Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: OCY+y7X/d7vvrQ7h9TfsgmUxwuNps7sUm0e+UgTsOZk=
Subject key identifier: 68:DB:DC:6C:04:09:E4:02:0F:96:87:DF:74:09:9E:9F:64:9C:D8:8F
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 019EC337266AC75CF290488ABF874AC42AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 23:00:31 +0000
Manifest this update: Sat 13 Jun 2026 23:00:31 +0000
Manifest next update: Sun 14 Jun 2026 23:00:31 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: ed10C9nyWhCe04ge4qTBeZbBQkNo5w3e1O7hlcbc4uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:26:6a:c7:5c:f2:90:48:8a:bf:87:4a:c4:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Jun 13 23:00:31 2026 GMT
Not After : Jun 14 23:00:31 2026 GMT
Subject: CN=68dbdc6c0409e4020f9687df74099e9f649cd88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:9a:c3:17:74:d9:e4:c2:7b:2b:b5:e1:28:
00:7a:41:de:b6:cc:f8:a0:26:13:37:04:cd:60:19:
9e:0c:7e:2b:e5:2c:0c:36:94:1b:87:ce:ef:ff:f0:
11:68:f6:1e:9a:ee:c3:bc:3d:2b:55:1a:15:d7:c2:
33:63:4f:54:79:12:cf:be:dd:3a:62:85:1a:34:ec:
59:7b:90:2e:f7:bd:83:b4:be:9a:99:70:8c:f6:a8:
92:87:31:af:b3:7e:86:b5:4e:22:90:85:60:65:9f:
33:ce:bf:c9:8f:b2:ca:02:b2:b1:33:5d:dc:a6:28:
86:9a:20:d4:bb:fc:d1:fd:f0:74:c9:92:5b:28:d1:
72:cf:46:33:cb:28:fc:af:c0:47:06:d7:c6:ca:66:
bf:34:54:36:66:e9:14:43:d8:93:fc:4d:27:24:ea:
e3:32:7d:e9:24:e6:0d:a3:0d:9e:66:d1:ae:85:7e:
8d:de:9a:1d:10:78:45:9d:1f:37:78:a9:52:88:ed:
e9:e8:3e:a8:af:d9:89:f5:32:67:f3:1e:87:1c:99:
a5:e7:c4:c5:87:40:70:3c:04:a7:34:44:3b:5d:8e:
85:88:c3:a2:b7:8b:ad:eb:df:1f:25:a5:5a:d5:88:
33:3b:a4:1b:7a:90:3f:34:75:2b:af:05:30:b3:83:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DB:DC:6C:04:09:E4:02:0F:96:87:DF:74:09:9E:9F:64:9C:D8:8F
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7c:18:a5:5d:2b:87:d2:9f:00:62:25:f1:32:38:58:29:8d:
c6:b4:75:38:35:a5:33:da:cf:b4:7f:35:71:55:82:0f:2f:dc:
fc:c7:49:80:a1:fd:c9:e4:df:a4:72:56:a3:b9:39:85:6c:a4:
77:61:89:ba:80:45:78:fe:2b:c4:a7:e4:5d:c2:1d:04:db:de:
53:af:00:bc:f8:09:ee:7c:26:e9:9f:5c:ab:32:63:43:14:b5:
bf:2c:21:17:80:a6:08:fe:1e:19:ca:13:28:da:31:c6:c9:6c:
44:ee:c3:ba:0a:8e:53:df:35:84:af:a8:31:c1:f9:4f:bd:ae:
16:77:cf:6a:b1:47:9a:34:74:1d:f1:8c:b3:0e:8a:d7:85:25:
ad:16:7c:ad:c3:5a:9d:e7:a7:1d:f6:6b:99:43:0e:50:09:d6:
45:74:2d:eb:ee:e8:3f:27:98:e5:b3:50:54:29:70:c3:48:0a:
a5:cf:d9:f9:7b:28:a5:c8:ab:cf:75:c2:f9:a7:8d:d5:5a:8c:
5a:fe:47:62:03:ba:fb:3e:d7:7f:0f:a3:52:e0:45:e0:83:a5:
9a:bd:b9:aa:47:78:29:b2:55:24:04:f5:da:c2:0a:da:55:b0:
0a:8e:72:ed:f8:17:4f:8f:3a:d0:18:36:c7:73:04:81:24:97:
f8:ee:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:57:18 2026 by rpki-client