Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: TwkbhWgwh6G+R7JgUf2gCMfiJRvBjNRwrK0xMnVSu8I=
Subject key identifier: D3:D3:5F:DB:5E:B6:E5:A3:46:61:10:B8:58:42:26:48:53:1B:E6:3E
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 01A08CE84DD965A6D45EAAD45EED2C59D2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 20:00:29 +0000
Manifest this update: Thu 10 Sep 2026 20:00:29 +0000
Manifest next update: Fri 11 Sep 2026 20:00:29 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: bM9mRjHuJVS4vLVp8U1p5V9iNVtA84Y9tw1oaFMEOzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:4d:d9:65:a6:d4:5e:aa:d4:5e:ed:2c:59:d2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Sep 10 20:00:29 2026 GMT
Not After : Sep 11 20:00:29 2026 GMT
Subject: CN=d3d35fdb5eb6e5a3466110b858422648531be63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:39:b3:e1:86:c5:a8:f9:a8:0e:b5:61:aa:
ce:75:d1:3e:2c:63:50:a6:7b:cf:64:61:0d:6a:73:
39:f8:0f:c3:18:1c:3f:a6:87:2a:9f:68:a9:35:b2:
79:ad:5a:09:3a:f5:dc:bf:4a:66:92:44:93:17:75:
d4:3a:f0:5b:6c:54:83:fe:35:cb:4f:94:af:b0:ac:
92:3d:ab:18:19:a0:f0:55:ab:27:0f:55:a2:68:bf:
94:cb:f4:6f:d5:33:78:f3:cd:b6:5a:25:16:f8:fa:
5d:53:4c:60:8c:fa:d6:3a:80:5c:9f:b5:69:75:d9:
c9:e9:a6:a8:9d:dc:89:9f:a8:c7:f0:12:d0:ff:fd:
fd:dd:44:37:b4:41:75:b3:5f:e6:15:1d:6c:d2:41:
f6:a1:d4:60:72:b1:f2:c4:8d:5c:a3:1c:f8:0e:fd:
ba:8e:ab:fe:7d:06:40:ec:47:9a:ee:89:a3:45:3e:
59:04:41:fc:01:8f:a8:f5:38:f2:d1:68:d5:99:0c:
e7:ea:31:1f:23:9b:79:87:1e:6e:f8:44:28:7d:50:
90:f3:83:ec:e1:e5:a6:09:f3:58:10:2b:00:b0:3a:
1d:f1:3e:ff:10:35:f7:ce:f0:1f:37:6d:40:33:87:
22:f4:0f:b3:ab:9b:af:d6:d6:06:6d:43:cd:bb:af:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:5F:DB:5E:B6:E5:A3:46:61:10:B8:58:42:26:48:53:1B:E6:3E
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:e3:3f:b9:87:76:08:e3:eb:32:22:6a:9c:9f:25:04:45:
70:e6:b4:62:6f:7b:4a:fd:bc:b5:ce:5f:af:e1:dd:b4:bf:ec:
7a:25:ee:15:3b:4a:d5:b9:37:24:c1:da:42:46:25:e3:e8:6b:
24:3d:c9:67:bb:fe:ab:35:64:af:b2:fe:dc:85:f1:02:d6:48:
66:ec:c0:fd:49:fc:36:a2:ba:69:8f:e4:90:66:b0:9c:ae:08:
ef:f1:e8:b9:a4:27:c7:92:36:68:b2:33:cd:7a:6b:0c:5d:ed:
6f:72:e8:5a:f5:bd:98:64:86:ed:6a:97:31:ec:6f:a4:9a:85:
8c:5a:72:79:16:57:59:c9:51:e1:64:59:b6:3e:1c:b7:9b:6d:
9c:f1:20:04:e1:be:12:2d:b0:2e:56:ba:8b:4f:23:ba:da:bc:
8e:ef:65:8e:9a:8c:c9:fe:63:39:ce:7e:77:8d:37:12:a7:bd:
bd:9d:e8:77:bc:37:9b:a2:12:9a:b5:99:38:bb:b1:4a:e2:35:
92:01:0c:b3:a1:18:d2:30:7e:1c:68:99:09:f2:37:5a:75:20:
6b:42:af:b2:86:35:b2:d1:8e:e2:5c:7b:88:4e:30:31:2f:e2:
16:f1:b2:07:74:b5:e0:82:56:20:5c:37:e1:a1:d7:2e:41:86:
b2:98:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:35:35 2026 by rpki-client