Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier: fh0DA3O+swPozLKcoWE2ZhFD0hKodGcEbNpYuEoWEa4=
Subject key identifier: 25:CA:AF:82:20:8C:D2:59:D8:9B:02:A4:CA:C3:93:4D:D1:C7:4A:82
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial: 019FA3E10034D3F17C97C4BBEB8B39C8180E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 14:00:59 +0000
Manifest this update: Mon 27 Jul 2026 14:00:59 +0000
Manifest next update: Tue 28 Jul 2026 14:00:59 +0000
Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: LhREAHgg8SxNE7KQGmlIKBeg6kxIQ+iQpmMsrtgtTzI=)
2: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (hash: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:00:34:d3:f1:7c:97:c4:bb:eb:8b:39:c8:18:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Validity
Not Before: Jul 27 14:00:59 2026 GMT
Not After : Jul 28 14:00:59 2026 GMT
Subject: CN=25caaf82208cd259d89b02a4cac3934dd1c74a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:8e:17:7b:b3:92:46:a2:18:da:2a:e2:94:
70:79:39:f7:5b:64:df:cf:09:17:f9:02:45:1c:07:
75:3a:6f:d9:b7:3a:ad:8b:9a:1e:1c:65:e9:68:d2:
cc:ba:55:a4:92:83:2d:22:82:ad:c7:c8:11:a5:63:
8a:03:41:99:40:a4:7c:fe:26:bd:0b:ce:1b:65:96:
fc:7a:ce:b2:64:6f:c0:b7:4d:73:51:ac:4d:42:57:
85:33:bb:c2:c4:bb:e3:86:a2:bc:c0:31:29:16:c4:
35:02:8d:7e:0f:22:b4:1f:d0:27:73:2f:36:e1:d0:
65:d6:ab:f5:e4:8b:60:41:ec:d6:41:bd:8b:88:f4:
1b:5d:5d:dc:99:05:dc:75:03:77:b8:b0:21:d4:b9:
47:ea:40:85:92:e9:48:62:08:9c:21:c6:97:7c:3d:
fa:6a:49:f5:23:54:f0:18:d9:df:11:cf:5e:8e:e3:
fb:98:c7:56:9a:2b:9f:0b:74:35:26:e7:42:1d:2f:
4e:3d:3e:35:b2:57:3f:56:b9:fe:f7:7a:db:ee:5e:
a7:3d:5b:d6:24:2b:1c:be:b5:bb:9d:fb:f3:3c:a7:
02:c7:08:10:b4:97:6b:91:98:5c:84:9a:f7:a9:8b:
ce:64:fa:6d:5f:15:18:70:50:21:58:29:35:63:4f:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CA:AF:82:20:8C:D2:59:D8:9B:02:A4:CA:C3:93:4D:D1:C7:4A:82
X509v3 Authority Key Identifier:
keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:1a:6a:29:b9:74:39:d6:2b:ad:2b:5f:e9:94:cd:25:1a:10:
e0:47:1c:28:e5:66:80:a9:4b:86:95:56:18:06:60:b8:31:76:
cc:d6:0b:1b:37:c3:41:36:a7:15:95:3d:d3:a8:2b:b1:66:0e:
7d:4c:17:d3:57:82:b5:be:b9:4f:65:da:f4:6f:b6:e8:8b:ce:
1d:21:72:55:78:34:74:32:12:d6:8a:da:ff:91:6f:25:c4:44:
b0:88:33:40:3b:bc:19:2e:b1:6f:ff:f0:d4:79:10:5f:33:0d:
f9:a8:03:7e:46:21:e2:b4:ff:21:d6:0f:80:82:c7:38:5a:00:
f8:47:f1:af:06:e0:12:fe:02:18:3d:27:96:39:ae:9d:90:77:
09:f2:77:17:6a:d8:a9:8d:87:fb:0a:4e:d8:0d:3c:a9:6a:4f:
17:0a:33:9f:60:31:07:0a:64:c9:74:24:88:d1:3f:04:59:c9:
77:d2:55:fe:ff:ac:44:6c:45:78:ee:44:fb:00:0a:be:b9:98:
55:f7:c2:35:17:55:55:37:c2:24:79:ce:05:e1:e3:34:27:82:
8d:74:de:35:8f:19:72:b3:c9:e9:71:d9:52:23:82:70:e9:78:
96:01:ef:0d:aa:54:7d:fc:61:22:39:67:bc:fc:16:0d:88:da:
b2:87:2d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4QA00/F8l8S764s5yBgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDFlOTE4NWVhYThiNWM3MWM4OWZhYmU2ZmJlMmFjZjdl
YTk4MjQwHhcNMjYwNzI3MTQwMDU5WhcNMjYwNzI4MTQwMDU5WjAzMTEwLwYDVQQD
EygyNWNhYWY4MjIwOGNkMjU5ZDg5YjAyYTRjYWMzOTM0ZGQxYzc0YTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TGOF3uzkkaiGNoq4pRweTn3W2Tf
zwkX+QJFHAd1Om/Ztzqti5oeHGXpaNLMulWkkoMtIoKtx8gRpWOKA0GZQKR8/ia9
C84bZZb8es6yZG/At01zUaxNQleFM7vCxLvjhqK8wDEpFsQ1Ao1+DyK0H9Ancy82
4dBl1qv15ItgQezWQb2LiPQbXV3cmQXcdQN3uLAh1LlH6kCFkulIYgicIcaXfD36
akn1I1TwGNnfEc9ejuP7mMdWmiufC3Q1JudCHS9OPT41slc/Vrn+93rb7l6nPVvW
JCscvrW7nfvzPKcCxwgQtJdrkZhchJr3qYvOZPptXxUYcFAhWCk1Y08ZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXKr4IgjNJZ2JsCpMrDk03Rx0qCMB8GA1UdIwQY
MBaAFErR6Rheqotcccifq+b74qz36pgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMt
YzM4NjY5YjM3YjllLzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMtYzM4NjY5YjM3Yjll
LzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4RpqKbl0
OdYrrStf6ZTNJRoQ4EccKOVmgKlLhpVWGAZguDF2zNYLGzfDQTanFZU906grsWYO
fUwX01eCtb65T2Xa9G+26IvOHSFyVXg0dDIS1ora/5FvJcREsIgzQDu8GS6xb//w
1HkQXzMN+agDfkYh4rT/IdYPgILHOFoA+EfxrwbgEv4CGD0nljmunZB3CfJ3F2rY
qY2H+wpO2A08qWpPFwozn2AxBwpkyXQkiNE/BFnJd9JV/v+sRGxFeO5E+wAKvrmY
VffCNRdVVTfCJHnOBeHjNCeCjXTeNY8ZcrPJ6XHZUiOCcOl4lgHvDapUffxhIjln
vPwWDYjasocthw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 20:22:21 2026 by rpki-client