE
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:21:b3:32:f0:3a:a9:44:86:df:8e:24:58:9f:c4:bd:ab:
05:11:b8:79:2d:3f:04:aa:fa:15:4c:60:4a:72:d5:5d:7d:65:
0a:bd:29:a8:f8:b2:de:bc:b1:54:a6:60:62:d7:ef:75:ad:31:
c6:74:24:fc:06:61:48:b2:5d:fe:ae:f0:41:be:37:47:71:b7:
b3:a4:41:df:ed:ba:f0:b5:1c:22:cf:97:97:8f:0b:d0:4e:8f:
68:d9:6c:75:a1:7c:9d:78:54:3c:9d:2f:ba:c3:6c:46:8b:cf:
6b:c1:44:26:59:83:5f:40:05:07:57:00:d0:e1:38:af:7a:4a:
28:2c:2c:44:4c:61:db:21:9c:dd:e0:84:8b:5b:bd:b4:0b:0e:
00:6f:ea:63:e7:72:60:4c:15:cf:9a:87:fb:ee:b6:8b:f5:a7:
84:51:e4:8f:69:c1:5f:5d:c4:82:92:ff:1e:73:b6:99:21:11:
36:51:09:98:f3:41:a6:57:87:b7:86:a0:bc:ad:16:8f:ae:8d:
42:98:e1:0a:5f:cb:f6:a1:c4:6c:71:86:3a:ac:a8:d0:79:61:
50:80:7c:50:b7:67:d7:f2:2b:fd:f6:d3:d1:e1:2f:f2:84:78:
de:74:28:f7:18:4f:b0:f3:6b:03:4d:01:be:b7:e8:9e:68:03:
34:c6:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:25 2026 by rpki-client