Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: IITu+UbeE4dUH47BCZwAc8gjUU8rCMcUdXBoRPgQtoU=
Subject key identifier: 25:1D:53:9E:20:86:6B:22:F5:70:5F:B6:C0:EA:12:4A:27:13:D5:93
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 019FA33C87D89A6CDEF7EB8D214C8991E2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 11:01:20 +0000
Manifest this update: Mon 27 Jul 2026 11:01:20 +0000
Manifest next update: Tue 28 Jul 2026 11:01:20 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: UPCjL8cMW2SinYRqpO7fb2T6TqNxLdj5Vj1/uJHdzgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:87:d8:9a:6c:de:f7:eb:8d:21:4c:89:91:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Jul 27 11:01:20 2026 GMT
Not After : Jul 28 11:01:20 2026 GMT
Subject: CN=251d539e20866b22f5705fb6c0ea124a2713d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:d0:a3:e3:b9:f9:f6:30:7b:05:33:65:a8:
80:0a:72:4f:b9:8f:42:36:1c:25:e5:2f:3e:c8:ab:
d7:44:de:58:af:4c:ff:05:68:66:1e:16:78:20:18:
5f:fa:73:4a:6d:c8:18:b0:6a:d1:53:17:e8:b8:a9:
da:71:63:e0:77:07:75:1c:ba:9d:81:d9:eb:f6:7c:
b4:de:5c:e0:15:14:b1:c8:87:c4:cc:ec:8a:73:e5:
16:db:83:d3:78:5b:a7:eb:84:cc:de:fb:61:ed:e7:
2c:45:51:07:00:85:34:27:7b:65:cc:a4:c2:6d:1b:
39:18:5e:a1:42:79:f8:2a:b6:9a:79:ec:cf:a8:1b:
14:f4:62:40:16:43:11:e1:f1:e3:69:66:cb:06:66:
c8:16:a7:f6:0c:19:34:39:cd:5c:fc:af:08:9c:88:
6c:bd:5b:7c:13:0e:55:63:05:e4:d3:8b:f3:55:6f:
57:c0:ab:62:9b:72:a9:0f:9a:b6:76:99:a2:2e:c2:
f2:d8:05:3d:00:6f:7c:de:2a:14:70:ef:ad:98:22:
a9:f1:69:17:ab:79:1d:49:b0:48:f7:75:df:3c:72:
b7:c5:43:07:c9:6c:83:7b:1a:cb:0f:d8:d6:95:fa:
c7:d6:7d:e2:6d:8e:cc:62:96:d7:ec:29:8b:e7:22:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:53:9E:20:86:6B:22:F5:70:5F:B6:C0:EA:12:4A:27:13:D5:93
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:29:37:7d:d8:f3:4c:c6:fd:b9:07:2e:bc:ee:aa:77:a9:3a:
33:13:dd:c8:86:bc:f3:fd:56:b2:7e:a8:22:18:e7:9c:c6:ae:
81:00:d5:0d:93:9d:8f:dc:a6:82:f9:a6:35:32:6a:45:4c:14:
6b:49:6b:07:dc:b5:d9:f7:57:bd:c9:93:1a:54:ec:40:47:d7:
7f:20:df:25:f1:54:10:8b:c1:53:ff:81:44:25:88:03:84:0a:
1f:88:05:ad:a9:e0:f6:7e:6a:69:a9:b2:73:68:47:40:80:a3:
ca:ff:b7:d8:8a:95:57:9f:57:44:be:dc:0b:bd:18:01:e5:9b:
bf:17:b1:f5:a0:31:60:81:5e:ed:81:d2:46:66:ca:ee:c6:9a:
fb:2b:d9:53:ab:28:62:a1:81:fb:9b:1d:89:1c:88:bb:07:07:
ea:30:eb:d1:76:de:e2:d8:d7:a4:16:4c:6f:e2:aa:ff:e7:52:
99:04:7e:de:61:9b:dd:52:7d:52:4b:c1:0f:1f:05:77:47:25:
78:25:cc:2d:9b:5d:4d:15:54:5f:bc:69:3a:54:a0:b8:cc:74:
3f:6c:e2:c2:5a:4b:95:3e:55:c2:3a:c1:a0:1e:5c:25:07:5c:
aa:ae:12:4d:b8:12:f8:fc:a0:e9:06:21:66:c4:fc:b1:2d:18:
af:41:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:19:48 2026 by rpki-client