Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
File: sZtkf-ChCzQAqQP68utko8WP6wc.mft (raw, json)
Hash identifier: UWi+Wmx+ppD6TnYwvCNrRM+gVwGsc8+ZhSfqinaodlE=
Subject key identifier: 8E:32:9D:23:E1:F2:E4:FC:70:E0:DF:6A:B9:CC:02:39:39:98:A3:5B
Authority key identifier: B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
Certificate issuer: /CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Certificate serial: 019DA41D2C2E8A7C48CAEFAE9A683770B6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
Manifest number: 64
Signing time: Sun 19 Apr 2026 05:01:08 +0000
Manifest this update: Sun 19 Apr 2026 05:01:08 +0000
Manifest next update: Mon 20 Apr 2026 05:01:08 +0000
Files and hashes: 1: NS0OG_158yBgKw1hv5HZLbP9gNU.roa (hash: hWWft4kE5qapcxE+YsKdnh8JxcvLJHffpGfQiJ+unY4=)
2: WLZwejPiTsGj3L9WWmyBlMUa03Q.asa (hash: NvnlIzfI7uEtt14QTA2ioVybslPnmkhw44zqG8hYsrI=)
3: _iJFcG2sgekOOkyWmNE601znn2c.roa (hash: tJKrcJXxI5249vfDepqcTcwbwny+qpaz1JP2S0AoM0g=)
4: sZtkf-ChCzQAqQP68utko8WP6wc.crl (hash: tZdtyTzmiMMKoMaKA0l2uyS+QldL4AjnCVRZCo2ZEWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:2c:2e:8a:7c:48:ca:ef:ae:9a:68:37:70:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19b647fe0a10b3400a903faf2eb64a3c58feb07
Validity
Not Before: Apr 19 05:01:08 2026 GMT
Not After : Apr 20 05:01:08 2026 GMT
Subject: CN=8e329d23e1f2e4fc70e0df6ab9cc02393998a35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:20:72:7b:5a:79:ac:0a:72:96:52:8a:c7:
47:73:ff:66:32:25:b1:70:a7:ba:c5:75:91:ea:65:
51:8f:64:94:86:51:b5:10:54:30:6e:3d:85:e7:85:
8e:07:56:8b:6e:1d:e4:ac:6b:83:b0:5b:c4:06:e1:
15:bc:c8:73:38:63:16:96:7a:72:8f:d8:86:6b:dc:
1c:6e:41:38:d6:d9:b1:e9:f4:e9:71:1b:8a:b1:6a:
cb:c8:4d:9a:c6:71:4d:b2:37:bf:82:f0:55:f0:7b:
17:4d:e3:0a:82:58:f8:1b:14:22:49:d8:0e:82:81:
eb:7b:90:11:c1:df:19:b3:76:ba:da:18:14:22:8a:
72:84:e9:d9:5d:af:bc:a3:aa:0a:47:fd:5b:93:5f:
2e:0e:af:db:30:92:d5:34:9b:76:50:49:cc:1f:c0:
4d:72:b6:55:18:f5:d3:73:19:ec:fc:4c:f1:9b:7f:
12:23:7e:a8:3b:83:ba:0f:dc:e0:01:9a:3e:59:c5:
3f:ff:0b:02:99:a8:56:17:3f:21:b6:f2:67:a4:73:
cb:6b:b1:69:f8:27:22:6e:d7:7f:08:9d:ac:20:04:
85:f8:14:53:fd:48:2f:5a:a4:65:b9:c9:e0:96:e2:
58:74:9b:ab:70:93:18:09:5a:77:8b:3c:6f:67:8b:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:9D:23:E1:F2:E4:FC:70:E0:DF:6A:B9:CC:02:39:39:98:A3:5B
X509v3 Authority Key Identifier:
keyid:B1:9B:64:7F:E0:A1:0B:34:00:A9:03:FA:F2:EB:64:A3:C5:8F:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZtkf-ChCzQAqQP68utko8WP6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37b33d-d9a0-4fae-907d-0cca97efdc57/1/sZtkf-ChCzQAqQP68utko8WP6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:98:a0:78:57:ed:3f:42:70:00:d3:93:dd:7b:b0:b5:65:48:
ae:89:10:50:8f:65:d3:b3:ce:40:7b:24:d4:fc:4a:c4:d0:3c:
6e:f6:8c:fb:a7:6a:29:50:d1:8c:e5:d7:88:f2:65:08:15:6f:
52:fa:e1:b3:51:80:6d:66:1a:3b:59:7e:bd:77:81:c6:02:a2:
54:0a:eb:b3:44:48:4c:f2:e8:ad:3a:3e:e7:aa:ad:77:5a:96:
05:3d:b3:bc:36:23:3a:64:81:68:bb:d2:33:8c:fc:5e:26:ea:
42:e5:f0:a4:7e:2d:ef:45:94:7e:9b:65:7c:82:91:8f:e0:8f:
69:d6:b4:51:a5:74:29:c7:cf:94:c7:e6:49:0b:f5:9c:c1:bf:
76:f4:db:e2:62:68:e3:7f:5c:c1:f3:84:a4:b5:1b:74:e1:e6:
3d:13:88:31:a9:08:29:5f:ea:5d:52:40:55:b9:35:bd:7d:1e:
27:43:5a:7b:83:f8:4f:7f:b3:ae:f4:fb:a4:0c:0a:e5:f1:a8:
9d:6a:7c:19:0e:4e:d3:2c:44:30:ab:d7:90:5d:12:b4:0b:37:
87:dd:e1:4b:d3:97:15:9a:c0:81:97:9d:f0:30:dd:72:31:b7:
07:1a:87:d3:99:26:16:79:01:a8:00:9a:6a:df:c5:87:9d:a9:
b5:38:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:54 2026 by rpki-client