Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
File: ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft (raw, json)
Hash identifier: r94c/U8Rzsz3TgheqfoUdQYkCneZ6XT05rBfUeKPc2s=
Subject key identifier: DD:D8:4C:54:2A:4C:DC:90:E4:42:A4:A8:69:A0:88:4D:1B:16:1B:28
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 019FAC3EC6D71D8BE91562C32504C88D5E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
Manifest number: 2C
Signing time: Wed 29 Jul 2026 05:00:22 +0000
Manifest this update: Wed 29 Jul 2026 05:00:22 +0000
Manifest next update: Thu 30 Jul 2026 05:00:22 +0000
Files and hashes: 1: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (hash: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=)
2: ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl (hash: K6wERxDuj9VdSP9nkxIa2VSrlPogfgSLPtpEia+4S1E=)
3: fHjeWk0X-9p1R4DiQBN0NOabyAY.roa (hash: CXvc3jafQmeKRESg6l+phyxsh/MDhMbCl7fOLISnWT8=)
4: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (hash: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c6:d7:1d:8b:e9:15:62:c3:25:04:c8:8d:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Jul 29 05:00:22 2026 GMT
Not After : Jul 30 05:00:22 2026 GMT
Subject: CN=ddd84c542a4cdc90e442a4a869a0884d1b161b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:4a:bc:6b:d9:3d:c8:ce:d6:90:4b:8e:70:
54:e2:37:3b:a3:10:b0:af:26:8e:65:c9:f6:13:14:
3c:59:91:e5:29:38:29:6c:d3:72:0c:3a:ef:14:0e:
46:fe:00:93:fc:be:94:e3:76:06:18:92:fb:e6:1d:
25:b4:01:39:7d:93:e5:20:52:0a:06:a3:33:82:e2:
c8:cc:f4:d9:9b:26:d4:e4:a3:bf:28:52:68:0a:7c:
94:bd:e0:dd:57:65:ac:5e:e5:1c:a3:f2:22:8f:ed:
1d:cb:bf:d6:e2:5b:92:14:4a:52:00:14:b7:16:93:
ea:13:f1:c5:bb:8b:a7:48:50:d2:a2:b4:c2:f8:7d:
a0:a6:4f:32:1d:13:a9:f5:16:2f:11:71:c1:b4:23:
1b:35:ea:0d:1a:d2:dd:20:e4:c5:0d:d2:2d:03:2a:
59:e7:8b:e4:50:0f:d8:b8:d1:76:da:f2:8c:89:db:
b0:2b:fc:fb:4b:39:bb:f5:c6:d7:6c:02:f8:23:2c:
3b:b5:56:d4:f8:13:e9:bf:81:a4:37:6d:f0:78:8d:
b2:db:65:ed:19:79:75:22:42:d3:cc:ef:4e:d9:e9:
ad:e9:de:3e:96:c7:f8:3c:ab:bd:a6:0e:3d:c1:2f:
be:f6:cf:a7:2e:94:6b:96:a5:99:64:d9:11:14:99:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:4C:54:2A:4C:DC:90:E4:42:A4:A8:69:A0:88:4D:1B:16:1B:28
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2a:f6:6a:46:7f:7f:68:7c:2d:90:f1:fe:ab:cf:d6:4b:fa:
45:89:1b:5d:a4:d9:bd:6b:8e:09:cb:69:6b:e9:43:49:20:39:
65:8c:cb:30:d8:d4:3f:8f:7e:af:2c:5c:88:67:10:f9:0b:7a:
99:17:8b:a1:a2:5e:c9:48:db:53:2e:1c:59:ea:a8:5d:39:6a:
19:73:c2:46:2e:a2:77:30:ea:65:86:54:ad:ee:15:e7:f4:ad:
c2:6c:24:9e:58:37:39:e3:b4:54:44:d6:90:34:33:82:1a:0e:
1b:87:25:2c:4a:75:08:ca:7b:2e:33:56:05:5e:72:e4:4e:54:
de:7f:0d:79:af:09:cd:ca:c0:22:43:91:6d:c7:e9:d2:2a:cb:
1f:d8:a5:d9:21:b4:56:26:4b:38:91:fa:d3:e4:ef:f8:e9:ac:
ca:a8:c0:af:24:96:36:b0:a8:49:40:b4:8d:aa:74:c5:11:23:
5a:35:f6:28:ad:e9:0a:b9:1b:8c:21:bd:a4:02:6b:94:c9:82:
96:30:74:00:3f:51:a4:54:7d:78:73:97:88:d8:e1:97:80:ab:
b9:c5:24:f5:2a:2f:31:75:15:e4:c4:9c:25:fc:21:89:d9:bf:
2c:e3:7f:ff:d7:c4:9c:50:02:d5:37:e2:6e:93:89:38:e4:f3:
cd:8a:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:34 2026 by rpki-client