Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: VwEYsQtxNnXLOJ0C+bvlmRLVl1hlRU2QKsNBDGsoCiw=
Subject key identifier: AE:FD:72:F2:A8:A0:D9:38:5B:B0:B2:AF:D6:02:56:4B:EA:32:4E:71
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019D99D06E4283892500FDB99FB47AB6D9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 06EB
Signing time: Fri 17 Apr 2026 05:01:06 +0000
Manifest this update: Fri 17 Apr 2026 05:01:06 +0000
Manifest next update: Sat 18 Apr 2026 05:01:06 +0000
Files and hashes: 1: 6su6G9gD8e3RN4SkscncX7pH8dU.roa (hash: iX/wppA+kslivMcVzyE3n4qWg+QmDXZMKIru9by6tO4=)
2: P_z7orK0Zgg44s5rDtZD3dJwDDc.roa (hash: Fy4vw6rHz/DMfKM0dkbsBBqCTuDGhhGTvCkwunz8DZ8=)
3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: GqJ1b3VgIzgFbBIG4WjghXgE/wHLCp0yIvjSheQ9Gok=)
4: yDJs078T2iNDYrc-RCCciovCva8.roa (hash: wAIVJosG8WMfleHuNPhHwIW5xrgwCwhO3b++VQ3diMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6e:42:83:89:25:00:fd:b9:9f:b4:7a:b6:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Apr 17 05:01:06 2026 GMT
Not After : Apr 18 05:01:06 2026 GMT
Subject: CN=aefd72f2a8a0d9385bb0b2afd602564bea324e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:00:29:c9:4c:cd:0b:71:75:76:69:fc:99:
9a:8b:a5:9a:08:a9:3b:73:90:97:9d:93:f0:aa:94:
6c:20:5c:b4:d8:be:49:fb:fe:94:e9:4b:01:5f:0f:
b8:a5:ad:a0:f4:84:11:30:79:aa:2f:e6:69:0a:10:
ed:bf:78:d8:d5:af:24:51:fc:67:4d:52:55:59:b0:
d8:66:3d:0b:0e:cf:f5:41:6f:8b:c5:22:98:9d:10:
db:42:3b:b1:a1:33:6a:d9:33:d2:e9:87:e2:47:d6:
1f:47:7a:cb:85:d5:49:5f:44:36:51:14:64:63:09:
66:15:82:95:f0:28:78:c3:7c:d9:13:ff:58:e8:c1:
d0:81:f0:ef:0c:66:c8:5c:56:6f:da:f0:ce:d3:52:
25:be:6a:bc:23:5a:5e:37:ed:f6:ad:1f:49:02:44:
bb:25:a0:82:f8:e4:26:1e:9d:f8:a1:f9:a8:c9:6c:
da:a3:87:d5:f1:b4:82:76:91:df:0a:8f:69:4e:5f:
24:62:cf:24:53:d2:cf:6e:03:6c:e5:b1:23:c9:65:
e5:03:84:ca:4b:b0:55:31:52:99:e8:50:26:4c:ec:
8c:9c:a0:b1:25:27:41:fa:e9:91:79:6c:bb:39:f5:
f1:44:6a:fb:26:4c:61:0c:5f:50:d1:7e:ae:d4:61:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FD:72:F2:A8:A0:D9:38:5B:B0:B2:AF:D6:02:56:4B:EA:32:4E:71
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:2d:2f:dd:ef:f8:8e:f0:58:dd:75:b5:ce:97:74:d4:28:
78:d7:48:00:2a:f9:03:bc:db:cb:ac:fa:85:2e:a3:6d:0f:e7:
0f:74:1d:18:de:d4:03:66:77:bd:38:25:69:b8:19:99:30:64:
b7:b8:e1:c9:e4:12:5e:19:c0:76:65:13:c8:cf:39:1f:94:38:
44:de:94:bb:05:b2:4f:fa:6b:97:c5:62:42:b0:b6:9b:71:49:
c7:16:40:49:a1:95:b6:6a:c6:9c:77:a4:e8:ba:d3:b3:fe:b0:
ea:0b:93:94:9a:26:9b:6a:55:59:2c:2c:04:61:4c:57:53:6b:
00:f0:df:80:db:c7:8f:05:f4:73:84:9f:d9:34:0e:af:f7:cf:
ae:4a:43:83:3c:59:74:ad:fb:04:9f:9e:08:f5:3d:de:aa:4a:
a5:e7:dc:55:3a:d2:85:19:5f:a8:ef:b5:45:f9:ae:39:28:86:
4d:93:5a:46:35:aa:6a:a4:d1:91:47:1e:9d:52:11:a3:d6:aa:
e9:fe:73:bd:29:00:b0:51:53:18:fa:cd:36:db:c8:bd:fd:a7:
7f:de:79:12:09:69:ce:d6:af:66:8b:46:a9:48:49:52:f9:57:
2a:a6:be:03:75:ff:e5:fd:d0:eb:4e:ed:32:90:f5:10:91:83:
13:71:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:31 2026 by rpki-client