Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json)
Hash identifier: 6CfFaJqHEc4VRg1GUAMo3yvSZJnx8ApDw3edgdBjToQ=
Subject key identifier: 98:A2:AA:C8:8F:CE:58:26:A3:A3:25:58:98:34:75:EA:A5:D9:28:7A
Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f
Certificate serial: 01A1822B85C75B21B556FB4136496B22D931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 11:00:52 +0000
Manifest this update: Wed 28 Oct 2026 11:00:52 +0000
Manifest next update: Thu 29 Oct 2026 11:00:52 +0000
Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=)
2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: bd3WFKef8qSryeCODvydjCRQN8ayN2Gm6Bl4DB8/Cc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:85:c7:5b:21:b5:56:fb:41:36:49:6b:22:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f
Validity
Not Before: Oct 28 11:00:52 2026 GMT
Not After : Oct 29 11:00:52 2026 GMT
Subject: CN=98a2aac88fce5826a3a32558983475eaa5d9287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:cf:be:f7:11:b1:f2:1a:00:e0:83:2f:e1:
34:e5:34:ad:0a:2d:28:b1:43:00:3a:07:7d:b4:20:
25:20:a1:16:3a:27:57:fc:de:fa:b4:c3:b6:04:88:
ae:15:c7:9e:7a:4e:ae:af:94:ae:92:88:95:8d:47:
77:6d:5f:bf:c0:b7:60:89:d5:a2:de:29:7a:c5:ce:
8c:a9:28:4d:32:0b:fb:67:5b:5a:54:80:8e:7f:90:
c3:f3:9b:44:d8:cf:61:14:22:ba:07:83:f3:f5:e0:
5f:75:fc:6e:c3:a8:26:73:82:b8:ef:a1:a1:a5:1c:
d0:cf:ce:a8:ff:58:ce:45:9c:94:f9:84:36:06:fd:
33:ed:25:66:59:f6:52:fb:c1:7e:78:23:e9:2f:07:
18:88:a3:e5:d1:63:b1:46:24:86:13:f4:19:85:9b:
e4:42:bc:49:2b:2a:cb:f6:2b:a6:ba:42:46:8c:75:
01:e8:0c:56:af:40:73:d9:e7:02:5e:f4:60:1d:ea:
93:2b:3a:9d:80:c7:a6:04:a5:83:e9:27:bd:f4:8d:
b1:72:76:49:a9:47:9c:dd:70:7f:7a:a4:b2:8e:a9:
34:c5:bf:08:7f:46:ca:d7:d9:5e:46:28:b5:c6:bd:
39:ab:db:cf:ef:4f:dd:b3:fd:54:62:70:4a:05:2f:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:AA:C8:8F:CE:58:26:A3:A3:25:58:98:34:75:EA:A5:D9:28:7A
X509v3 Authority Key Identifier:
keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:7b:21:bb:d2:fb:04:54:44:9e:fd:5f:37:dc:8a:ee:84:
8d:7c:95:00:e0:49:7a:be:d9:d3:b1:8c:bd:3e:e2:a4:5c:5b:
19:1d:4c:e7:c9:ed:1b:98:1f:9e:c7:5f:bc:51:68:e8:bf:b2:
d4:27:e0:7d:fe:03:f4:13:23:08:ce:27:cf:dd:f9:ef:7c:46:
f5:f7:1f:d0:bf:ed:62:94:66:25:02:9e:1d:87:f6:fa:1a:39:
28:46:d8:b3:9a:e2:73:5c:28:17:3d:a9:72:24:ac:ed:8d:5d:
60:e9:9b:c7:21:c9:de:27:a8:ad:74:02:c9:98:08:e0:ca:2c:
af:cc:5d:c7:24:c9:f2:7c:27:b0:e7:14:87:15:81:44:62:70:
0e:2b:f0:f9:06:37:9a:b1:f2:02:21:47:e5:3c:8a:2c:c7:3d:
46:e6:79:54:eb:95:ab:fd:4e:be:d4:03:56:50:b1:ec:26:9d:
e4:87:80:de:cc:13:89:36:a8:77:7f:de:c7:60:4d:38:b9:3d:
52:b8:81:e4:44:4e:c4:74:d1:94:9a:89:0f:2e:d6:a4:82:5a:
37:2d:03:77:8d:e8:97:50:86:e5:ca:ea:88:10:ab:b6:9b:32:
0a:12:1e:e9:e9:51:68:53:d5:3c:22:f8:8b:19:31:2b:64:76:
c0:dc:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:28:03 2026 by rpki-client