Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: cVHir9veYYF1wd4zaEP4Iug9E39II2UMNFK/60NOedk=
Subject key identifier: 48:FD:40:05:7E:22:E6:05:FB:0D:56:B6:9F:56:60:59:73:1B:29:C5
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 01A0C2C3FFEACAC39CCE102AB60409159EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: 0202
Signing time: Mon 21 Sep 2026 07:00:19 +0000
Manifest this update: Mon 21 Sep 2026 07:00:19 +0000
Manifest next update: Tue 22 Sep 2026 07:00:19 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
3: ilHCu5w2TW7eOQXvuhQ2YUq3qag.asa (hash: Mugd9gLE6hvJKv2zQiEqD0piVAHiUgLK+6JoN1CkxKs=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: CEPn8GAW1gCK9U94HQIitTvCAxegGqSzUBvH7f2hr1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:ff:ea:ca:c3:9c:ce:10:2a:b6:04:09:15:9e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: Sep 21 07:00:19 2026 GMT
Not After : Sep 22 07:00:19 2026 GMT
Subject: CN=48fd40057e22e605fb0d56b69f566059731b29c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:e2:f4:68:13:b3:09:a4:2f:3d:d3:d7:47:
87:b5:92:d6:67:26:0c:dd:94:6a:f9:03:e6:07:64:
d3:f3:3c:0d:10:8b:75:a3:3e:06:f2:87:c3:11:65:
16:6d:23:44:30:ce:8f:47:15:a7:a3:57:00:66:f5:
02:57:c4:2c:e5:45:15:eb:85:1c:a7:70:3f:64:c1:
be:d2:1c:f3:20:c2:5e:03:72:b3:2f:d4:cd:c0:3d:
f4:95:c9:39:75:03:15:1f:bc:78:46:da:07:48:a3:
86:a1:7d:bf:d9:4d:ed:cb:a4:f5:79:16:05:70:e5:
8a:fb:2d:00:ac:05:cf:ba:18:92:21:91:2f:43:c5:
de:77:0c:be:ed:47:58:7b:98:f7:ed:7e:8c:8b:e2:
86:2c:e1:d2:90:bd:42:98:8d:2d:dd:84:28:54:e5:
33:6a:4e:62:b0:30:1e:d6:10:ef:a8:70:00:01:a6:
5d:8c:5a:7d:af:ae:2f:ea:15:b4:ad:66:73:81:f8:
c1:6a:4f:1f:09:7b:b0:58:ec:3f:fa:93:8b:64:ca:
68:6c:6e:cd:4d:78:52:39:1a:86:fd:8c:2c:53:6a:
64:7d:5f:90:2c:98:ee:30:89:c6:35:42:e2:3b:c4:
00:fc:d3:bb:63:b0:9c:2b:92:00:77:11:a3:eb:43:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:40:05:7E:22:E6:05:FB:0D:56:B6:9F:56:60:59:73:1B:29:C5
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:75:ae:39:ec:0c:c3:da:5a:e0:d2:2b:9b:d4:7f:cc:28:ea:
62:6a:84:e6:8b:85:53:03:4f:78:f5:40:c0:6c:24:57:1a:4b:
98:93:d5:46:4c:be:23:ef:0d:ef:a5:97:73:16:e6:b1:e0:37:
59:f5:2c:6f:26:96:ec:0f:d0:04:84:1f:5d:da:f3:f8:1c:c9:
d3:98:af:87:bf:cc:7f:2b:b3:59:85:00:b8:19:c5:7c:3e:3f:
68:6d:38:03:e7:8a:df:b8:f2:ac:55:ba:67:cc:ba:d9:44:d1:
7b:77:45:d3:95:1d:cb:51:a8:a7:08:53:ad:5e:ed:e8:66:1f:
4d:f8:13:a0:48:64:67:5f:a9:7b:e9:ad:10:1c:9c:42:20:48:
4a:e1:4c:42:83:e3:1a:d7:c6:69:64:b2:f1:25:49:3a:e8:67:
b6:6b:51:42:43:26:42:06:26:b7:8a:42:b0:51:ce:74:27:6b:
28:28:06:b8:2e:67:e6:42:8a:8b:26:84:ee:dd:e9:c3:2a:38:
2a:d4:31:5e:99:48:1c:fc:2a:d8:da:cc:61:a2:b0:72:f0:5b:
9d:61:c8:c3:8b:a6:3d:5b:9c:7f:e2:85:e8:28:cc:98:32:bb:
77:de:db:36:ee:04:49:6c:52:10:3b:42:d9:c2:5c:2b:3b:fc:
78:3b:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:21:58 2026 by rpki-client