Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: 5VhJg/3WtuUN6KF/mFtYlY1YjoaEHSmOCVt7wm35OSA=
Subject key identifier: A3:C0:A0:9A:AA:36:2B:CD:62:BA:3C:2C:34:21:28:A3:44:32:50:B3
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 01A0C858D465E42B8270CAFFD648DD93E4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:59 +0000
Manifest this update: Tue 22 Sep 2026 09:00:59 +0000
Manifest next update: Wed 23 Sep 2026 09:00:59 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: IX/GIZzEGKSTIRBZX4MxO8hQOzOT7aGlOZ3nXhdXrf4=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:d4:65:e4:2b:82:70:ca:ff:d6:48:dd:93:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Sep 22 09:00:59 2026 GMT
Not After : Sep 23 09:00:59 2026 GMT
Subject: CN=a3c0a09aaa362bcd62ba3c2c342128a3443250b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:be:dd:14:3c:1b:d1:4e:43:b2:d8:e2:3e:
c5:19:f3:17:78:4c:82:46:56:8b:9d:09:5b:41:69:
9a:02:35:2e:3e:d3:e7:c4:34:71:04:68:04:33:90:
36:05:a9:b6:cd:2f:7c:8f:a1:34:48:36:cb:54:5e:
f3:64:f4:93:f7:80:8d:92:f1:4d:67:35:61:54:58:
a7:bd:3d:de:e1:33:a2:8b:12:72:2d:2f:d7:df:0d:
c7:d0:29:de:89:c7:26:77:04:44:57:1c:c4:1b:d5:
83:03:34:27:c8:d8:a0:13:02:fc:aa:69:4c:26:3c:
10:c8:35:c9:bc:f0:7c:f7:88:34:42:ad:cf:c1:7e:
a8:4b:36:95:be:0d:5c:9b:58:6d:44:31:36:14:67:
ad:6e:74:d9:84:43:77:b6:a0:b1:24:fc:e1:ae:db:
89:ec:0b:49:32:d1:54:9b:8f:24:ab:8a:d9:af:ff:
22:e3:ea:6e:5e:42:5f:e6:a2:68:2e:e2:f6:96:40:
9b:3a:7b:c1:2c:be:9c:77:40:a0:b6:99:9f:72:54:
9b:7f:07:99:21:ce:d8:ea:57:bb:3b:93:16:e1:86:
00:9e:14:17:65:dc:a1:82:0d:52:f2:af:cf:d6:a4:
b3:f3:42:14:83:fd:23:d2:57:fe:d9:a0:5a:c4:5f:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:A0:9A:AA:36:2B:CD:62:BA:3C:2C:34:21:28:A3:44:32:50:B3
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:70:ef:fb:2a:88:d5:41:68:80:23:e9:3f:43:f9:3d:f2:09:
23:de:5e:bf:26:ee:52:74:60:8d:79:4b:f5:60:80:e9:7a:1a:
c6:93:5e:c6:e0:61:9b:81:3e:b2:7f:a3:a4:63:e2:fc:ea:91:
49:51:08:cf:77:1d:d2:04:9f:72:81:9e:74:e6:35:f5:0f:5d:
98:9b:7c:01:1a:73:f6:c4:17:60:69:5e:c5:ed:e2:dc:10:83:
b1:6a:ce:6d:8a:d7:d2:56:0f:14:84:fb:a0:f6:0d:3b:89:27:
98:42:10:a4:bf:38:e9:90:4a:68:62:0e:3c:ac:70:5e:85:52:
d0:e2:3d:a7:a1:eb:3d:00:7f:4b:62:d7:f9:b7:54:c9:a5:37:
6a:0f:3d:63:44:c7:85:c8:a6:f1:f2:76:ae:00:5b:79:6d:60:
3c:e9:51:4d:8f:82:cc:28:c2:19:4e:11:cc:0c:b5:08:91:ee:
7a:20:50:ca:92:0c:76:b6:92:13:3d:07:83:83:b6:5c:eb:7b:
d1:53:46:8c:e4:3d:17:1d:3b:57:84:48:24:34:ac:45:67:f0:
4e:57:86:6f:fa:d0:18:cd:50:4e:8a:14:df:c9:04:05:c1:91:
34:f5:5f:b5:ea:46:b8:e6:fc:34:75:e0:0c:99:e8:df:29:95:
60:2a:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:52:09 2026 by rpki-client