Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier: hdt0CxqX5Jmuz1siOvQzBSHZJXgWXbmNIkdbGNlCwEk=
Subject key identifier: C7:84:CE:F8:1D:A9:0A:DA:E6:9F:EA:60:3E:2E:92:E8:9A:CE:AE:1E
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial: 019D9B87A6AAEF7961FDB33A4A43179F70F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number: 0DA7
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: 9Kn5tQTq9F70RJxA7u11VY2X329TFOdJCjLSNJFIDvo=)
2: zO8hQmSxtEXmRdrwqFPkVEGSdWg.roa (hash: MmT0Cb8d42MmUiiW2gdoJjBjTgQPDMLhJCGUAeZAyRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a6:aa:ef:79:61:fd:b3:3a:4a:43:17:9f:70:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=c784cef81da90adae69fea603e2e92e89aceae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:95:73:b4:18:84:ac:f4:2c:8f:31:01:81:
8b:74:28:28:d8:25:43:8b:4b:30:9e:ac:6c:40:5e:
1d:7f:70:c2:3c:3d:f9:59:98:ee:e7:5f:fc:7f:f6:
12:20:fc:63:5f:d8:fb:65:3d:b1:df:b8:ce:94:c3:
6c:19:57:6f:ef:09:54:02:fc:81:e4:bc:c5:1e:05:
c9:32:f2:a4:b6:e8:c4:5b:82:41:f5:ef:cf:01:8d:
ef:a7:79:33:d8:91:44:99:e0:64:4d:83:17:f7:cf:
0b:16:5e:4f:c7:44:ba:98:9c:98:90:e7:aa:96:e4:
fa:54:41:7f:b3:be:ef:f6:98:8a:cd:4e:44:d3:a6:
44:d2:39:f9:fe:9f:77:de:53:eb:8b:16:eb:2d:ce:
00:c2:4c:8d:92:94:b1:0f:19:eb:84:0c:d2:5a:8e:
d4:2a:f6:89:2a:f5:6a:a3:8a:ed:60:cb:a1:60:0d:
0b:59:3d:38:39:2c:d8:02:11:90:d2:27:62:d9:ad:
da:d9:8c:03:b5:09:19:c5:68:f2:64:ab:0d:95:fe:
12:73:b0:40:91:b3:16:29:92:15:0e:0d:42:0e:7c:
79:9e:8e:2a:6e:7e:82:ef:0e:9e:e1:6b:17:2a:55:
9e:9f:f1:2a:f2:ac:b2:a9:02:a5:eb:3d:9a:73:22:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:CE:F8:1D:A9:0A:DA:E6:9F:EA:60:3E:2E:92:E8:9A:CE:AE:1E
X509v3 Authority Key Identifier:
keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8b:a6:3e:7b:01:73:da:42:d1:43:fa:99:10:e9:af:c7:eb:
f2:aa:0a:b8:71:83:0c:ba:68:61:91:a5:52:79:08:96:2f:08:
55:c5:fe:52:19:15:fa:fb:e5:f9:14:7c:72:dc:44:7f:a3:63:
a2:0a:06:cd:01:62:56:98:97:18:54:62:53:b1:57:06:22:9a:
3e:31:93:f8:05:10:60:e0:69:ed:78:12:31:81:7a:3e:be:d8:
df:53:b1:fc:fb:e6:d3:8d:31:da:1f:e0:d6:59:89:7f:66:35:
ce:19:65:e1:3c:21:40:4f:74:f3:69:c8:fc:d0:d8:a3:81:5e:
4a:36:b2:14:63:32:d9:e3:3d:0c:12:3d:31:5e:88:7d:c5:e5:
97:6e:88:81:93:7e:89:75:13:05:08:1c:12:f4:5c:e0:04:50:
42:a6:cb:d8:55:47:af:e6:04:f0:2d:8a:f7:48:ee:2d:59:2f:
eb:60:ba:13:c5:36:fe:13:32:ec:1b:25:68:6f:10:dd:58:65:
03:b3:42:06:03:14:c9:08:72:e9:18:0e:c9:67:c3:76:9d:37:
a4:6c:04:92:a1:e4:25:86:ad:75:49:38:64:e1:c6:a7:11:6c:
cd:f8:f4:9e:32:f5:17:16:e0:1b:d8:cf:ce:4a:b1:07:31:88:
51:e0:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:25:55 2026 by rpki-client