Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier: YP5Zy1lJHazKw31hCVcZ9nrmwBWZNYB9GOkmvcVtqeg=
Subject key identifier: D9:5B:3F:94:B9:F5:F6:8E:FE:9A:6D:CF:89:C8:BE:94:2A:A4:50:31
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 019DA41CEEDB4AA1782DBF88BC1C3BDDB20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number: 1574
Signing time: Sun 19 Apr 2026 05:00:52 +0000
Manifest this update: Sun 19 Apr 2026 05:00:52 +0000
Manifest next update: Mon 20 Apr 2026 05:00:52 +0000
Files and hashes: 1: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: 0hC8Qf3tiCSDpDqj8RlDiYPzlsYvDY2+a3X+r/Rxga8=)
2: YW79Yef_XcQH-yQeSEH6dsBEV58.roa (hash: OnfUE3JgvIAolLyP0DJV9UMqit9OdFdesv9RsZ2Z4TI=)
3: qHkKc6qThO5LVCCZnqTx59tVQVQ.roa (hash: hYX8MCTn1ruNTten5OGMYptvMIuzTBWfYXGAUvW3g24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:ee:db:4a:a1:78:2d:bf:88:bc:1c:3b:dd:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Apr 19 05:00:52 2026 GMT
Not After : Apr 20 05:00:52 2026 GMT
Subject: CN=d95b3f94b9f5f68efe9a6dcf89c8be942aa45031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:2a:53:ed:fd:27:de:25:57:bb:76:26:a2:
73:60:e1:54:cc:a0:a4:e4:0f:b1:b3:5f:71:d4:94:
71:43:fd:c2:a9:71:03:33:ed:23:c0:36:87:36:3b:
e4:0f:03:13:8b:c5:7b:b9:12:82:4d:46:0b:0b:d4:
2a:67:c8:d9:08:39:1b:f1:07:87:1c:e3:c9:e2:ea:
0b:8e:f7:2e:3a:6e:c8:d1:f7:6a:67:f3:2e:53:3f:
45:ed:4b:b0:da:68:fe:bc:47:1d:a2:92:22:f2:63:
bc:25:0b:85:6d:66:e6:17:ab:18:79:50:63:7a:ef:
a9:f1:d6:11:70:a1:51:60:0b:10:fb:15:0f:3f:c9:
0e:df:a7:35:70:23:f7:49:8e:5c:57:30:44:d4:2b:
49:ee:fa:33:41:f9:fc:cc:d0:55:0e:f8:e9:4a:5b:
b4:85:cf:45:5f:34:3c:01:88:6a:5b:1e:6c:56:3f:
c9:02:70:e7:ff:62:e9:db:a3:61:d4:0b:63:3a:90:
84:e9:d2:d9:01:55:93:c5:38:00:16:81:c6:e1:60:
8b:3f:b1:0e:40:b3:a7:6d:3d:b8:1f:cf:0f:39:f4:
00:8b:3c:21:e0:7a:df:80:7b:3f:b4:91:f4:d9:c6:
6f:e1:ff:d3:9e:46:e1:be:a4:c0:93:87:c9:c2:94:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:3F:94:B9:F5:F6:8E:FE:9A:6D:CF:89:C8:BE:94:2A:A4:50:31
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:53:e5:4b:02:f4:97:f9:87:16:be:68:5e:5e:ae:22:6c:
85:e3:73:71:72:7b:ac:2c:61:7d:8f:67:26:03:7c:89:11:59:
5a:e5:3a:69:e3:f8:03:9b:2d:19:de:5f:67:0b:b6:45:34:22:
d8:8c:34:6a:c1:2c:cb:c1:58:c7:25:5a:df:6c:9a:fb:a9:dd:
34:a5:c0:54:e6:40:39:d9:38:4b:c0:98:d6:c1:b7:81:bb:e8:
6c:42:c1:2f:b0:1d:02:32:38:aa:68:5c:e8:eb:ab:5b:70:a4:
6d:ca:4f:2b:86:89:39:60:46:b8:a3:1f:3c:52:5d:da:b0:4c:
f3:81:21:33:3a:9c:1e:80:37:a0:39:b3:28:4f:79:39:b5:d0:
21:3a:cb:45:0a:e9:17:d2:5e:1c:50:89:66:6e:50:c2:52:14:
7e:6e:db:60:b6:6c:d8:34:5c:b8:a9:fa:57:e5:c6:23:8b:c8:
dc:75:46:04:bf:d4:59:73:f3:fd:2c:cf:35:ff:4c:fa:4f:d8:
c2:fc:9d:e3:cd:a9:f7:58:81:d2:dd:6f:32:e0:7b:2e:b6:1b:
0d:84:c3:a8:48:96:32:4a:61:a1:cf:fe:18:cb:d5:2e:db:83:
e0:60:3f:cf:cd:3f:24:80:cb:a4:8e:2e:d6:99:38:ff:72:ce:
09:f0:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:37 2026 by rpki-client