Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: vOiY9ptmtQYOmOxnfHWFB+kANSWfk4iPygfCD4bZ1TE=
Subject key identifier: B0:F5:42:36:CE:18:AA:A9:D9:A0:62:E6:18:0D:53:7C:BF:F8:F5:FF
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 019F9211AC01827BA0F7EF4A9CC369E0F4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 18B7
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=)
2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: jshMwbDQA7MdtquiFYbmWk/g0P3wAVx+itc4hxITb8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:ac:01:82:7b:a0:f7:ef:4a:9c:c3:69:e0:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=b0f54236ce18aaa9d9a062e6180d537cbff8f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:58:68:63:3e:9b:94:3b:ed:ea:e8:84:e6:
15:3d:c6:2b:47:d1:1e:65:bb:9d:98:cc:31:4d:18:
d0:15:1c:f3:0e:17:a5:03:6f:f0:fb:5b:6b:70:1f:
ef:44:9f:27:26:70:a5:91:aa:42:4c:be:00:e3:71:
cf:9a:09:09:77:c5:78:12:12:dc:54:0d:36:f9:d0:
34:d8:31:a3:59:a7:fe:8f:93:b1:09:20:b6:50:5e:
a4:fb:03:e6:21:0f:61:09:d1:24:e8:ce:fa:b2:f6:
97:5d:8f:05:51:10:ae:72:ad:fb:0f:40:a7:5c:3e:
82:92:a0:49:20:6a:92:69:bc:e4:a1:44:37:a3:0b:
c9:3a:ab:0d:83:5f:47:7b:f9:d1:bd:c7:5f:71:bc:
08:53:f2:65:3d:c5:1d:2c:78:83:96:86:f8:55:9a:
85:9a:50:47:2c:7d:c3:e0:b7:00:56:36:df:c0:c5:
14:5e:86:4c:72:b1:16:82:73:83:27:3f:55:24:d6:
37:21:df:3e:34:b2:88:e1:94:de:40:50:55:3f:6b:
da:98:6d:e9:d9:7a:77:60:2f:fb:3f:6d:b2:a1:ca:
29:f3:79:d4:c1:be:50:9b:c1:20:93:a8:f8:73:f2:
b5:48:2d:d2:16:6d:22:48:67:64:e5:56:8e:ad:c5:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:42:36:CE:18:AA:A9:D9:A0:62:E6:18:0D:53:7C:BF:F8:F5:FF
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c8:87:81:fc:95:86:d5:3a:dd:73:78:c7:35:41:09:88:d8:
ec:c1:51:1f:38:03:46:40:0b:da:f2:23:f5:3b:b4:8d:02:fc:
82:74:98:46:d6:79:03:77:c4:77:2a:0d:0c:dc:f4:90:0c:db:
31:84:c6:35:b3:df:c2:1e:d2:b0:00:db:21:80:bf:bc:58:1a:
b3:bf:40:3c:17:82:ed:e5:53:fb:fd:31:79:dc:1e:29:58:f5:
7f:1c:a2:06:e4:cc:4d:27:fb:de:5f:cc:8a:fb:39:0d:f7:5a:
42:34:f0:d6:55:22:a7:c0:17:91:b4:79:03:17:a6:b7:aa:44:
e0:d2:79:0a:c8:59:c2:10:9f:dc:47:29:9e:fc:64:0a:8f:81:
a9:da:64:ac:0d:51:d6:5d:32:d8:71:a7:2a:70:5b:94:5d:58:
1a:fd:80:21:95:62:e2:c4:9b:66:3e:5b:7d:65:4d:50:90:f8:
f0:f6:1f:b3:d2:08:7b:8a:ec:f1:aa:38:41:c1:2b:20:27:72:
72:87:7b:ae:cc:0f:3c:5b:f7:e2:78:64:a1:f8:da:40:e3:db:
b4:28:17:16:b4:76:81:b8:82:03:11:80:09:b8:c1:9b:ea:e5:
41:a9:95:c6:df:cd:06:48:34:63:0a:d4:4f:c5:0b:8d:59:30:
09:c1:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:42:49 2026 by rpki-client