Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: VGXENi6txXjJqOmjQc3lCM84OguDq11g+ZjEUcoHIGw=
Subject key identifier: FC:08:05:B9:DA:33:5B:45:53:82:E3:F7:43:02:31:62:FA:FA:3B:40
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 019FA8992546D06658E4B1C998D1947B08E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:36 +0000
Manifest this update: Tue 28 Jul 2026 12:00:36 +0000
Manifest next update: Wed 29 Jul 2026 12:00:36 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: 6/PcyYeUDhBKFzBu48H1vV1YKxhfkD3ZZ6lCunysFgA=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:25:46:d0:66:58:e4:b1:c9:98:d1:94:7b:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Jul 28 12:00:36 2026 GMT
Not After : Jul 29 12:00:36 2026 GMT
Subject: CN=fc0805b9da335b455382e3f743023162fafa3b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:eb:27:9c:72:45:57:df:56:30:8b:2e:04:
3c:69:ef:ae:13:43:b5:10:f0:9b:38:0c:83:4a:df:
05:66:81:0a:f1:6c:c6:15:20:d7:18:c5:71:14:57:
d5:17:99:43:7b:95:1b:df:6d:4b:1e:0c:c3:49:1c:
5b:f0:2f:f3:c4:69:cb:19:56:da:8c:66:32:f3:70:
d7:99:e9:a7:17:6c:ef:e0:c3:a9:5f:a7:1a:b0:a6:
20:bd:73:66:b0:69:4e:35:92:0e:0b:a5:00:46:62:
33:23:13:c6:60:3a:89:50:d2:dc:af:a5:e5:a2:40:
80:9a:1b:1f:05:6b:b3:2a:7e:9b:d0:79:bf:4a:cc:
8a:76:a4:15:73:06:f8:50:f1:08:6c:0d:a7:be:57:
4a:0e:ed:ac:3a:30:5e:6e:6c:cb:db:e6:a3:dd:67:
48:5c:3b:f4:6d:f5:c1:fc:dd:6c:46:dc:ee:b3:cc:
6e:69:36:86:c9:b1:78:de:29:26:1c:8c:fd:f7:35:
f0:d5:e0:24:b3:af:40:31:11:41:a1:60:79:fa:d8:
5b:e8:6b:8f:fb:cf:d4:a1:7d:fe:65:aa:82:5d:03:
a6:a3:18:2d:7a:56:7b:15:10:14:7d:88:0b:92:ef:
66:0e:4d:73:8c:be:a1:73:7c:fd:10:10:31:cc:e7:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:05:B9:DA:33:5B:45:53:82:E3:F7:43:02:31:62:FA:FA:3B:40
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c9:1c:4f:28:a1:d1:e9:3b:44:2f:ea:d8:9f:d9:04:a6:19:
23:59:23:d5:18:25:27:93:8b:46:64:b3:c0:64:42:ec:34:b6:
a8:3d:71:84:e4:6a:da:56:5f:c7:78:ac:6a:a2:d9:78:53:96:
79:60:10:cf:e0:5c:4b:1a:d7:f3:e7:bd:4f:ac:e2:ce:01:ff:
98:c0:8a:41:97:44:31:8c:48:5b:98:cd:bb:be:f8:1c:38:96:
73:85:51:78:94:29:68:07:e3:78:15:18:32:fe:79:e4:cb:b5:
c1:80:7c:94:a8:1d:fa:73:c1:31:fc:5d:bb:99:32:8d:11:8a:
f4:16:49:2f:a5:cb:7c:0c:38:b7:df:9b:59:09:9c:b3:d2:6b:
03:ff:b7:c0:dd:1d:c0:00:5b:e6:81:5b:34:de:3d:0b:30:f1:
86:fb:a5:ff:3a:58:31:68:85:1c:8e:b6:4a:db:ab:64:75:27:
a0:32:fa:92:93:84:2e:0b:ac:07:d1:20:3a:e8:b6:7e:ed:c9:
34:72:18:46:a5:4c:36:8c:5a:40:72:f1:ce:86:6f:93:9b:af:
80:62:fe:1e:f6:75:5f:b6:28:5b:fd:2d:7d:d0:c6:e8:44:d5:
0b:59:32:fd:17:cd:06:b2:96:0a:56:b7:87:c1:8d:e4:61:48:
ac:b2:56:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omSVG0GZY5LHJmNGUewjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDJhNzQ2MzRmODYxMTdkYzEzZDFhOTI2MDQ3MGRlZWU2
Zjc2YjUwHhcNMjYwNzI4MTIwMDM2WhcNMjYwNzI5MTIwMDM2WjAzMTEwLwYDVQQD
EyhmYzA4MDViOWRhMzM1YjQ1NTM4MmUzZjc0MzAyMzE2MmZhZmEzYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWTrJ5xyRVffVjCLLgQ8ae+uE0O1
EPCbOAyDSt8FZoEK8WzGFSDXGMVxFFfVF5lDe5Ub321LHgzDSRxb8C/zxGnLGVba
jGYy83DXmemnF2zv4MOpX6casKYgvXNmsGlONZIOC6UARmIzIxPGYDqJUNLcr6Xl
okCAmhsfBWuzKn6b0Hm/SsyKdqQVcwb4UPEIbA2nvldKDu2sOjBebmzL2+aj3WdI
XDv0bfXB/N1sRtzus8xuaTaGybF43ikmHIz99zXw1eAks69AMRFBoWB5+thb6GuP
+8/UoX3+ZaqCXQOmoxgtelZ7FRAUfYgLku9mDk1zjL6hc3z9EBAxzOcH7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwIBbnaM1tFU4Lj90MCMWL6+jtAMB8GA1UdIwQY
MBaAFErSp0Y0+GEX3BPRqSYEcN7ub3a1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAt
YzBmNzk4MzM1MjdmLzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAtYzBmNzk4MzM1Mjdm
LzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMkcTyih
0ek7RC/q2J/ZBKYZI1kj1RglJ5OLRmSzwGRC7DS2qD1xhORq2lZfx3isaqLZeFOW
eWAQz+BcSxrX8+e9T6zizgH/mMCKQZdEMYxIW5jNu774HDiWc4VReJQpaAfjeBUY
Mv555Mu1wYB8lKgd+nPBMfxdu5kyjRGK9BZJL6XLfAw4t9+bWQmcs9JrA/+3wN0d
wABb5oFbNN49CzDxhvul/zpYMWiFHI62SturZHUnoDL6kpOELgusB9EgOui2fu3J
NHIYRqVMNoxaQHLxzoZvk5uvgGL+HvZ1X7YoW/0tfdDG6ETVC1ky/RfNBrKWCla3
h8GN5GFIrLJWyQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:08 2026 by rpki-client