Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: EIYutN6qyVFxxu+398vVo/CzcWsmZnE7pOGdBsDrSvg=
Subject key identifier: A3:AD:9D:C1:EC:94:18:B6:26:73:F4:AD:37:48:60:66:2F:E4:D0:63
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019CACB4DF8E558559AB4B7A9B5578756177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: b4JLUPf4VrtOkwquR3/pscAnUenazeqhT5w9ZMtgUds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:df:8e:55:85:59:ab:4b:7a:9b:55:78:75:61:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=a3ad9dc1ec9418b62673f4ad374860662fe4d063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:d8:cb:55:ad:85:b7:77:4a:48:37:cd:13:
1c:01:09:9f:f2:d5:56:7f:13:d8:64:61:8e:f2:2e:
38:0c:a1:6b:da:78:aa:ef:11:85:8e:a5:a6:b8:22:
6e:e9:4a:bd:56:a0:37:be:16:07:27:5a:d1:7e:c2:
58:57:f8:c9:45:56:df:78:76:77:f9:6e:92:4b:c2:
8b:29:aa:91:38:0a:df:93:91:39:55:a8:3e:32:e1:
02:99:e2:d6:14:f4:a7:85:34:94:3e:d2:82:ac:2f:
01:4e:12:fd:51:f7:e4:2a:2d:62:64:66:df:07:f6:
84:f8:a6:0e:fa:b4:84:21:a6:d2:73:0e:de:3b:4a:
77:56:5c:3f:91:30:fa:e6:85:49:ed:01:2d:8b:99:
e3:6a:bc:b1:3c:f5:a8:ce:f1:0c:c1:b9:8e:95:d0:
41:9b:5b:62:1a:fa:e6:a3:a2:d6:59:f0:66:6a:6b:
1f:3b:56:05:1d:c6:be:3a:5c:53:6a:b5:22:c4:dd:
56:55:00:99:43:e9:a6:a4:38:ca:63:42:61:65:df:
85:42:1f:72:5b:0d:cd:4e:5d:f1:16:2c:11:00:06:
7a:14:a2:5a:2b:15:23:27:88:51:88:af:93:bd:57:
57:9d:3c:09:0a:02:04:f7:c6:fd:b5:14:4c:18:4f:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:9D:C1:EC:94:18:B6:26:73:F4:AD:37:48:60:66:2F:E4:D0:63
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:81:f9:35:dc:5a:9b:15:98:df:b2:b2:fa:22:d4:73:98:3c:
c1:30:e7:7e:38:c6:26:a1:96:d8:50:62:91:19:64:69:bc:e7:
d7:b2:99:f0:ef:04:ae:d1:cc:49:a9:a2:0e:df:07:96:97:8e:
25:4e:60:6f:49:98:e7:01:4c:99:72:51:e4:68:b5:3f:96:cc:
6e:cf:10:f6:03:f7:8c:e9:8c:de:e3:25:14:4c:a2:bb:00:4f:
50:74:f4:0c:8d:0d:7b:9a:7a:ec:90:98:a4:78:06:d0:bd:ca:
df:b1:4c:af:4b:3e:35:44:b5:ac:65:88:8c:36:e5:d3:25:29:
4d:26:d2:4e:2c:be:8b:b9:5d:62:75:12:68:87:b4:10:b7:cc:
1d:a5:d3:48:bf:70:d2:06:d2:96:72:1c:30:0d:ef:7d:e1:9f:
07:e6:ee:de:a8:3b:8d:dc:1b:1e:92:76:87:93:49:88:97:be:
e1:2f:0d:e4:78:99:1e:da:10:9a:27:e2:70:e1:9f:e5:88:94:
94:8d:3b:85:2c:20:63:e2:44:e5:87:fa:e8:27:9b:37:13:68:
ec:56:43:8d:e1:16:7d:94:e7:87:79:c1:37:88:75:34:6f:94:
b5:00:64:71:d1:68:ca:b7:8a:0a:68:e5:d7:ba:ed:3e:3c:b4:
11:91:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:14:28 2026 by rpki-client