Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: fF39BSQfpdzb1orD9ZOf6yhsUTaxpf17vzcbjcqFm2I=
Subject key identifier: CD:B4:D8:2C:F3:3A:5D:D2:F2:F8:64:13:33:8E:47:29:9E:07:A3:B9
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019CACB4A9D416606CCC77561F43CB5A1914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 1570
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: z2ZKrfMBU1wf+O7O/Be4c3Ij2/Nt+M0hRmA72LIh7e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a9:d4:16:60:6c:cc:77:56:1f:43:cb:5a:19:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=cdb4d82cf33a5dd2f2f86413338e47299e07a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:9a:28:a6:39:55:7f:28:f5:86:ec:fe:02:
08:c7:b1:20:49:87:78:44:c2:6a:28:ca:bf:08:2b:
ec:99:21:55:19:7c:17:f7:fe:77:85:cf:b8:d6:e5:
5c:08:bd:60:8d:92:f5:ee:ce:39:2b:54:8a:e2:24:
14:44:61:39:e1:f9:32:41:b2:2e:7b:25:63:c5:f3:
23:d0:4c:f8:b2:51:e5:82:5a:f9:d9:0e:61:37:ec:
e5:29:7a:6f:7d:22:7a:83:1a:16:60:c0:65:7f:2c:
32:2a:3c:46:b1:87:54:ca:8f:61:43:d9:93:2a:4b:
3d:08:66:a8:62:40:ab:78:d6:01:18:26:3f:79:11:
94:9b:de:30:39:eb:1b:f4:06:e0:6c:f1:27:59:fc:
c4:b4:e9:9c:fd:0b:10:66:fe:f8:df:8c:22:b2:11:
2a:e0:85:5e:91:9b:fd:1d:f2:5f:60:79:de:56:47:
7a:ba:dd:75:96:e4:72:97:5e:af:84:6c:1f:fe:18:
4c:2f:29:9b:29:de:ba:a5:bd:88:53:6b:4b:92:36:
1a:e1:48:3b:67:29:d5:b5:99:8d:85:1a:7f:b6:92:
3f:8c:22:ee:29:fb:a2:46:db:41:2d:37:cf:b8:f0:
3f:7f:df:b5:ac:ff:2c:36:65:dd:c5:47:c3:4f:21:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:D8:2C:F3:3A:5D:D2:F2:F8:64:13:33:8E:47:29:9E:07:A3:B9
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1c:ed:39:52:63:8a:50:74:74:e2:fa:32:8d:2f:69:74:f0:
e5:bc:da:f8:b7:0f:89:89:d6:30:ff:bc:31:1f:c3:24:63:1d:
b9:4c:6f:b3:45:e0:4b:d6:bd:8b:28:33:54:79:98:c2:79:47:
c8:11:db:f6:9c:3b:14:bb:b2:8b:52:38:64:26:6e:6c:b5:91:
49:b7:f3:98:53:50:36:69:5c:fb:30:fd:c6:db:52:00:f7:1e:
c1:2b:f8:f2:f7:90:aa:e1:7d:e6:55:a6:90:e5:8d:16:11:2b:
2a:f9:4f:25:e4:cf:f7:27:ba:7d:fd:31:d4:8f:0e:e1:ba:71:
00:a7:f6:76:de:68:fb:1a:5e:0d:eb:6b:76:80:03:44:77:f2:
13:d5:e7:a1:76:2c:4f:c1:ff:e4:b2:bc:6a:dc:02:48:da:1c:
38:3d:50:e8:fe:0c:59:3d:86:31:37:94:22:99:ef:9a:96:08:
73:57:be:2a:a1:b9:f4:b2:9a:34:a9:7c:6e:76:e1:5c:ba:78:
74:4f:c2:2b:37:3e:bf:a0:d5:54:e9:ee:59:77:0d:26:20:0c:
f7:3c:51:cb:e4:48:4a:5f:99:6a:d2:1e:c0:cd:7f:dc:bc:0d:
39:59:89:46:7b:1a:4d:27:84:4b:26:90:86:73:3e:f0:c6:3c:
0e:e1:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:43 2026 by rpki-client