Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: YKSYTKgG4b+RtKxWYdM9ZyxMY8DtKl1spRugc5Mfics=
Subject key identifier: 45:45:4F:28:B5:A4:D6:04:FC:AD:1D:45:2C:2C:A8:3C:E8:CD:86:5F
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 019CAE35D2A9603844D163048C7292053D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:28 +0000
Manifest this update: Mon 02 Mar 2026 11:01:28 +0000
Manifest next update: Tue 03 Mar 2026 11:01:28 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: mvryAXnWvcXyy9WHmTStEu6rB0TnZsfgu2nEGwYLoKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d2:a9:60:38:44:d1:63:04:8c:72:92:05:3d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Mar 2 11:01:28 2026 GMT
Not After : Mar 3 11:01:28 2026 GMT
Subject: CN=45454f28b5a4d604fcad1d452c2ca83ce8cd865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:96:51:f4:07:51:61:ec:06:6c:59:13:80:
e0:c3:5a:30:17:3a:61:dc:bb:85:a8:24:1e:db:c6:
55:06:19:f0:0d:79:19:7e:e2:3c:76:47:9c:51:d0:
c1:08:83:a7:dc:eb:0f:3f:b7:76:21:f3:30:82:07:
4b:14:1e:c4:71:96:25:9d:71:25:21:e6:69:f6:7e:
ad:63:99:fe:a3:d1:1e:73:dc:64:4c:db:f4:28:e8:
bf:af:1e:54:e7:17:f8:c3:05:f2:62:c3:f1:a5:b1:
1f:77:c8:3f:2e:48:2d:a3:28:58:d9:2f:6a:2b:38:
e7:c9:02:47:0f:21:71:37:4c:cc:36:a6:09:6d:5d:
3d:d0:4d:69:b6:7b:1a:1e:e0:44:bf:0e:e8:ee:39:
d8:7b:93:1f:b9:df:a0:7f:27:0c:30:c9:a8:4a:79:
60:b4:10:e1:f7:f7:eb:32:09:af:0b:ab:9d:ff:90:
be:7f:6c:74:4a:69:bb:e9:f1:6b:61:f6:bb:a0:43:
8a:69:36:4c:28:d8:e8:60:10:be:44:0d:cd:18:87:
ee:c6:45:c0:a0:77:7c:ca:a7:97:e2:16:8f:ba:c4:
a9:60:5a:d4:d8:4e:32:2a:23:37:02:c3:e6:cc:ad:
9f:fe:55:23:61:38:ee:af:1f:f2:f2:98:e2:79:7f:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:4F:28:B5:A4:D6:04:FC:AD:1D:45:2C:2C:A8:3C:E8:CD:86:5F
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f8:04:ab:8e:5b:fd:c9:67:cc:fc:92:84:e2:47:a5:46:a7:
f4:92:8b:45:7d:86:a2:78:6d:01:c5:c9:94:35:ae:63:62:a4:
9a:98:ec:bf:b2:4b:36:5f:f9:d2:e6:cd:6c:15:5f:53:b2:34:
95:51:b5:dc:e4:fc:ea:0f:3b:8c:ce:1c:13:dd:cd:3b:97:36:
53:bc:62:52:e7:50:01:78:22:4b:3a:54:fc:2a:66:98:21:44:
2f:42:95:7b:67:ed:48:9e:e7:05:0a:37:4a:1b:44:d6:e2:4f:
d2:5e:9f:33:a2:2b:b6:04:44:6d:02:0d:5d:d0:6c:c7:80:ef:
85:87:23:6b:66:e8:ef:0e:8c:b5:67:89:af:b4:ea:9d:9a:01:
c7:2b:58:90:c4:41:c2:4d:27:8e:48:2a:16:36:ac:27:f5:0e:
09:f3:12:e9:a2:90:d1:c4:cf:f6:98:8a:eb:6a:5f:39:a9:ff:
b8:39:27:dc:37:9b:3d:1a:c9:96:7d:82:8a:c1:4b:90:58:28:
43:3f:ec:7b:cc:be:76:6b:73:cd:64:e3:0d:00:fe:2e:de:26:
73:3c:3b:a1:c7:53:10:c2:62:63:e7:5e:0e:58:28:15:22:e4:
88:29:d1:6c:40:51:eb:ff:1f:99:b1:6c:89:0b:78:3a:ab:8e:
be:3d:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:43 2026 by rpki-client