Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: L/Ge58yB3XQhO4pKfKfke0rY4badbRQxOBxn55JW4XQ=
Subject key identifier: A6:E6:E1:78:F9:29:44:FF:79:9F:BA:DE:CC:E2:94:BD:0D:71:98:B4
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019CAC4738AC88AD204C8635DBAC6996DDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 0670
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: 6su6G9gD8e3RN4SkscncX7pH8dU.roa (hash: iX/wppA+kslivMcVzyE3n4qWg+QmDXZMKIru9by6tO4=)
2: P_z7orK0Zgg44s5rDtZD3dJwDDc.roa (hash: Fy4vw6rHz/DMfKM0dkbsBBqCTuDGhhGTvCkwunz8DZ8=)
3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: gYSo7g1cTMf+m/snkZ/34r5+lXMRXKhD/yWoJ/WkFkk=)
4: yDJs078T2iNDYrc-RCCciovCva8.roa (hash: wAIVJosG8WMfleHuNPhHwIW5xrgwCwhO3b++VQ3diMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:38:ac:88:ad:20:4c:86:35:db:ac:69:96:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=a6e6e178f92944ff799fbadecce294bd0d7198b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:97:19:a9:4f:f5:0e:81:b3:23:db:ea:20:
11:53:ea:57:8e:06:26:29:e2:d1:9d:73:76:15:ea:
c7:ca:47:78:c6:b0:f7:91:45:69:3f:94:15:cc:f0:
b7:ad:6f:00:11:87:9e:d1:6a:7c:9d:ff:84:d2:90:
d0:7f:66:9c:ad:4c:19:7c:4c:61:12:2e:65:4a:4e:
85:d9:1a:6a:10:10:6a:b8:c9:78:b1:4a:c8:31:4e:
1b:32:ef:ef:b3:da:39:8c:7c:60:64:2f:70:f5:02:
a5:c5:a3:ed:6e:88:30:d5:c2:ab:88:77:7e:4e:01:
df:a1:df:ad:0b:7c:cc:6a:50:31:82:62:80:68:aa:
da:10:07:30:7a:bd:90:ed:fe:50:46:dc:86:40:4d:
f0:81:ec:73:27:25:5f:84:21:40:38:82:3f:0a:f2:
f0:06:81:78:c3:ba:fc:c4:76:c3:eb:bb:62:2f:1a:
bc:0a:b0:fc:22:05:2f:bc:c2:1c:04:7e:78:cf:18:
b3:50:0b:91:5c:ac:a2:e3:57:cd:25:ba:a3:ed:8a:
d5:5d:2a:51:42:69:53:7d:af:46:6a:76:1f:63:cf:
23:3e:bb:90:9c:d6:1d:b0:e7:16:7f:52:f9:eb:1f:
26:5d:96:69:71:5e:3b:f8:79:9f:2a:b2:04:d4:50:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:E1:78:F9:29:44:FF:79:9F:BA:DE:CC:E2:94:BD:0D:71:98:B4
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:25:ee:be:74:f3:86:3f:e5:68:32:0c:89:49:ca:7c:ba:
77:0d:e9:34:a7:9b:19:17:63:0c:8b:d8:c6:0a:c8:7e:8d:c0:
ac:47:dd:3f:4d:94:ce:ed:c8:18:16:2b:94:e9:9f:b5:01:55:
76:e9:53:f4:bd:f3:35:c7:e7:1a:e4:04:09:c4:1e:33:48:24:
50:b2:d9:70:f3:f7:40:ee:29:d2:1d:12:26:b6:c0:80:25:93:
38:c2:3a:5e:f3:2b:a3:69:c9:ee:73:0d:6e:ad:13:19:f0:6a:
02:81:4c:ff:b1:e5:b0:d9:99:a7:54:da:0c:62:f8:17:3a:c4:
d0:29:08:38:95:fa:68:c0:80:e8:67:cc:2f:1d:a8:1a:bc:e7:
13:e3:27:ac:cd:f5:09:43:7f:75:52:86:7c:3f:ed:b5:7b:d8:
24:44:6c:97:55:7f:db:41:35:ab:13:4a:89:93:fe:48:b7:4c:
2e:be:1e:7a:a5:5d:a7:15:b0:bd:d4:66:3d:66:64:e8:d7:7c:
22:17:8f:49:44:ba:ee:51:27:ee:74:80:d6:94:f1:3f:04:2e:
0f:a6:71:72:96:33:5a:4b:53:de:04:d5:28:19:3f:8d:52:8e:
3b:dd:20:0e:0c:07:2d:63:78:97:61:46:27:df:c1:bc:77:5a:
9a:16:a5:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzisiK0gTIY126xplt24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj
YTMzZTgwHhcNMjYwMzAyMDIwMTE0WhcNMjYwMzAzMDIwMTE0WjAzMTEwLwYDVQQD
EyhhNmU2ZTE3OGY5Mjk0NGZmNzk5ZmJhZGVjY2UyOTRiZDBkNzE5OGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsCXGalP9Q6BsyPb6iARU+pXjgYm
KeLRnXN2FerHykd4xrD3kUVpP5QVzPC3rW8AEYee0Wp8nf+E0pDQf2acrUwZfExh
Ei5lSk6F2RpqEBBquMl4sUrIMU4bMu/vs9o5jHxgZC9w9QKlxaPtbogw1cKriHd+
TgHfod+tC3zMalAxgmKAaKraEAcwer2Q7f5QRtyGQE3wgexzJyVfhCFAOII/CvLw
BoF4w7r8xHbD67tiLxq8CrD8IgUvvMIcBH54zxizUAuRXKyi41fNJbqj7YrVXSpR
QmlTfa9GanYfY88jPruQnNYdsOcWf1L56x8mXZZpcV47+HmfKrIE1FATgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbm4Xj5KUT/eZ+63szilL0NcZi0MB8GA1UdIwQY
MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt
Njg5YmE0ZDMzYzRiLzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi
LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5sl7r50
84Y/5WgyDIlJyny6dw3pNKebGRdjDIvYxgrIfo3ArEfdP02Uzu3IGBYrlOmftQFV
dulT9L3zNcfnGuQECcQeM0gkULLZcPP3QO4p0h0SJrbAgCWTOMI6XvMro2nJ7nMN
bq0TGfBqAoFM/7HlsNmZp1TaDGL4FzrE0CkIOJX6aMCA6GfMLx2oGrznE+MnrM31
CUN/dVKGfD/ttXvYJERsl1V/20E1qxNKiZP+SLdMLr4eeqVdpxWwvdRmPWZk6Nd8
IhePSUS67lEn7nSA1pTxPwQuD6ZxcpYzWktT3gTVKBk/jVKOO90gDgwHLWN4l2FG
J9/BvHdamhalDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:20 2026 by rpki-client