Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier: OxPWHmh+fo+fvCqOU8wRERlJkB7Px291YwHUaNxPw3k=
Subject key identifier: AA:3D:4C:37:7D:FE:88:B4:2D:F9:1C:91:4A:4C:F6:A8:5A:88:D5:0A
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 019CAC46CD237B15F870D88EDF3FDA90A06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 02:00:46 +0000
Manifest this update: Mon 02 Mar 2026 02:00:46 +0000
Manifest next update: Tue 03 Mar 2026 02:00:46 +0000
Files and hashes: 1: 3KMzftpbJOARIPFwkH4LCQGCFNw.roa (hash: kXGt4d9WD7X2Wn0o/hJTyXRdGjpQM8KJT8r0nz9hLnk=)
2: EvXM-b680z9EvOO26D18ZcZMtPQ.roa (hash: yR1psjcP7WJDLXrNWlxvJsBJL/7C/J53luvxS8fesS4=)
3: MbElJ8xEe4i1aAEcPWf9npQhsRQ.roa (hash: y0BpW+ED+DBGHKnzwkRr54CaMuONa/0J2GLDI7kjsb0=)
4: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: rOK0ahrKlgPtUltNNPrztv9I3iyetB6RdyEdELUYQH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cd:23:7b:15:f8:70:d8:8e:df:3f:da:90:a0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Mar 2 02:00:46 2026 GMT
Not After : Mar 3 02:00:46 2026 GMT
Subject: CN=aa3d4c377dfe88b42df91c914a4cf6a85a88d50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:42:8f:33:2f:ab:25:3c:df:04:21:09:16:
17:ce:fc:14:2c:08:46:f6:c2:31:53:d0:72:92:12:
a4:ff:84:fe:cf:d9:70:ab:e9:c5:14:a2:bb:af:82:
ff:54:03:29:c1:e5:11:41:78:ae:f6:18:5e:02:93:
d9:74:38:52:1e:f2:48:4d:55:64:83:1f:f3:c0:fe:
07:f5:c2:a9:39:5f:85:95:01:af:61:27:5d:98:dd:
d5:ba:3f:4f:9d:69:9d:4e:1d:25:8b:35:dc:db:9f:
35:39:d1:d3:00:a4:f6:ef:13:50:d8:43:b9:07:d8:
bf:86:1a:d8:af:92:51:06:df:05:19:cd:1e:f8:06:
12:39:7b:cb:73:07:92:8d:3a:89:e2:41:01:8e:21:
e4:21:07:e0:b7:4e:d2:3d:0a:85:c4:86:ae:bd:8d:
b2:a4:50:92:4e:25:ad:ba:5d:77:10:c5:61:39:a7:
03:15:fb:26:29:bf:8b:e7:51:a1:ac:38:b3:60:d5:
5a:c7:df:a3:28:d9:1e:7d:e7:0c:ed:5d:5e:a1:15:
21:9a:51:9e:93:6c:2d:a0:02:cc:a7:a2:69:76:fa:
68:7c:8a:59:48:62:ab:be:fd:bb:6f:0e:a1:ca:d6:
5d:bf:01:7e:4b:0d:22:31:64:1e:2c:20:71:e6:7e:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:4C:37:7D:FE:88:B4:2D:F9:1C:91:4A:4C:F6:A8:5A:88:D5:0A
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:78:84:bb:39:b6:31:fa:b4:54:1a:39:a6:70:a0:11:75:57:
6c:1a:77:f6:06:bf:10:2a:0a:70:16:cf:d4:66:f9:33:b8:99:
1f:2a:9b:8b:cf:df:ba:12:a3:5e:a4:ec:03:75:4f:24:a4:af:
f7:2a:63:44:22:d5:06:73:85:05:6e:4d:55:60:01:3c:a5:8b:
7d:2f:02:5d:f2:0c:8d:a3:ef:04:b7:bd:f7:14:cd:7c:8e:1c:
ac:7e:fd:31:6e:ce:68:82:8c:90:01:e3:e6:ca:01:a6:fe:f8:
ed:92:f9:bb:eb:68:67:1c:7d:88:de:40:db:7f:b5:41:9d:7c:
bd:22:b6:3e:c8:5f:ba:ad:69:50:48:4d:9e:7c:bc:b5:f0:d4:
c1:c8:5b:eb:f7:a4:86:d4:87:8c:f2:ef:32:be:b9:f9:a1:da:
07:cc:13:86:b1:22:b7:10:de:9f:1a:aa:71:5d:3e:2d:a7:41:
9c:09:7c:ce:73:5f:c8:1a:e9:ae:b7:d6:67:69:b1:61:3e:1d:
8f:c1:c2:b4:06:2b:bf:3c:d6:39:0c:e0:41:1c:8a:55:69:1b:
cf:4e:34:16:82:b7:ff:1d:ee:00:60:eb:fd:9e:ff:e3:18:aa:
59:b9:96:51:2f:75:4e:25:d4:4d:bc:9a:48:ec:54:a8:64:78:
78:71:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:39 2026 by rpki-client