Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: gO5txct7ZAGa2a+EBZ6QT9H5SPmBz2hAJdQwL29aElE=
Subject key identifier: AE:CC:A9:F2:30:9D:70:DF:A7:FD:34:8A:92:2D:C6:D8:57:97:54:59
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 019F8F7E5BA181294518CB0BD0B861C90356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:50 +0000
Manifest this update: Thu 23 Jul 2026 15:00:50 +0000
Manifest next update: Fri 24 Jul 2026 15:00:50 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: ehLQhd7OYjaaXvcI4j27JddnAs1LOX19RlYCvTb38R8=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:5b:a1:81:29:45:18:cb:0b:d0:b8:61:c9:03:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Jul 23 15:00:50 2026 GMT
Not After : Jul 24 15:00:50 2026 GMT
Subject: CN=aecca9f2309d70dfa7fd348a922dc6d857975459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:8b:8c:e9:7f:e8:5d:72:40:27:6e:49:d2:
94:13:64:fa:29:14:bd:69:8e:d8:6a:a5:24:dd:97:
c4:ca:5e:d3:19:58:dc:67:bc:bd:db:4b:ed:80:17:
56:ab:e6:0c:45:bd:59:8c:2d:6c:7a:15:22:41:c0:
5f:4f:f7:3c:e6:4f:f8:d6:2d:59:b0:b0:fe:df:6d:
ad:7e:fb:90:ab:98:2e:db:b7:11:e8:09:7a:e2:cc:
9b:e7:ac:85:b3:94:e1:19:f4:82:77:76:d4:cd:0f:
61:7d:fc:9e:33:bb:82:7d:c5:c7:b2:8a:5e:e2:61:
a6:c1:2d:7b:e5:04:9c:e0:dd:26:4e:06:71:86:61:
f8:21:11:69:a2:62:57:97:08:5a:84:31:75:72:a5:
d7:f5:ca:8c:d3:14:4a:a6:8f:ea:62:30:b9:30:d0:
ba:aa:0e:0e:2e:92:ac:7f:5e:19:50:1a:66:77:ee:
fd:b3:d6:17:fd:b5:17:2e:f0:7a:b4:21:53:59:6b:
43:1c:1c:ba:c6:b1:ad:19:dc:46:e7:26:b2:32:ff:
89:87:e2:f3:a9:8a:8e:cb:77:fc:88:86:2a:68:be:
d0:7b:97:39:19:4b:4b:b1:ec:71:49:a1:a2:e1:6b:
da:59:39:a6:53:14:e4:63:02:c1:28:86:6e:03:d5:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:A9:F2:30:9D:70:DF:A7:FD:34:8A:92:2D:C6:D8:57:97:54:59
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:50:85:27:9b:49:b1:ec:a1:61:8c:6a:1f:c5:3c:34:a4:
d6:1c:0d:37:4c:11:6e:50:2c:b8:28:7e:15:81:e5:b8:58:68:
26:11:8a:2b:07:b2:32:85:6f:78:22:93:e3:b0:b2:ba:e1:c7:
7a:e9:98:8c:3c:9a:ca:6c:42:d6:77:76:4b:21:4f:25:b0:63:
6d:18:66:ad:fd:65:c0:3d:14:4e:a2:f7:dd:6f:69:60:26:b2:
b1:a3:ca:cb:74:1b:5a:25:8d:22:c6:a4:f8:19:fa:18:24:38:
26:f4:00:a2:36:f0:ba:78:39:64:cd:c1:07:e0:cb:a2:6c:24:
7c:cc:c7:7e:1a:7c:49:de:8f:e4:a6:03:f6:fe:f3:da:34:72:
82:ab:00:5d:06:2d:55:35:df:be:f4:b8:74:d7:fc:eb:e8:cc:
cd:7f:d7:59:6c:4c:ab:70:92:4b:bf:6c:e8:14:97:c6:79:30:
1d:a0:25:7e:31:70:ad:62:e2:c9:7d:69:34:de:ba:76:63:80:
32:f1:07:b6:13:ad:46:d2:b0:0f:ef:c4:bb:3a:7c:35:7c:3a:
42:2b:0e:9c:bf:3e:ba:30:13:36:93:e1:43:f7:d2:e6:24:9e:
45:97:7c:b4:b9:72:3e:47:ac:56:83:b2:49:55:59:cc:07:c7:
16:3e:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:38 2026 by rpki-client