Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: geTT3jh1YgiqZhbAdTFqY5CwvE6NiFUKhlLWKlXCNIA=
Subject key identifier: F1:B1:FF:00:E2:C8:2A:B0:AF:B2:0F:28:A3:6A:A6:6B:81:2E:F9:6C
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019CAA5931097C3B2E68886210067917AA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 17D5
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: atAPRcm6V30Ea0hi6BdLzhzJAQ29mA6paVWp8Pzyp6o=)
2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:31:09:7c:3b:2e:68:88:62:10:06:79:17:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=f1b1ff00e2c82ab0afb20f28a36aa66b812ef96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:59:03:bf:8b:97:71:68:09:60:d2:3b:3c:
ad:30:f0:38:d5:58:49:4c:56:5a:a5:66:1a:1a:c5:
26:c6:24:85:7f:b6:54:5b:e4:ab:b5:cb:ca:b2:d5:
86:5a:14:3d:3e:eb:63:d2:af:9a:64:e8:26:67:60:
7d:e9:66:c9:fd:61:56:3a:10:88:78:66:50:85:b5:
3f:92:1b:8b:63:19:3f:22:f5:90:bf:5b:8b:2f:48:
0d:5b:15:1f:ca:c6:ad:07:c0:4f:3a:03:55:c6:3b:
3e:20:14:af:a7:9e:b0:ad:06:c0:43:81:60:a7:1c:
0d:eb:60:3b:3b:cc:1b:0d:46:0f:64:d6:d1:fb:91:
e0:66:17:5b:3c:e6:fe:89:01:5a:31:e8:f7:fe:3a:
ec:6d:c8:6b:5c:2a:79:f5:3d:86:23:34:40:20:e1:
f0:f6:e0:d9:2b:05:27:ee:f2:4a:ec:5c:d2:f0:da:
2e:ed:3c:9b:4e:ed:8d:a4:6f:4f:bf:dd:8d:e3:b6:
29:03:9f:6a:2e:2c:01:c3:30:6a:06:30:76:4f:c7:
e1:ee:f6:55:19:48:d6:66:7d:2c:a3:45:cb:c9:05:
c1:c9:81:d5:a7:e0:4b:fb:ca:7c:ae:1a:ad:a0:65:
e9:af:68:67:2d:d1:cf:4e:01:3e:02:f5:67:4f:c3:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:FF:00:E2:C8:2A:B0:AF:B2:0F:28:A3:6A:A6:6B:81:2E:F9:6C
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:3b:e1:18:bc:a7:a5:a7:15:ea:58:01:c1:a9:0b:fb:8a:
c5:a2:22:5c:9e:f6:c3:64:41:3c:78:f0:25:b3:7a:de:e0:c0:
d0:80:91:29:93:db:c8:c7:8e:f0:c0:b9:fd:ce:2c:8a:33:11:
3d:fe:a7:6c:6e:4d:fa:3c:89:ed:64:af:12:37:81:b4:84:d0:
55:a0:2d:9d:9d:c6:0d:9b:15:ef:82:a9:ec:30:89:13:21:4b:
e9:4c:34:29:d7:60:94:23:ff:e2:c4:a2:24:c7:23:f3:2e:52:
2d:b8:cd:76:6c:3a:d6:b2:30:67:d7:d8:e5:7b:9b:15:39:e5:
25:02:20:77:e5:f2:68:53:6a:38:22:27:2e:32:a0:2a:7a:50:
97:9b:64:7c:eb:89:d7:f5:e7:34:14:4e:9c:97:ca:f3:be:6c:
39:d8:b2:11:0f:d6:5b:99:e3:83:cb:8a:50:04:3b:b2:f1:e8:
c3:25:c6:7d:9b:a1:d6:e3:a1:5a:0f:45:88:95:9d:ec:98:85:
7a:40:05:01:39:ad:cf:d0:f1:cf:62:f7:4d:81:cc:18:53:f5:
17:39:d4:eb:46:d3:1d:8c:fb:ea:64:e7:f8:17:f6:55:7a:7e:
f1:2d:a8:af:28:d7:17:91:ea:26:a6:a7:66:51:60:14:96:2d:
8d:7d:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:32 2026 by rpki-client