Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: kzPI22ez9AqkojtJ3Aw72mdaXVx7vccLJ05n58sRoj8=
Subject key identifier: 3E:BC:22:52:1A:86:AC:80:3C:0F:0F:6A:E2:38:C6:49:FA:79:19:56
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 01A010070239C63EB91D29A8933A3D54723A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: 01A5
Signing time: Mon 17 Aug 2026 14:01:29 +0000
Manifest this update: Mon 17 Aug 2026 14:01:29 +0000
Manifest next update: Tue 18 Aug 2026 14:01:29 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: WLZwejPiTsGj3L9WWmyBlMUa03Q.asa (hash: NvnlIzfI7uEtt14QTA2ioVybslPnmkhw44zqG8hYsrI=)
3: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: Bcs9pEhpKg99NS3hosRq8lumSEChkEzyjU5PRxdZdy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:07:02:39:c6:3e:b9:1d:29:a8:93:3a:3d:54:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: Aug 17 14:01:29 2026 GMT
Not After : Aug 18 14:01:29 2026 GMT
Subject: CN=3ebc22521a86ac803c0f0f6ae238c649fa791956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:73:fd:bf:c5:ff:9a:74:0c:c3:ae:04:37:
e3:c0:82:45:80:41:6b:af:99:11:0a:36:18:98:f5:
ba:1c:14:20:27:4c:18:e4:10:58:9d:0a:08:23:a6:
bc:2e:09:e7:56:93:fb:ba:30:84:89:2e:0d:57:71:
29:4b:81:97:90:95:29:6c:92:7e:c5:d5:5d:c1:e1:
2f:ea:5a:45:ff:bf:43:aa:5d:21:4e:17:63:23:45:
fc:77:bb:e4:68:3e:c9:3e:18:b2:37:60:31:0d:e0:
b6:08:48:e6:b5:87:d5:aa:fc:ab:17:b1:a7:4d:80:
3c:9a:cf:e0:30:d6:42:fe:2e:c6:bd:07:3c:ab:ec:
b5:e3:52:e8:69:50:b5:e4:69:2e:36:df:b6:6e:a6:
56:a2:19:cf:59:c6:63:d4:71:88:76:88:f5:b9:18:
5c:43:af:52:1d:17:e3:26:ed:3d:6d:88:ac:77:35:
44:29:b0:b8:b7:d6:c1:11:6d:4c:fa:45:42:c7:39:
2a:02:c1:60:46:4c:cb:c2:31:a3:62:00:2b:38:61:
8c:f2:39:fd:3d:f3:69:a0:83:a8:95:8e:b4:14:5f:
44:e7:44:f3:55:50:05:c5:b9:01:8d:9a:f8:b9:48:
c2:6c:4b:35:1f:26:92:11:bf:d4:34:32:64:74:29:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:22:52:1A:86:AC:80:3C:0F:0F:6A:E2:38:C6:49:FA:79:19:56
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f9:11:d6:ae:a8:40:56:75:8b:2c:0d:72:24:58:e9:a5:db:
52:69:4c:51:07:a5:50:7c:d7:d9:b7:a0:1e:cf:0d:ba:48:3f:
b8:db:d4:d4:bb:0a:2f:ab:e1:fa:30:a7:10:14:5b:0c:50:11:
6b:d1:55:d9:ab:0c:dc:9a:8d:d2:6a:55:3e:0d:c0:37:30:8c:
30:55:3d:f6:c5:65:33:a0:fb:61:18:9b:24:7c:8f:b0:5a:b7:
93:ed:ec:fa:cd:2c:19:0c:88:e9:26:5b:0b:05:52:96:71:6f:
49:b4:64:79:98:43:12:38:59:65:3d:55:08:34:de:5d:f6:90:
78:e1:68:6a:7e:f7:d7:c5:a1:f1:f0:7c:04:21:68:a4:8f:ed:
7c:0d:6a:be:e7:31:e1:f3:28:84:09:4d:ad:52:e2:46:1a:7c:
33:47:cd:ec:78:b5:24:17:3d:2c:27:d0:45:e9:f3:ab:80:2f:
5a:46:26:ad:4a:b9:cb:fe:7b:de:0b:6c:0e:e3:33:d7:b3:83:
e9:cf:d9:78:fc:5c:e0:94:aa:7d:62:97:e1:65:a3:cf:7b:4a:
d7:e6:e0:01:d0:f1:fd:72:d0:15:f5:18:52:88:7a:e4:4b:fa:
a5:de:5a:87:9b:2f:5c:18:6a:e2:86:b4:1b:51:b1:51:81:91:
bb:15:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:15:34 2026 by rpki-client