Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: 4UsES0UERvrCS1Gtxs8QX7jPGOjgMmWQ5zkaTpuEAA0=
Subject key identifier: 71:AE:2E:92:00:66:00:73:57:72:47:EE:C5:02:28:16:94:36:48:01
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 01A0F94561BA4DA6BA073236295638CC09A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1971
Signing time: Thu 01 Oct 2026 21:01:08 +0000
Manifest this update: Thu 01 Oct 2026 21:01:08 +0000
Manifest next update: Fri 02 Oct 2026 21:01:08 +0000
Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=)
2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: dfQIQI/+BTFdjYlr9k+e2DMiGqcS0qgWHKPhytNLh0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:45:61:ba:4d:a6:ba:07:32:36:29:56:38:cc:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Oct 1 21:01:08 2026 GMT
Not After : Oct 2 21:01:08 2026 GMT
Subject: CN=71ae2e9200660073577247eec502281694364801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:a5:c8:7d:e8:01:5c:0a:18:f8:c1:29:ea:
75:ff:09:98:5f:7f:1d:39:54:9a:d9:b4:6e:70:18:
44:62:43:23:4b:5a:c0:1e:63:01:fc:68:34:1c:c7:
cf:97:3f:de:62:bc:fd:12:bd:6c:5d:32:7c:3b:b2:
a7:4d:98:16:50:7a:08:68:1f:93:f7:4b:c3:c3:0b:
ea:c8:35:77:64:2d:07:df:41:93:10:94:90:4b:f3:
27:e5:3d:e6:ef:93:30:92:2b:ef:06:88:da:81:35:
cd:ac:78:9e:70:52:3a:60:b8:1e:8d:d8:15:95:e0:
ac:94:8d:38:81:96:c9:a3:bc:a8:b6:e1:5d:51:b8:
b2:97:b2:7b:ae:00:82:c8:8f:77:2f:64:f0:95:20:
3c:41:87:37:3a:9b:33:64:02:ab:04:cd:42:06:f8:
3a:62:82:66:5e:e8:62:c5:1c:6d:c3:5c:d1:bc:73:
64:b4:aa:be:4d:04:1e:f3:73:6c:c6:d6:c7:70:0c:
b7:7a:9b:b6:d4:e9:d2:51:d5:93:c9:a1:59:24:8a:
08:c3:93:5f:27:7b:b2:47:e4:42:b1:c8:ce:6c:4a:
ca:f1:6b:d3:82:0d:98:67:c7:87:8a:c1:06:66:5d:
61:d4:c7:ac:b4:9c:5a:5d:0c:b4:a4:73:29:91:1c:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:2E:92:00:66:00:73:57:72:47:EE:C5:02:28:16:94:36:48:01
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e2:b9:07:bd:ce:73:ce:5f:7d:ce:44:ab:7d:8e:ff:9b:31:
cf:93:90:be:e5:a6:49:3c:e9:4c:36:82:a7:86:d4:1c:70:93:
41:f3:62:7f:1a:1f:be:79:da:eb:6e:7c:95:3b:87:cd:da:63:
96:83:76:e9:e5:73:4b:9e:3c:53:63:25:64:21:e1:70:b3:48:
1e:81:c2:4f:cf:1f:5f:ed:66:45:1b:3c:66:d3:48:8c:43:5d:
5f:aa:41:c2:17:3a:dc:1e:28:a5:ab:38:f4:0a:b1:47:b9:cb:
dc:71:6e:57:ff:2c:1e:5d:37:67:d6:b2:0d:19:fc:e8:88:8a:
89:23:43:70:2c:61:bc:2d:5a:19:45:6b:2d:3d:c8:9e:f7:27:
17:dc:11:0e:7d:ad:29:6e:c5:25:d2:4d:02:b9:f2:44:06:70:
3e:9c:f1:e9:d2:78:69:9b:27:ef:f2:4c:7b:a3:45:08:8f:b0:
4c:bb:c2:94:31:af:7d:2b:b9:4f:f8:50:3b:ff:4b:ea:96:ac:
02:50:11:b1:8c:a0:97:62:63:48:b7:23:05:d0:e4:49:0d:3b:
2d:75:f4:bb:b0:54:63:6b:a1:bf:33:9e:d8:dd:3b:a4:35:76:
2b:71:b1:c0:d8:ab:b3:e5:ef:f6:ad:19:3e:38:2d:5d:43:00:
fa:5b:44:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5RWG6Taa6BzI2KVY4zAmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj
NTY5NDEwHhcNMjYxMDAxMjEwMTA4WhcNMjYxMDAyMjEwMTA4WjAzMTEwLwYDVQQD
Eyg3MWFlMmU5MjAwNjYwMDczNTc3MjQ3ZWVjNTAyMjgxNjk0MzY0ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaSlyH3oAVwKGPjBKep1/wmYX38d
OVSa2bRucBhEYkMjS1rAHmMB/Gg0HMfPlz/eYrz9Er1sXTJ8O7KnTZgWUHoIaB+T
90vDwwvqyDV3ZC0H30GTEJSQS/Mn5T3m75MwkivvBojagTXNrHiecFI6YLgejdgV
leCslI04gZbJo7yotuFdUbiyl7J7rgCCyI93L2TwlSA8QYc3OpszZAKrBM1CBvg6
YoJmXuhixRxtw1zRvHNktKq+TQQe83NsxtbHcAy3epu21OnSUdWTyaFZJIoIw5Nf
J3uyR+RCscjObErK8WvTgg2YZ8eHisEGZl1h1MestJxaXQy0pHMpkRy57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGuLpIAZgBzV3JH7sUCKBaUNkgBMB8GA1UdIwQY
MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt
ZTAzOGQ4MWIzZjk3LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3
LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOK5B73O
c85ffc5Eq32O/5sxz5OQvuWmSTzpTDaCp4bUHHCTQfNifxofvnna6258lTuHzdpj
loN26eVzS548U2MlZCHhcLNIHoHCT88fX+1mRRs8ZtNIjENdX6pBwhc63B4opas4
9AqxR7nL3HFuV/8sHl03Z9ayDRn86IiKiSNDcCxhvC1aGUVrLT3InvcnF9wRDn2t
KW7FJdJNArnyRAZwPpzx6dJ4aZsn7/JMe6NFCI+wTLvClDGvfSu5T/hQO/9L6pas
AlARsYygl2JjSLcjBdDkSQ07LXX0u7BUY2uhvzOe2N07pDV2K3GxwNirs+Xv9q0Z
PjgtXUMA+ltEyw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 13:11:11 2026 by rpki-client