Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: Tnq2ZQUzTVTJGkrRxv35hk3nmd1LgTQ+b18MfpQnd+Q=
Subject key identifier: 75:BC:C7:2E:AC:11:00:7C:B4:8A:55:2A:95:15:6B:D4:C8:3F:93:C7
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 01A12955C2CBFD403C8294DFE19DFADEECAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 05:00:48 +0000
Manifest this update: Sun 11 Oct 2026 05:00:48 +0000
Manifest next update: Mon 12 Oct 2026 05:00:48 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: yGU57H9LqtTr+nypdPnc+F63g1X5WwmmEn2uxxwswKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:c2:cb:fd:40:3c:82:94:df:e1:9d:fa:de:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Oct 11 05:00:48 2026 GMT
Not After : Oct 12 05:00:48 2026 GMT
Subject: CN=75bcc72eac11007cb48a552a95156bd4c83f93c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:22:0f:ff:0f:6e:44:b8:bb:42:cc:d4:85:
9b:5f:51:ec:44:03:ed:d7:2c:ae:ba:7b:7d:5d:5a:
14:34:7a:54:fd:3f:0e:8f:0e:d6:9b:2d:45:c3:ef:
f4:12:a7:94:d7:94:50:a0:3f:1d:e9:cd:fd:fd:72:
6e:a3:41:ac:35:ce:06:5f:6d:bb:e8:49:42:93:d5:
f5:63:e0:5e:ca:ac:cb:9e:6e:9d:6d:4c:d0:5d:d1:
80:54:a9:cd:a2:cd:c4:fe:c2:d2:e9:c0:4a:28:ca:
e8:a3:c6:fa:74:49:70:d5:27:67:29:dd:7f:63:53:
66:ab:f0:d7:ad:0d:51:75:a8:b5:00:46:2f:a4:f2:
a8:da:2e:08:33:b5:e5:b9:06:76:b0:4f:c1:63:72:
9a:46:dc:fe:c4:d0:e2:6c:d3:8c:ea:82:e0:75:93:
e3:cc:fe:0f:e2:56:ca:1a:28:5a:66:fa:fb:a7:b8:
a2:f1:b1:f3:1c:af:d6:d1:2d:07:d4:e2:15:f8:95:
1d:a2:d4:bc:ab:74:f9:88:c6:3d:36:f6:42:e7:6d:
e1:6b:dc:ba:6f:2c:0c:f7:d4:18:6f:de:e2:30:0b:
4d:42:77:f6:c2:e6:f5:f5:54:f0:33:4f:b4:1c:1c:
93:ad:01:33:52:db:13:95:e5:8a:2c:7d:99:73:2d:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:C7:2E:AC:11:00:7C:B4:8A:55:2A:95:15:6B:D4:C8:3F:93:C7
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2c:9d:b6:02:28:f7:ba:21:74:72:ef:09:4f:3d:9f:b5:43:
dc:10:5f:8d:70:18:86:b9:11:69:7a:39:fe:b1:4e:42:de:ca:
0d:74:19:b9:ca:85:85:6b:75:13:97:15:07:6c:10:89:ff:86:
a1:a4:75:2c:eb:8b:e9:d4:09:6d:7d:ad:17:1f:a8:68:80:1b:
5b:bb:59:4b:ae:2b:b2:6a:a2:8d:b6:59:02:ef:c1:fd:ea:bb:
22:28:e0:59:45:bd:a0:4f:dd:dc:c8:4d:d5:01:54:77:c8:a9:
52:2f:02:c1:b3:f3:4d:15:f2:4f:d3:b2:86:9f:6d:f0:48:43:
ac:e0:8b:19:fd:b0:cf:00:b6:90:bd:17:04:35:81:3f:77:2f:
4c:1c:83:58:18:3a:12:f9:84:2b:5d:95:b3:12:5d:7e:43:a6:
01:02:95:80:f3:9c:82:06:e8:6d:34:25:de:f6:63:84:d7:12:
93:95:6b:10:9b:bf:36:45:7f:45:9b:b3:69:0d:d9:5f:f4:17:
e4:ac:11:0c:41:c9:9c:11:f1:46:84:cc:b5:ce:5a:39:f7:93:
84:bb:86:61:78:16:37:cc:14:8d:ab:f1:ee:34:f1:45:7e:e8:
8f:2f:6d:64:15:b0:1d:79:a6:f5:7c:b9:b2:ce:e5:9c:b5:c6:
cc:14:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:55:05 2026 by rpki-client