Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: J/pNwP+sPRbkBBtv48ZkoEVbsgymPy4oTxyY7egRCN8=
Subject key identifier: C8:1A:46:51:C1:7E:C5:6E:0B:F8:74:3D:7C:78:89:AE:B3:84:D6:75
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 019D2816C8F3A0DC338161EBAF12989806CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1777
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=)
2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: wNyX/SlfKMRc1LFr2u/mz0ADxSx2aF9SFXp2th2gO8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c8:f3:a0:dc:33:81:61:eb:af:12:98:98:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=c81a4651c17ec56e0bf8743d7c7889aeb384d675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:4f:96:1e:d8:4e:4d:31:2c:c5:f4:01:20:
4d:91:18:ce:70:14:a6:62:d0:c3:03:5a:0e:b2:de:
91:df:9a:58:07:c1:e1:99:8e:10:eb:31:69:e1:80:
40:1c:50:18:92:e9:3b:3e:90:23:2e:a6:f8:12:7f:
c7:f3:a8:d2:2e:03:ce:e4:03:41:41:39:52:47:c1:
27:6c:df:92:4e:34:51:01:1f:95:30:3d:fc:f3:45:
4c:e7:b8:11:ff:03:71:dc:b5:ac:61:51:eb:54:b8:
0e:9a:c4:01:94:0d:c5:b8:c5:0a:aa:6b:3a:c5:eb:
30:7e:32:c5:2c:d7:c5:84:27:0e:d8:37:ca:c0:ac:
ea:19:c2:24:ae:fd:52:be:27:ae:79:0f:f4:25:12:
00:0d:c4:2e:2e:25:f7:af:dc:37:2a:14:ce:65:2f:
df:db:50:2c:d9:c0:f3:50:40:ae:ff:b0:cc:a6:24:
b4:10:74:c9:87:7c:ad:e9:71:1b:5a:e7:16:0a:65:
eb:7d:96:77:f9:2b:32:7d:c7:d9:5a:49:74:96:fd:
b9:38:1e:02:ad:41:a3:ef:ce:de:1a:1f:cd:d3:5c:
36:9e:3b:0e:aa:a6:53:8d:b3:05:3c:cc:6b:bb:c1:
86:57:2d:82:8c:20:9a:e9:55:ae:10:d0:97:17:ab:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:46:51:C1:7E:C5:6E:0B:F8:74:3D:7C:78:89:AE:B3:84:D6:75
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:35:d4:7c:b9:b6:96:84:01:25:34:83:27:e6:d9:af:93:ae:
b6:e1:45:53:cf:37:3f:48:f0:9b:6c:e8:70:03:1b:87:0d:d3:
94:49:cf:a0:38:7f:da:bf:c4:e2:a9:59:c4:68:1e:47:f2:b6:
e2:16:2d:0c:9a:86:2b:47:bf:43:37:99:c2:84:96:0f:53:75:
1f:c7:fa:c8:d4:99:d3:69:c3:9b:6d:13:6b:3c:3c:f8:e3:13:
03:38:72:29:9e:9e:f1:7d:56:93:16:e4:1a:34:16:bb:32:17:
21:cd:59:e3:1c:23:26:9b:28:1c:3c:b7:69:e4:31:79:a2:b2:
39:de:5b:80:ab:7e:ed:56:02:e3:49:f7:8f:f8:03:02:25:5c:
78:a5:f3:8b:be:1a:b7:03:e4:6f:02:6e:88:4e:a5:71:62:94:
78:49:2c:1d:c3:72:a4:ad:7b:4b:2c:51:e5:07:5b:9e:0a:4b:
34:34:96:5d:57:01:4a:71:f2:3d:b1:d3:37:31:e9:53:bc:27:
72:6d:05:fd:67:fb:63:f4:64:bf:fb:17:47:e5:73:f6:d7:11:
c6:46:3f:f6:8b:2a:4a:64:42:d9:18:48:59:fb:af:d9:6e:6d:
d4:ef:58:3e:b5:11:fc:50:69:bf:4d:0d:83:fd:f1:a9:57:81:
d3:65:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:12 2026 by rpki-client