Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
File: ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft (raw, json)
Hash identifier: l81lmN+3wpXJJCM1YAGIs8peL2ACuNlSHysKgZ1gjYs=
Subject key identifier: F2:5A:D8:F1:62:FC:AD:CE:D7:97:7C:C2:6A:94:2C:D0:88:70:75:77
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 01A0C44486678387A880173D362DE831F732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 14:00:20 +0000
Manifest this update: Mon 21 Sep 2026 14:00:20 +0000
Manifest next update: Tue 22 Sep 2026 14:00:20 +0000
Files and hashes: 1: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (hash: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=)
2: ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl (hash: rLGNfwu+d3B+SrLqQVWD54AcTyrWcp/bKAnnNfsP548=)
3: fHjeWk0X-9p1R4DiQBN0NOabyAY.roa (hash: CXvc3jafQmeKRESg6l+phyxsh/MDhMbCl7fOLISnWT8=)
4: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (hash: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:86:67:83:87:a8:80:17:3d:36:2d:e8:31:f7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Sep 21 14:00:20 2026 GMT
Not After : Sep 22 14:00:20 2026 GMT
Subject: CN=f25ad8f162fcadced7977cc26a942cd088707577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:ce:08:41:4c:b9:bb:d8:9e:94:9a:7b:31:
69:b9:d1:5a:53:14:db:95:e7:7e:94:34:43:e8:a0:
e0:20:34:92:8c:6e:43:3d:28:d5:d7:29:1f:25:c1:
d2:6a:f4:28:41:85:76:7d:0d:97:84:d4:39:97:47:
e6:eb:09:00:90:b1:db:76:52:0c:ae:bd:dd:0f:cd:
b5:70:f6:48:f6:6b:de:66:ca:ca:2d:c4:78:02:45:
cf:bb:c8:93:a9:e4:29:97:1f:3d:c2:e0:87:68:d0:
c6:c0:18:48:e6:db:4b:dd:7f:3f:25:36:dc:bd:07:
b8:73:af:41:63:ca:6f:3f:71:a0:af:6e:e3:1e:20:
fb:3f:f5:57:1e:86:ad:a9:c1:3f:96:c1:51:31:a9:
71:d1:10:21:a2:bd:85:13:be:6a:ee:1b:ff:25:5f:
ec:9a:3a:25:2b:9c:cd:18:de:3c:9d:7f:84:6a:60:
0d:65:21:dd:f5:b5:e3:a8:e1:b0:62:6d:4f:b7:16:
31:e9:96:51:ee:8f:7c:62:cd:63:c4:7e:7d:cf:1b:
d5:a1:60:6f:2d:17:82:ad:38:2d:98:fe:2e:fd:a1:
b1:9f:14:5e:b4:c6:e5:7d:79:75:95:89:8b:23:f3:
c8:42:3e:3c:af:24:96:fb:16:d5:d7:e7:0d:1e:80:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:D8:F1:62:FC:AD:CE:D7:97:7C:C2:6A:94:2C:D0:88:70:75:77
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:80:37:a4:88:4a:a4:3b:41:a5:2c:d8:95:c5:44:d6:74:56:
41:0a:64:ae:02:00:fc:11:2d:bf:c1:84:e7:f8:af:e4:d5:03:
a9:0f:ed:87:78:97:df:9a:e4:6a:64:1c:30:81:18:65:42:9e:
be:01:ba:9d:71:39:7d:3b:cd:74:8f:02:cb:a5:1d:e3:c4:4b:
9b:61:b9:da:7c:62:f5:c3:c7:bb:40:c2:e0:ae:e4:77:ac:6e:
77:66:2a:18:79:6a:d6:02:d8:9b:1a:61:70:95:ce:ce:83:4c:
b6:c6:35:0a:32:22:7b:29:64:72:4e:b8:1f:0f:cb:1e:64:73:
a0:7e:e8:b9:a6:51:fe:aa:f9:9f:c8:80:48:11:98:9e:18:63:
4a:f5:7b:38:1b:42:85:91:2d:3e:8b:a6:14:8c:fd:79:9d:45:
e9:4b:ff:43:f4:c6:51:ac:e5:fb:e7:89:83:c7:04:b3:f4:3a:
46:6b:07:46:f0:17:c0:68:03:8d:d7:d3:61:b1:a2:e4:a8:43:
21:a3:21:75:6a:1f:e3:81:14:a0:47:2c:ec:05:a7:69:16:17:
6a:1f:b7:58:fa:8d:53:ff:79:90:98:ed:b8:58:47:59:a3:26:
8f:c7:fb:c1:67:23:03:0a:0a:02:87:2a:d3:c6:fb:aa:ed:c6:
6e:de:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:08 2026 by rpki-client