Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: meM1Q9bzGLV0OtLckPV9op/81i2m5DvFcweTbRCrTZU=
Subject key identifier: AF:F6:7B:3B:08:E1:9D:7F:E6:40:D3:E7:53:C8:8E:1D:E3:E1:98:4D
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 01A1DEDE97A20B0B54B2881691477A9D6556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 11:01:31 +0000
Manifest this update: Sun 15 Nov 2026 11:01:31 +0000
Manifest next update: Mon 16 Nov 2026 11:01:31 +0000
Files and hashes: 1: 9G6UAPf2NIi-dNj0UQ0ASo51_Xo.roa (hash: HhxpPntotNV+eDoBeE3OFEYS2ZF+Zfm27Bv5b0UVnBg=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: k0NKukSUeQnJR+erKfUwBhqRFKrGScf9sm0lQQVK+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:97:a2:0b:0b:54:b2:88:16:91:47:7a:9d:65:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Nov 15 11:01:31 2026 GMT
Not After : Nov 16 11:01:31 2026 GMT
Subject: CN=aff67b3b08e19d7fe640d3e753c88e1de3e1984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:df:dd:07:59:bb:f1:5a:51:10:5a:20:87:
6f:c1:54:5d:e1:79:9d:6e:2c:7e:81:42:ab:c1:20:
dd:99:e0:70:8e:07:2d:7d:40:73:84:62:32:b2:b7:
de:2e:40:2b:14:d8:1e:3c:2e:3c:97:37:5b:0e:42:
36:2d:f7:81:47:34:86:f8:93:bb:d0:a8:78:52:8f:
ae:40:12:ef:e7:85:66:52:08:59:62:50:24:cf:8b:
33:86:e5:8e:0c:f2:bb:38:13:1c:8b:66:f1:bf:46:
77:f9:45:d4:4b:a1:de:0d:69:18:ad:79:3e:93:99:
70:1a:a0:bc:db:03:dc:6a:3f:a6:b4:eb:66:a5:ea:
8c:0b:29:b2:2e:3f:a0:df:82:a6:2d:64:0c:b9:c3:
8d:94:78:4b:f3:5c:b2:70:6b:60:1e:c3:e2:60:e8:
00:54:06:8f:03:67:c9:0b:a1:d2:36:ef:57:ee:c4:
61:c8:6f:80:e2:07:68:b6:40:0c:57:f3:40:ad:68:
32:6f:ef:90:ca:00:30:d3:32:7b:7c:78:44:8d:a4:
7f:66:bd:63:64:89:59:dd:37:75:fa:ed:92:b5:92:
a9:aa:75:9b:de:0f:48:93:d2:38:d2:2e:b9:8c:ae:
8f:fb:cc:61:21:0b:09:e3:bf:cf:ed:ce:d4:14:04:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:7B:3B:08:E1:9D:7F:E6:40:D3:E7:53:C8:8E:1D:E3:E1:98:4D
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:f5:ca:b2:28:84:74:45:14:ac:d1:49:d1:59:37:39:e3:
16:58:45:a3:97:b2:e4:b6:c3:ec:42:64:75:c6:70:9f:ec:6e:
66:bc:2f:65:b9:d6:d0:67:32:b1:4f:6e:0c:5d:78:2c:db:cf:
ee:69:96:a8:cb:a3:fd:dd:77:03:28:05:c6:63:5a:f4:bf:60:
23:91:84:ae:ed:26:64:32:db:47:4a:f0:12:ae:f6:9b:a2:ad:
d3:c5:56:4a:b4:8f:fe:fa:ca:f4:df:21:02:6c:75:94:42:45:
0a:e1:80:00:bb:05:7c:cd:72:b5:3a:97:aa:01:98:b4:b2:99:
ec:ff:2a:42:2d:72:da:d6:f5:6a:6f:7f:c6:40:2a:da:59:48:
63:65:c4:74:41:98:05:f8:49:28:e4:2b:3b:3d:f7:b7:d3:55:
e4:ca:d5:35:81:ab:7f:09:d9:f4:66:d2:2b:6c:67:b3:22:c4:
48:bc:d2:08:1d:8d:67:65:01:5e:e3:d4:a7:82:36:54:6e:68:
7b:36:67:ca:87:55:0f:85:42:6c:c7:0e:85:2b:5b:95:b2:5c:
3d:93:e8:d6:0e:eb:73:68:75:cd:e0:5f:36:db:6c:87:50:c6:
19:46:42:2b:77:3c:eb:20:23:d2:c9:bc:ab:6c:eb:57:0d:07:
7b:83:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:01:04 2026 by rpki-client