Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: JNejwd6ZbILeChMLcgEaJumbn9URXNuOh1+nntf3ZB8=
Subject key identifier: F6:04:13:21:3A:12:02:E1:10:85:D6:5A:F9:86:6E:D4:37:1D:07:D6
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 01A0CC3667B50424BF480A23139186BD0B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:52 +0000
Manifest this update: Wed 23 Sep 2026 03:01:52 +0000
Manifest next update: Thu 24 Sep 2026 03:01:52 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: kZJB6oZB8dlq6TBdxOFWzQGxYtz/foTWotGqgNliQnU=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:67:b5:04:24:bf:48:0a:23:13:91:86:bd:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Sep 23 03:01:52 2026 GMT
Not After : Sep 24 03:01:52 2026 GMT
Subject: CN=f60413213a1202e11085d65af9866ed4371d07d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:36:12:59:a4:cb:12:d4:0c:8b:85:59:e2:
21:c3:ca:4b:e2:a0:d9:25:d2:73:46:2c:18:d0:af:
d6:4e:66:83:c7:e9:74:cf:d6:e7:c8:1f:7b:8d:d0:
0e:ce:0c:f5:77:53:2e:36:e6:e9:2b:6b:09:10:5c:
9a:17:c5:25:c4:dd:89:83:e2:6e:37:df:bd:89:f6:
5d:d3:c5:01:49:a3:47:34:29:58:b9:0f:f1:ef:a0:
09:eb:8e:d7:38:77:14:2f:d0:cc:e3:8d:2e:11:73:
c9:f5:91:bf:02:d6:44:bd:fa:0b:28:38:95:17:00:
6a:89:1d:ad:47:95:57:c8:67:74:fc:02:c4:c1:ae:
54:79:d1:81:4e:ba:f3:b3:06:64:32:28:13:4b:c3:
17:b1:60:25:64:2c:29:89:09:bb:b8:01:f4:b2:4d:
72:d2:ad:2f:b5:cd:df:a2:aa:3b:dd:a3:af:c7:c3:
aa:55:bf:78:a5:99:96:aa:1f:7e:76:b3:7e:1a:19:
29:47:64:96:39:95:71:05:ad:ae:a4:92:4f:4c:39:
e1:49:c6:c6:8d:31:58:cf:4a:15:d7:47:5c:29:89:
8a:1a:84:ea:01:fd:1a:00:3b:67:da:1d:e0:34:4b:
59:26:18:9c:6f:04:96:c6:5e:96:77:2d:01:8f:fa:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:04:13:21:3A:12:02:E1:10:85:D6:5A:F9:86:6E:D4:37:1D:07:D6
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8b:ca:52:1e:3e:42:1c:f7:4f:ff:63:24:7b:aa:97:67:34:
73:25:1d:58:33:0d:ca:3c:c9:0c:e6:69:3b:a0:54:ce:92:43:
f9:dc:e2:94:3b:55:b0:4b:96:91:f0:db:c2:d6:c7:a4:d6:3d:
a2:6c:7b:a1:f4:33:a6:60:fa:71:d8:b1:02:a4:b9:c7:9c:f3:
09:7e:6f:07:79:61:a6:c3:82:59:34:4d:25:be:19:a5:6b:f5:
5b:7e:51:84:3f:9f:54:6b:64:c8:d8:1b:66:d9:13:06:35:0b:
7e:7b:77:70:54:4c:87:74:ff:cc:60:c4:a0:a9:36:28:73:17:
64:18:cb:61:85:3f:12:45:f0:70:a5:15:3e:fe:44:76:f9:c5:
75:93:a8:98:24:58:4b:73:6f:50:65:81:d9:9b:8a:27:97:89:
34:70:37:9f:46:55:56:5b:55:dc:1f:de:8f:47:84:9d:02:46:
e8:fb:93:b6:e1:c8:39:40:de:d3:b9:d9:c8:4a:80:5a:5a:ba:
26:de:6b:7c:ed:16:9d:ca:32:25:a4:69:c3:2a:c9:fe:0e:52:
31:92:83:13:4f:dd:62:a0:a2:58:e3:70:e6:63:c0:97:8d:e6:
a2:95:c1:ca:32:6f:c7:ec:89:e9:fb:63:68:f3:a1:4d:80:8e:
20:21:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:44:07 2026 by rpki-client