Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier: S9Y7kGfB4M749hCr0Z5oyzgqHFxPUNzAbMw5212OOUg=
Subject key identifier: 59:A3:B6:34:1E:15:DA:8C:4B:AC:1B:0D:98:01:CD:27:5A:6C:BC:D0
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 01A0E475A1FEE82A298B184684B7B1F58DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 20:01:49 +0000
Manifest this update: Sun 27 Sep 2026 20:01:49 +0000
Manifest next update: Mon 28 Sep 2026 20:01:49 +0000
Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: xZS7diP+0tGMgXhZCXnr5nkMgARAMPjCO7F9UXJXVvg=)
2: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (hash: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:a1:fe:e8:2a:29:8b:18:46:84:b7:b1:f5:8d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Sep 27 20:01:49 2026 GMT
Not After : Sep 28 20:01:49 2026 GMT
Subject: CN=59a3b6341e15da8c4bac1b0d9801cd275a6cbcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f0:ff:1d:6c:3d:f2:50:62:e8:27:c5:a9:38:
9f:6a:cf:1f:f8:23:54:75:51:c0:7b:f2:25:a6:33:
a4:fe:53:01:f4:7a:01:de:15:44:cf:19:52:7a:b0:
5f:61:0b:93:94:29:7a:18:0c:d8:f2:dc:87:e1:7f:
42:b4:cd:72:f0:bc:83:cd:80:cb:cf:0c:b9:c7:1d:
31:ad:48:b4:d1:1b:14:ed:2b:06:a3:03:27:f9:aa:
37:2a:f3:60:fe:f4:39:16:60:4e:c9:50:37:ed:63:
f5:20:6f:bb:2f:ec:ee:a1:79:69:ec:c0:7e:f3:77:
91:d5:d9:c6:e9:42:a3:c3:5f:0b:49:81:cf:62:85:
b7:38:2a:60:13:e9:17:e8:22:db:6e:ad:c6:fc:6e:
87:28:e3:d3:ed:d4:c2:5b:68:11:82:36:a7:6e:ff:
60:47:6a:ed:d4:78:b9:89:28:f1:91:93:3e:ec:de:
88:31:a9:81:5f:e6:75:eb:a9:a9:8d:4c:8b:d0:cc:
81:1a:86:41:68:bc:a8:ec:53:cb:34:35:ec:dc:46:
bc:6d:f3:c6:af:9e:b5:73:c1:b4:31:9b:a3:87:1d:
79:71:d7:d5:ea:65:b0:7b:5a:b4:90:5d:c2:02:0e:
5b:f4:6c:f7:42:48:4e:5a:f7:a8:40:c6:17:e9:65:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:B6:34:1E:15:DA:8C:4B:AC:1B:0D:98:01:CD:27:5A:6C:BC:D0
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f8:26:b4:6a:3a:59:ce:5d:db:65:07:38:ab:72:c4:ac:ae:
44:fc:3c:d0:fd:ab:da:f8:88:f7:ce:01:7a:ba:3b:a4:48:53:
d3:85:b5:cb:2e:8e:52:6b:8a:40:23:e1:d4:2a:d1:b1:23:4c:
69:eb:78:cb:56:64:8c:98:12:86:61:dd:28:75:f4:aa:94:b1:
d5:21:84:59:9a:c2:c5:53:bc:10:29:af:36:01:20:c0:b3:84:
68:9c:f4:59:cf:a6:a5:cc:0b:2f:0d:f2:88:5f:fb:d9:e9:df:
ee:0e:c3:fc:7b:85:11:bf:aa:8e:8c:06:9c:04:fc:53:ef:0b:
f1:e4:b9:5d:cd:2f:5b:f3:21:52:a5:69:b3:57:3f:ae:3f:45:
42:c6:0e:31:c8:1b:b7:bf:be:15:86:4b:41:80:ed:fa:ee:0e:
48:42:f0:0c:f7:bd:63:e5:c7:df:14:36:ae:c6:33:66:bb:c0:
12:3e:e2:e1:2e:08:86:fd:49:c0:0e:96:3d:d7:4a:1e:1c:27:
fe:1f:c4:93:48:86:40:7b:0f:8f:19:bf:54:67:7e:aa:cb:4f:
5b:60:33:3c:52:e1:11:d0:a7:0c:7d:94:cb:e3:46:89:1e:04:
50:9e:8c:29:f1:6b:69:8c:35:73:3f:fb:c2:40:d3:48:36:e3:
55:05:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:10:09 2026 by rpki-client