Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
File: STKJJW4ziHd9leTVMVZ842cqFJo.mft (raw, json)
Hash identifier: 40FneXY8/YzFjT99oxTXox3tD3JJTaqy6Go4MBIbHJQ=
Subject key identifier: 6B:82:D5:2B:CA:67:05:27:09:95:F3:5A:32:32:44:05:A6:A7:A3:70
Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a
Certificate serial: 01A0D26ED5A645BC738609E3D28D33931F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 08:01:13 +0000
Manifest this update: Thu 24 Sep 2026 08:01:13 +0000
Manifest next update: Fri 25 Sep 2026 08:01:13 +0000
Files and hashes: 1: 9G6UAPf2NIi-dNj0UQ0ASo51_Xo.roa (hash: HhxpPntotNV+eDoBeE3OFEYS2ZF+Zfm27Bv5b0UVnBg=)
2: STKJJW4ziHd9leTVMVZ842cqFJo.crl (hash: xAX/Z6/DDnWEqJ0wcyhCbYKT8RR4jJhp/1uTqstOCDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:d5:a6:45:bc:73:86:09:e3:d2:8d:33:93:1f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493289256e3388777d95e4d531567ce3672a149a
Validity
Not Before: Sep 24 08:01:13 2026 GMT
Not After : Sep 25 08:01:13 2026 GMT
Subject: CN=6b82d52bca6705270995f35a32324405a6a7a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:ab:13:18:d1:e9:6f:09:dc:6c:bb:d3:a4:
80:e5:1c:b7:70:d6:ba:44:a7:7a:7a:7f:13:41:2c:
b3:b6:b2:ca:bd:95:45:01:0b:b9:42:22:e6:ea:28:
9e:dd:d3:89:56:ef:e9:f0:c0:42:b4:2e:d5:cb:c6:
b0:d9:1f:d9:22:c6:fc:74:c2:a2:2a:d9:9c:86:49:
92:b1:08:49:53:e7:45:80:87:04:d8:92:b7:81:bb:
95:b9:45:06:b4:0f:e4:8b:22:e7:05:76:26:0e:49:
23:d3:6b:63:63:c3:8f:06:4c:44:70:11:f9:16:96:
c3:06:f4:17:39:8c:d3:7c:81:1c:d1:e3:58:b1:65:
45:ae:ca:13:d1:13:ea:ee:98:90:33:cf:ff:9f:f6:
a5:66:58:ac:ec:7f:6a:93:1b:2d:e4:92:29:3f:f3:
bf:f4:62:40:49:a9:a4:26:e4:50:2b:d1:7a:a6:09:
d6:1f:0a:b9:80:5b:7e:54:40:f5:6e:4e:42:e1:f8:
ff:92:59:b9:ec:9d:3f:b0:5f:22:ac:ae:e7:3f:8d:
b4:2a:91:7d:be:a9:6d:c9:c9:e4:cb:a3:fa:36:d2:
85:f6:04:1b:d7:b8:a7:c5:56:7f:ea:b4:32:5d:aa:
28:89:0c:84:40:c8:ac:79:06:3f:be:dc:10:8b:c0:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:D5:2B:CA:67:05:27:09:95:F3:5A:32:32:44:05:A6:A7:A3:70
X509v3 Authority Key Identifier:
keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:38:fd:23:56:65:5d:55:0c:c2:45:14:12:df:d0:f9:3c:9d:
16:b9:07:2e:1c:19:53:66:fd:78:85:fd:ab:20:d7:b0:92:1d:
20:a7:3c:3e:0c:13:d5:eb:96:56:bb:bf:f7:c6:4b:c0:87:1a:
38:6b:ba:ce:14:68:50:74:52:d0:c2:78:50:f2:6c:1b:e7:21:
e6:24:eb:7c:f9:c6:03:9a:50:a1:12:e3:bf:81:23:20:d1:9a:
62:47:1f:af:4a:11:4c:d2:41:db:93:b2:11:67:40:9d:e3:07:
01:8b:30:2c:74:f0:7b:71:bf:25:7c:0d:5d:b6:9d:fd:49:60:
2e:f1:73:d4:3e:f5:b0:12:39:fc:93:24:af:de:04:75:28:51:
55:7e:32:8d:3e:a9:9f:d7:69:8d:df:e6:8b:5d:e2:60:61:4a:
2e:6a:d8:ce:9b:24:46:ae:b5:50:fa:57:67:a3:c7:7f:69:5c:
08:a0:71:d4:58:59:24:02:82:ac:11:83:4b:7d:e9:7c:e0:55:
84:d6:f6:3b:cb:96:17:8e:39:bb:63:d6:10:ed:05:b9:4e:04:
ba:e0:38:4c:34:71:91:8a:a6:0b:c3:d3:d5:8d:bd:fe:14:39:
3a:7e:fd:ec:f3:5e:9d:81:ea:77:fc:6e:42:35:ba:b5:ed:db:
1f:bc:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:41:35 2026 by rpki-client