Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
File: ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft (raw, json)
Hash identifier: cHOI6S9PpZ+Px18Ny1sPvpectUMVm5Fot2N2sNKcAx8=
Subject key identifier: 1E:60:10:B9:08:FD:28:5B:B7:1D:C8:37:DB:BC:F7:0A:00:55:37:CF
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 01A1DF1527ACE3892A6684F388194A494373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
Manifest number: 0151
Signing time: Sun 15 Nov 2026 12:01:07 +0000
Manifest this update: Sun 15 Nov 2026 12:01:07 +0000
Manifest next update: Mon 16 Nov 2026 12:01:07 +0000
Files and hashes: 1: 7YaL6PY_sroo1Zf11ji6qRi_7lk.roa (hash: qz6+US2SLy4x2h5vs1rwSF0WDuZKap7YcM7RTdhaafw=)
2: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (hash: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=)
3: ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl (hash: 32cyH7JNsdXP6uW3+DIYimQU8EZF9VLHy6Nn53ezesI=)
4: fHjeWk0X-9p1R4DiQBN0NOabyAY.roa (hash: CXvc3jafQmeKRESg6l+phyxsh/MDhMbCl7fOLISnWT8=)
5: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (hash: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:27:ac:e3:89:2a:66:84:f3:88:19:4a:49:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Nov 15 12:01:07 2026 GMT
Not After : Nov 16 12:01:07 2026 GMT
Subject: CN=1e6010b908fd285bb71dc837dbbcf70a005537cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:fa:ef:dc:92:ce:e6:fd:2f:6c:b6:49:99:
f4:70:27:54:7d:32:95:31:3e:d0:59:7c:6f:05:ec:
37:92:3e:7c:6f:31:ed:3b:71:13:f2:1c:6c:69:31:
09:e5:32:d9:df:fc:8f:ed:07:b2:36:6c:bc:db:e5:
b5:9f:44:b9:ed:bf:1c:a1:d2:8c:a8:c3:a3:10:0e:
ca:0a:c6:59:c4:60:f1:f3:fb:7c:89:e9:3d:33:d4:
ac:0e:6d:f1:b1:d6:73:85:0c:06:f2:7d:ee:8d:0a:
4e:d9:b7:2b:81:c5:94:ce:2d:f9:a8:19:6f:37:ae:
1e:e9:2e:c0:2c:ee:ab:27:a6:6d:e1:c6:4d:bc:b8:
c8:e4:a5:23:39:f7:cb:23:f8:5f:d5:4a:d2:17:06:
3f:8c:bf:7c:47:6c:58:b5:e7:8e:30:35:5b:d7:8f:
e3:4d:b1:33:7c:5c:41:be:7b:e8:62:7e:75:49:46:
d3:44:97:7d:10:bf:52:d2:cd:0a:4a:9c:d7:1d:11:
9c:2e:3a:81:78:35:1d:d6:ed:fc:b3:1b:f1:39:4a:
c7:09:c1:82:21:c0:d5:1c:64:c5:26:9a:a9:02:57:
7d:de:1b:e3:88:eb:80:b0:ad:6c:48:ae:de:22:f8:
c0:4d:ec:0f:2b:f3:4d:58:49:d6:8a:c3:92:62:b3:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:10:B9:08:FD:28:5B:B7:1D:C8:37:DB:BC:F7:0A:00:55:37:CF
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:73:e1:e9:60:e7:a7:6d:04:b6:ef:1c:c5:41:08:56:39:74:
b5:05:00:16:27:4c:36:1e:01:a3:7b:ef:c0:dc:ec:7c:bb:92:
b4:8b:20:18:5a:50:4a:2b:fe:2e:ec:66:8d:52:d3:55:fb:5a:
80:ac:46:60:92:04:1f:3a:40:0b:0c:3c:75:3f:82:fe:15:65:
92:20:ae:81:12:fc:6c:02:35:8c:bf:29:91:bd:dc:18:aa:ae:
e8:4c:dc:9d:bf:5c:1e:66:12:2b:a4:84:af:e0:ea:6e:32:34:
ec:11:2f:4c:61:57:33:68:61:81:bc:2b:e9:f1:48:0a:d7:4a:
90:14:68:a2:f5:7f:25:3f:81:68:4f:b0:34:49:b9:b8:1d:3d:
64:91:e5:c1:70:b5:32:5d:77:7b:59:da:f2:83:8a:d4:bf:85:
b9:14:42:f2:11:41:aa:be:93:36:a2:b5:a5:61:1e:39:a9:3d:
a6:de:81:88:bd:c1:e8:7e:9f:1d:b9:a4:9e:70:4f:c3:10:a1:
d1:da:97:3c:60:e8:5e:76:16:a6:45:e6:8f:52:95:6b:c4:79:
2e:2b:90:ee:00:a7:70:57:8e:12:6c:87:da:0a:5d:73:68:3e:
cf:24:f0:73:af:e0:73:10:14:f0:70:16:9f:d9:ae:5a:3f:0c:
65:c4:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:02:31 2026 by rpki-client