Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: K4J1STG+OGVNkHYP7FwAeG+18M4wZ0jPyaW6m+FVQTI=
Subject key identifier: D9:F1:D5:B7:DF:BD:10:D6:44:AD:3B:FE:7F:F6:D9:68:6B:D3:D6:C8
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 019CADFE8D42650BBFB1658501FA905124AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 0D2C
Signing time: Mon 02 Mar 2026 10:01:06 +0000
Manifest this update: Mon 02 Mar 2026 10:01:06 +0000
Manifest next update: Tue 03 Mar 2026 10:01:06 +0000
Files and hashes: 1: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: Rm4sW7zalq7N4GiZYnlZv4aLWrkOUcIfRKeZ/ppQvT0=)
2: zO8hQmSxtEXmRdrwqFPkVEGSdWg.roa (hash: MmT0Cb8d42MmUiiW2gdoJjBjTgQPDMLhJCGUAeZAyRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8d:42:65:0b:bf:b1:65:85:01:fa:90:51:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Mar 2 10:01:06 2026 GMT
Not After : Mar 3 10:01:06 2026 GMT
Subject: CN=d9f1d5b7dfbd10d644ad3bfe7ff6d9686bd3d6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:98:3f:3b:18:d6:f2:b6:2c:f2:f4:11:8e:
32:7b:8a:cc:65:c9:86:21:68:f6:91:d3:f2:75:89:
6b:e7:f0:8a:63:45:f9:02:91:b1:3a:22:2f:5e:0f:
53:67:1a:eb:7d:83:25:82:51:ee:a0:21:de:ac:52:
11:81:71:0f:71:f8:66:ff:fe:3f:c2:84:0a:df:2e:
8b:35:39:0c:94:89:28:07:af:da:ba:e6:be:82:e1:
61:69:22:8e:ba:fb:9d:19:5c:80:56:76:05:44:21:
0b:46:d6:98:dc:ee:76:0a:44:0d:30:3f:e2:fd:de:
6e:a7:fe:ac:0c:e2:1d:27:f3:38:63:7d:b6:98:31:
bf:b2:06:57:c1:3d:10:5a:09:1a:0b:fb:da:d5:7f:
b8:87:66:ce:63:a4:fe:ff:56:61:6a:4f:94:74:f1:
b2:da:dc:33:75:d5:b0:29:30:11:c6:c2:28:54:3b:
5b:d1:a9:07:ab:9f:29:03:76:c0:22:33:60:c9:58:
f6:f0:a4:33:bd:6f:1c:03:fa:de:54:82:6e:d2:a5:
bb:e7:b4:0d:0d:46:a3:7c:37:7f:da:02:3c:c0:2d:
32:33:78:46:7c:b3:e1:a6:4f:18:11:d1:1d:5a:85:
e1:0f:1e:f3:b1:01:b7:84:0a:bd:16:ec:52:40:a7:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:D5:B7:DF:BD:10:D6:44:AD:3B:FE:7F:F6:D9:68:6B:D3:D6:C8
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d0:66:cc:26:c8:b0:55:0c:e0:6a:87:37:dd:a3:c2:2e:61:
ee:94:97:98:73:a9:63:b6:50:34:fd:c3:7f:3d:41:d9:c3:73:
e1:f9:78:11:f5:95:57:26:ff:dc:b0:ac:23:0a:41:1f:97:35:
2d:eb:8e:2f:8c:6d:dd:c6:e0:1a:5a:97:20:90:3d:2f:c2:57:
a2:3b:ea:32:b1:63:a1:46:34:1d:c8:1d:39:98:96:a0:d8:d1:
34:a1:e9:9d:f4:93:02:aa:ac:da:ab:07:52:3f:fc:a5:36:f4:
66:11:4d:d9:2c:bd:58:25:07:3f:df:f1:48:a5:34:f0:2f:07:
45:ef:98:ca:d2:1e:29:de:2c:74:f6:97:1c:8c:36:13:49:b9:
3a:c2:2e:b1:3a:3f:d9:83:ef:80:e8:18:ce:d1:7c:ab:41:8b:
0b:c4:9f:9d:d7:db:14:24:0a:67:cf:31:b5:19:6f:bf:59:d9:
63:34:f1:d5:7e:c4:f7:b0:3e:01:c1:63:9a:61:24:f1:70:98:
0e:19:87:ef:f8:fd:53:4d:9c:4e:f5:a6:f6:22:20:d6:15:5b:
a6:d9:12:d3:d9:e2:81:cf:c4:79:54:aa:10:c6:03:69:66:bf:
71:a0:ed:5a:f4:fc:3e:ab:08:dd:4a:27:ba:50:56:2f:bc:b1:
a2:ae:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:57 2026 by rpki-client