Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: XPU+fWiniGjPCt/tMxqv0LFDL3fF93TQ5Z8pLos1rSI=
Subject key identifier: 4D:CD:41:13:D9:43:7F:A6:32:37:8D:51:A5:5E:A3:72:FB:D9:A3:5A
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019D29CEADDEFCFF9C93073568038B2FFCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 06B1
Signing time: Thu 26 Mar 2026 11:01:43 +0000
Manifest this update: Thu 26 Mar 2026 11:01:43 +0000
Manifest next update: Fri 27 Mar 2026 11:01:43 +0000
Files and hashes: 1: 6su6G9gD8e3RN4SkscncX7pH8dU.roa (hash: iX/wppA+kslivMcVzyE3n4qWg+QmDXZMKIru9by6tO4=)
2: P_z7orK0Zgg44s5rDtZD3dJwDDc.roa (hash: Fy4vw6rHz/DMfKM0dkbsBBqCTuDGhhGTvCkwunz8DZ8=)
3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: MiRQ5LvnXRYfjVkkYtYjg7QnnMBcYzd00ZgcIH+iNrk=)
4: yDJs078T2iNDYrc-RCCciovCva8.roa (hash: wAIVJosG8WMfleHuNPhHwIW5xrgwCwhO3b++VQ3diMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:ad:de:fc:ff:9c:93:07:35:68:03:8b:2f:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Mar 26 11:01:43 2026 GMT
Not After : Mar 27 11:01:43 2026 GMT
Subject: CN=4dcd4113d9437fa632378d51a55ea372fbd9a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:ab:8b:68:4c:01:bc:b1:39:4c:bf:37:39:
23:9f:c9:e7:e7:8b:e4:e7:0b:5c:16:b8:bf:44:5a:
09:ed:de:d3:b1:f6:c6:7f:c1:43:f2:db:88:c4:b8:
dc:3a:48:af:92:db:79:82:a2:58:6f:46:2d:44:b4:
b9:9e:63:ba:de:9e:ab:79:e6:7c:84:3d:ce:18:10:
ea:c0:9b:bc:17:11:e2:69:eb:67:2d:f7:6b:8c:37:
60:d7:28:94:07:55:a5:7b:2a:c7:cf:d5:1d:25:ac:
86:5f:e7:96:84:1c:98:49:79:7d:c9:2b:f4:e0:7d:
20:55:34:57:5a:84:6d:c5:fb:33:48:79:a9:8b:77:
a5:93:61:af:5a:81:f3:bc:4e:d3:ff:2a:71:e1:d4:
50:07:96:c1:58:13:aa:79:e6:9b:82:80:27:be:a8:
b1:f4:be:3c:86:69:a1:77:3d:02:63:78:f2:5b:26:
e4:f5:c5:a9:76:d7:89:cc:5c:3b:96:9c:a2:50:e6:
43:44:cc:8f:16:13:e3:3d:4a:3e:f0:4c:ef:2b:22:
23:d9:52:2f:a5:ee:90:5b:ba:47:9c:8e:e9:a1:3a:
b3:75:92:eb:c2:06:c4:a4:6b:f7:be:14:de:6b:73:
8d:a1:51:5e:8e:b6:bd:86:5d:5d:5d:f5:11:9f:65:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:41:13:D9:43:7F:A6:32:37:8D:51:A5:5E:A3:72:FB:D9:A3:5A
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0f:76:87:4c:5d:98:41:0f:4f:86:ec:88:48:2e:e2:f0:83:
89:19:0f:26:57:ec:1c:59:50:a2:cd:eb:f5:7d:3e:e9:c3:aa:
fe:b1:49:1e:30:63:7f:34:c3:a8:42:2f:24:24:3a:e1:a7:0f:
42:64:94:3b:e9:67:90:e1:91:5a:f8:d8:93:22:a2:74:13:63:
93:38:5b:0e:be:15:2b:95:00:ca:eb:ad:99:e8:b0:2c:01:0b:
e8:a9:90:e6:29:57:6f:0a:8c:4d:ff:e6:3b:85:5d:cf:54:d4:
e6:7d:3a:c5:84:fd:69:61:be:8d:b6:9e:8a:04:3c:fb:ef:10:
ef:0d:b5:a8:13:bb:37:13:02:86:d2:00:9f:f3:e3:c7:d6:7a:
23:50:4a:16:2f:9f:c7:4f:9a:50:d0:c6:ca:95:90:b2:ac:ec:
52:90:c9:e1:c4:20:4f:8c:61:49:df:60:bc:1d:28:43:02:1b:
0f:dc:83:18:44:91:5f:ac:99:f7:ea:e0:05:62:c1:d7:3d:8f:
c0:5b:e4:ba:bf:be:ed:2c:9c:eb:06:cc:bd:1f:e3:5c:d7:37:
e8:a5:96:53:f2:1a:bb:f3:5c:19:36:d3:f1:a1:f7:01:42:ba:
6b:e1:5f:d5:6c:c3:07:de:1c:33:94:23:71:d2:67:fb:5b:52:
4f:dd:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:15 2026 by rpki-client