Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: m18a9+cdZJiDj2riewPmULpLxFwDnAJerTNXFU83rQM=
Subject key identifier: 7C:16:C7:91:89:86:3A:6F:40:7A:44:FF:B5:65:7B:8D:F7:0F:97:C0
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 019E213628C7915A1CEB4D3126BCE8062754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 17F8
Signing time: Wed 13 May 2026 12:00:57 +0000
Manifest this update: Wed 13 May 2026 12:00:57 +0000
Manifest next update: Thu 14 May 2026 12:00:57 +0000
Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=)
2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: 3QqVP73ZPaWgeoVy1wmPhi9gIYNHLZrvErk3Ph68/DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:28:c7:91:5a:1c:eb:4d:31:26:bc:e8:06:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: May 13 12:00:57 2026 GMT
Not After : May 14 12:00:57 2026 GMT
Subject: CN=7c16c79189863a6f407a44ffb5657b8df70f97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:15:d3:b0:55:76:94:48:68:1f:69:b1:6e:
af:5f:55:17:2b:73:32:48:23:e1:c5:3c:07:fe:59:
2b:b2:b5:c1:97:4f:f7:f3:eb:5a:e8:95:1d:41:22:
79:b0:b9:be:d5:aa:bf:39:28:ed:ad:a2:ed:9e:f8:
c0:4b:47:f6:70:76:3d:a2:23:21:84:3b:c9:7a:2d:
f7:ad:c4:df:cf:8b:9c:0d:47:07:6b:4c:fb:92:cf:
47:8a:09:7d:ac:ea:0c:68:9e:7b:4a:24:9e:2c:7f:
09:67:2a:36:1d:e1:e9:9f:ba:da:85:3e:ba:12:df:
b7:a2:a3:0c:ba:b0:34:a6:ec:eb:ba:38:a5:bf:b5:
73:f7:b0:80:fe:04:c4:fd:b8:81:79:49:dc:32:c7:
7f:37:4f:16:04:f9:f5:fe:ec:71:11:13:c5:9f:74:
16:a7:5b:c9:07:e1:e7:9e:ce:ed:8a:9c:80:ab:d7:
60:59:0c:3e:60:57:fb:f1:d7:2d:77:22:d9:76:f3:
76:a6:a1:71:79:ed:0e:e7:51:1b:aa:4f:f8:9f:34:
d4:0c:d7:3e:4d:a6:60:fc:45:39:eb:3b:27:d1:e9:
23:01:ce:f9:85:31:66:78:10:5e:41:c2:d8:52:54:
e0:0f:bd:11:5a:ab:4d:24:13:95:e7:44:e2:82:dc:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:16:C7:91:89:86:3A:6F:40:7A:44:FF:B5:65:7B:8D:F7:0F:97:C0
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:6f:42:c9:22:40:b2:0d:d4:a8:54:3e:ce:d8:d0:ba:05:
3d:e4:08:d3:e5:ed:4a:2d:f9:5f:0c:db:49:04:0c:62:f1:e0:
51:a2:9a:35:d4:ac:36:f8:9b:61:fd:1a:04:66:c3:9e:76:61:
a7:42:15:25:8a:35:49:13:ff:69:d3:53:44:07:cd:20:0d:ec:
9b:a9:20:41:6c:c5:8b:41:f3:c7:15:83:1e:a7:b4:e2:fa:ef:
2e:2a:19:77:c3:8c:08:d1:eb:2b:e0:c6:9b:67:5f:0e:bf:0e:
50:49:21:c4:97:f0:1d:dd:14:ea:ca:b9:b3:5e:35:d3:20:8c:
65:ab:09:60:f9:2c:62:8c:55:06:43:cd:68:6f:b3:2d:9d:a5:
93:b3:d4:ed:f3:aa:b1:aa:7a:83:04:d0:72:74:18:1e:61:07:
1f:40:ca:aa:88:17:10:b9:74:db:34:fd:d6:56:1a:2d:01:9c:
9a:cd:ff:f6:1d:a7:21:5f:72:37:75:73:34:51:22:f1:07:65:
57:6f:8a:8c:c8:63:e6:ea:58:13:9b:e2:44:0b:96:67:75:99:
1d:37:6d:9a:69:1f:6e:ce:b7:09:c4:ed:72:a7:b4:86:48:fc:
f8:db:72:81:a6:67:94:b6:e6:1e:f4:8b:01:8e:34:ff:13:77:
74:8b:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:31:13 2026 by rpki-client