Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: arbqDFV0jAKDpppj+WA/8iMCdW7yrIV81Pxd9hvWNLw=
Subject key identifier: 6D:80:7D:7D:F2:F0:B1:CA:E9:9F:9B:1A:14:84:DD:69:4D:8D:9F:90
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 019FAAF60BAEF605A0BA6464395E96E81870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:19 +0000
Manifest this update: Tue 28 Jul 2026 23:01:19 +0000
Manifest next update: Wed 29 Jul 2026 23:01:19 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: a89SMTVK726taYkxV706yafqkVZaiARtCVXi9w4Cfi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:0b:ae:f6:05:a0:ba:64:64:39:5e:96:e8:18:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Jul 28 23:01:19 2026 GMT
Not After : Jul 29 23:01:19 2026 GMT
Subject: CN=6d807d7df2f0b1cae99f9b1a1484dd694d8d9f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:31:5f:e9:03:44:0f:60:32:48:12:bf:ab:
18:87:dc:ec:20:62:a0:7f:75:ea:cf:31:29:42:6f:
33:8c:44:82:d0:cb:1d:d2:d5:e1:54:85:06:5c:e8:
fc:0f:12:51:7e:ee:7f:f8:41:1c:91:dc:03:9c:f5:
0a:02:06:36:88:3a:60:ea:b8:39:11:c9:7e:c2:c3:
fe:75:92:1a:eb:fc:ed:c0:62:28:45:95:06:ef:79:
3d:ba:65:34:5b:dc:7e:74:eb:ac:c1:e3:8b:24:e1:
e2:f6:82:fe:a2:d5:81:94:a2:45:5b:c8:0c:ed:eb:
fa:67:f8:4c:f7:8c:c9:65:c1:24:7d:50:a1:ce:31:
2e:15:35:cf:4b:49:f2:89:64:8c:9f:27:29:72:01:
0f:98:a6:cb:85:db:92:87:ff:07:66:ff:4c:91:d3:
a0:36:47:bd:00:cf:b7:b4:19:2e:11:0b:9f:1b:f0:
5c:49:26:1c:40:f3:35:e4:9d:2f:e2:e4:f5:19:f7:
5a:22:ca:0b:a5:8b:90:01:82:10:aa:67:92:59:0a:
57:7c:04:1d:b2:00:26:ae:08:92:fc:3a:e1:e2:c7:
32:7f:0d:9e:8f:9a:c6:3c:49:5f:68:b2:cf:5d:cc:
d1:aa:63:7b:06:14:25:e0:16:b4:a8:7c:1a:ee:67:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:7D:7D:F2:F0:B1:CA:E9:9F:9B:1A:14:84:DD:69:4D:8D:9F:90
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:40:7f:5c:4b:83:51:27:61:37:3f:d7:a1:7f:11:23:3f:
c1:f6:85:b4:65:4d:76:d6:92:1d:4d:af:0d:0d:12:d2:c6:fa:
f4:34:0d:b3:89:7e:e8:88:13:d2:f0:b3:81:fb:49:95:77:55:
1b:3e:77:fd:77:6a:6f:81:3c:54:7e:4a:e8:54:dd:bf:24:1a:
21:3b:33:1e:ef:d6:76:bd:57:df:ac:da:1b:e6:35:16:9d:06:
82:90:c3:e8:2a:35:1b:b5:16:f3:64:2e:92:df:c8:cd:9b:11:
d7:2c:03:c5:e0:2e:55:07:c4:8f:a4:5a:60:1e:68:e9:fe:ba:
b1:06:bf:9c:77:60:26:a4:7a:8c:1c:7a:21:26:6d:6f:73:dc:
da:4d:c9:63:39:47:0a:81:f4:5d:cc:89:aa:20:2d:aa:a9:b0:
48:f0:ec:35:da:3e:20:f6:94:d7:a3:f7:e0:96:27:cc:62:ca:
93:7f:8e:c3:d4:11:94:d2:3f:b2:9f:df:61:5d:a6:9e:da:84:
c2:f9:22:8c:e4:ac:4f:80:53:a9:a7:e7:ca:19:68:52:89:1d:
91:2c:9c:f2:e6:4e:9c:3d:dd:72:09:32:4a:4f:3f:72:05:91:
5d:5f:6a:64:b5:90:d0:72:56:66:25:d2:c0:7a:e3:de:f8:cc:
6d:c7:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:17:12 2026 by rpki-client