Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: XCoVVxv0xz5c29fNFTDFLrxdNFlvrh8WCXrQL/hYggA=
Subject key identifier: 03:A6:EF:EA:3D:EF:90:20:AC:C7:7B:5B:7C:05:A1:68:DC:CB:F2:10
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 019CABD9AB3971E2236ABDE5EC3FECD82161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: HpnTbfS7S6BAaVqaUfZX-c0MU08.roa (hash: W27m8UR8xxwgjtT+uRjFRwsVQNdm+D+G6MLGi6nWkCc=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: 0Elc253y0HujT+p6Nriodl9eAjA+XtRgwAKsyYhrbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ab:39:71:e2:23:6a:bd:e5:ec:3f:ec:d8:21:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=03a6efea3def9020acc77b5b7c05a168dccbf210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:c2:9c:91:fc:90:42:eb:6a:1e:0b:66:cd:
9e:4a:04:6a:c0:f3:8f:25:26:62:aa:10:22:c3:67:
0d:00:18:0d:90:4e:ae:41:6c:c3:7a:6e:61:65:ac:
b5:d7:25:24:96:0d:fd:4d:53:fc:2f:bd:3e:d7:b3:
5b:c7:0f:4f:60:81:14:f3:81:6c:a3:26:a6:06:a9:
d3:e7:1b:dc:80:44:f1:a1:fe:26:63:6e:be:65:6f:
6e:fb:eb:4c:99:23:85:6b:09:46:c4:e1:62:41:ca:
50:91:50:89:19:30:95:d5:5f:58:36:f8:ad:6f:60:
63:1a:7d:d0:bc:a2:24:55:c0:88:c6:85:62:56:9f:
74:9c:fd:ac:24:2f:c0:0d:4a:bb:6f:41:df:a2:57:
58:f9:45:94:98:6f:48:d2:c4:d3:15:ae:94:5a:2f:
b7:8a:36:b4:ec:33:62:9d:ce:65:7a:03:19:26:e7:
58:c7:a5:e1:27:86:f5:43:5b:66:1e:a8:76:5e:37:
75:d9:40:f3:51:fd:c1:3c:59:5b:b9:bb:35:e9:be:
9e:8f:9d:6a:16:07:f2:62:7c:82:3a:92:ca:45:8d:
d3:5d:88:d5:75:d8:25:84:79:f8:fe:a4:48:41:39:
c1:7c:ce:73:ec:1c:61:37:50:1d:1c:7f:90:9b:23:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:EF:EA:3D:EF:90:20:AC:C7:7B:5B:7C:05:A1:68:DC:CB:F2:10
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:24:57:59:bc:11:93:66:fa:e1:46:3c:63:f8:d5:46:4a:a6:
cf:d3:c1:23:e0:20:0b:fa:b0:93:02:b1:bb:12:36:af:2f:8a:
5d:98:1d:d6:61:66:1a:5b:37:8e:5b:71:9c:92:c3:c7:37:bb:
19:86:37:27:90:e9:ca:35:7f:32:21:2f:0e:87:1d:65:34:cb:
91:32:66:52:f1:36:1a:c1:2a:37:7d:a4:05:ad:ad:56:ad:1f:
83:a8:61:23:7f:ee:8f:f4:2a:9d:22:64:cd:f2:c5:56:b5:20:
f3:c3:f7:0e:4b:d9:1d:ad:d0:85:83:42:35:4f:af:59:c4:e9:
2c:38:f3:48:98:ef:18:4b:35:c8:5a:03:e8:09:50:7f:40:7e:
b5:c6:86:f6:32:22:2f:ce:46:7a:3b:c2:ba:f9:ce:f6:6e:20:
d0:99:2a:75:48:d1:43:d7:ed:a9:35:46:3b:57:f6:2d:7c:19:
c1:ec:d4:86:86:77:6e:ca:0f:c9:c7:83:3e:18:86:5e:e9:e3:
3b:42:7b:18:1f:d3:dc:bf:81:45:db:6e:5f:21:61:ad:5b:dc:
e2:06:76:e8:ce:3a:9a:32:6b:72:e8:46:5c:49:8f:b4:cc:e8:
39:9d:26:0e:30:8a:9e:96:c0:90:4d:f8:b0:c7:30:2e:15:78:
c8:3c:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:35 2026 by rpki-client