Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier: rjatwiR/b9hFII8D8yt1yK7Uw0kvr57bFAaMkP0ROKU=
Subject key identifier: 98:7A:C1:20:09:C2:FD:CE:B6:82:7E:EF:C3:74:E3:CD:E5:76:90:00
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 019DCE9948582A14A0F2796AA2C11CFB72A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 11:00:44 +0000
Manifest this update: Mon 27 Apr 2026 11:00:44 +0000
Manifest next update: Tue 28 Apr 2026 11:00:44 +0000
Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: s/avu/W+tk1TZ2ylImsJkTHK+No8EwmJPWCrhOkqXfI=)
2: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (hash: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:48:58:2a:14:a0:f2:79:6a:a2:c1:1c:fb:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Apr 27 11:00:44 2026 GMT
Not After : Apr 28 11:00:44 2026 GMT
Subject: CN=987ac12009c2fdceb6827eefc374e3cde5769000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:ba:d2:10:59:73:2b:62:16:a2:8c:f5:c9:
1c:8e:8c:d2:83:18:38:fa:a0:6d:ec:7b:31:d8:03:
4c:ee:2f:d6:3a:5b:d9:38:43:63:89:b5:2c:ab:20:
d7:13:ce:e7:00:f5:eb:96:82:c0:28:52:54:62:17:
70:e5:49:be:c2:69:57:4b:11:0d:ec:ba:f5:9b:aa:
8c:11:97:19:9a:4d:3e:ef:4c:ba:93:05:7a:ff:d4:
25:35:37:aa:1c:f5:dc:5e:e5:d6:03:00:f9:57:ff:
aa:83:62:f3:98:90:8c:73:b0:db:8e:de:2b:f5:80:
64:2c:e9:59:e6:89:bf:1e:02:5c:a8:6d:33:ce:b0:
c2:c2:a6:f1:8c:e4:72:87:7f:26:8f:78:a0:8d:f9:
c3:ea:f0:84:3a:9e:a4:f1:70:44:7f:3f:65:e1:3a:
6c:0c:90:4c:ee:ad:92:b0:6d:1a:b4:21:08:60:f2:
ce:17:8e:db:b6:3c:6b:c1:cf:22:e7:bd:f5:1c:52:
ea:01:76:1b:5a:64:cb:0f:1b:80:20:ec:a1:6d:6a:
94:26:59:14:65:5c:8a:25:1c:a3:bf:61:37:f0:75:
7b:da:4f:2f:d4:a8:f5:bd:b6:23:6c:96:74:2a:d7:
87:d2:ff:4c:2a:9c:5f:6c:19:54:df:2a:32:56:8c:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:C1:20:09:C2:FD:CE:B6:82:7E:EF:C3:74:E3:CD:E5:76:90:00
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:38:87:80:a9:94:98:88:5b:88:c8:89:8f:1c:46:f7:8a:
8f:6a:56:a3:e3:4c:6e:fd:45:11:38:c1:39:98:cf:67:b9:f1:
86:df:f7:6a:6a:2f:ed:f2:ea:43:db:ab:84:ad:73:2f:04:8a:
8d:b0:e5:96:33:4b:c5:88:25:51:c6:33:05:2e:da:53:33:52:
ed:65:24:8a:d7:0b:4f:07:98:75:a9:03:92:b6:46:f2:bd:ad:
6f:91:a1:03:6e:8d:05:b3:22:7d:66:c0:09:5b:4d:cc:ef:b2:
de:58:e3:8e:eb:c6:fd:25:a5:f3:95:25:7e:98:e4:57:af:85:
c4:56:56:93:c3:8b:ee:c5:23:a2:4f:ab:de:d0:f5:60:4c:b2:
24:5f:79:0e:4c:2e:f5:fa:04:89:78:b1:4c:e5:44:98:72:08:
94:7c:95:85:5d:f8:63:57:e5:4b:90:e5:c9:56:b7:6e:ac:5e:
0b:d8:04:bf:56:be:9e:9d:09:c7:05:ed:64:7c:ff:1d:cd:e1:
43:88:f3:7c:87:a0:95:1d:cc:ab:1b:4c:08:cb:24:d0:4d:f5:
97:14:98:47:26:fd:16:ac:72:50:ce:5b:e7:80:fa:9b:1b:6e:
21:10:e8:2a:91:37:0a:fd:ee:48:16:b0:3d:20:b8:e1:7f:78:
62:08:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:49:28 2026 by rpki-client