Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json)
Hash identifier: Si2iQZzcnOp1bzNn6wERUix/aWNQ3f05RRE3qvm+Aos=
Subject key identifier: A4:53:9B:6E:BF:16:85:3B:F4:B5:6C:E8:78:15:F2:A7:96:2A:16:45
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019D3940B60448F3AA68C236C11B201B79C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
Manifest number: 06B9
Signing time: Sun 29 Mar 2026 11:00:35 +0000
Manifest this update: Sun 29 Mar 2026 11:00:35 +0000
Manifest next update: Mon 30 Mar 2026 11:00:35 +0000
Files and hashes: 1: 6su6G9gD8e3RN4SkscncX7pH8dU.roa (hash: iX/wppA+kslivMcVzyE3n4qWg+QmDXZMKIru9by6tO4=)
2: P_z7orK0Zgg44s5rDtZD3dJwDDc.roa (hash: Fy4vw6rHz/DMfKM0dkbsBBqCTuDGhhGTvCkwunz8DZ8=)
3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: syks69FAd+OPLgS0c/6YukQ96VZg1MJ56nkORQ2KW0Y=)
4: yDJs078T2iNDYrc-RCCciovCva8.roa (hash: wAIVJosG8WMfleHuNPhHwIW5xrgwCwhO3b++VQ3diMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b6:04:48:f3:aa:68:c2:36:c1:1b:20:1b:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Mar 29 11:00:35 2026 GMT
Not After : Mar 30 11:00:35 2026 GMT
Subject: CN=a4539b6ebf16853bf4b56ce87815f2a7962a1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:75:fa:c1:24:a6:f0:cd:4b:6e:9f:11:c6:
09:11:87:fa:3a:a3:5b:49:a4:54:73:8b:19:78:7f:
d4:06:6b:6f:92:2b:35:b2:53:1a:1f:60:3c:3a:98:
bd:08:d0:d8:98:f8:23:08:95:c8:67:a8:cd:f1:83:
b8:9f:04:73:f0:52:ff:89:89:5c:aa:84:0d:49:ad:
5e:40:4e:5d:44:53:bd:32:73:d7:09:75:41:09:60:
75:94:a3:58:de:24:53:cb:63:ac:ff:ba:44:2a:92:
15:7d:66:7c:4b:56:72:cd:95:f7:96:c6:65:1b:04:
f7:8b:46:c1:33:7c:c3:63:72:9d:d9:82:c9:fe:9e:
59:27:5b:06:1d:45:a2:e3:bc:88:ba:07:ba:f1:b8:
e7:31:c7:5d:e2:9c:94:8b:96:b8:67:cf:f8:13:da:
cc:4c:ac:47:3a:60:70:6a:50:8e:05:78:9f:22:3b:
8a:6e:df:bd:91:38:4d:bf:31:94:0f:0e:34:e0:b9:
ec:fe:74:75:84:e9:ca:c3:12:09:4a:b9:2e:b6:d6:
df:18:6e:4a:9f:b7:40:20:96:44:9d:ca:b3:8f:6c:
42:08:5c:ff:17:6f:44:30:18:52:08:f5:b3:f1:14:
ae:1f:33:28:bf:63:a8:82:3f:1f:04:86:77:98:01:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:9B:6E:BF:16:85:3B:F4:B5:6C:E8:78:15:F2:A7:96:2A:16:45
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f7:12:ad:06:eb:37:72:c7:be:73:5e:4e:8e:95:c6:46:7d:
47:64:dd:27:64:60:e4:4a:51:36:3c:90:93:f4:ea:b4:d0:de:
86:4a:fd:bc:76:1d:8e:83:2f:99:02:8f:c7:06:b3:d8:53:09:
88:c3:57:15:72:e1:f2:f6:90:3b:1f:53:28:5e:34:c8:3b:43:
34:3c:2c:df:34:61:21:ab:c1:84:c1:51:e4:8d:39:43:b9:3b:
ee:7e:7d:13:c8:22:cc:53:ab:3b:bd:30:fd:05:50:be:3b:62:
a9:2a:ae:3f:5e:27:13:78:33:59:c1:c4:be:e9:69:28:25:91:
3e:75:83:2b:0d:e4:b4:34:12:bc:b3:07:c5:2e:f1:50:2c:4e:
b2:75:39:7e:5a:48:c9:4c:6a:21:4d:73:17:68:bd:84:35:42:
a1:1c:fb:48:29:58:40:c7:19:a8:a7:6a:b2:d2:71:8b:d7:14:
d1:2c:60:0a:f1:e3:06:cf:67:f4:11:fd:86:bd:b4:4f:97:24:
58:f9:cb:e4:c5:74:6f:dd:0e:e6:74:84:24:6a:67:c8:c4:10:
cb:34:32:0e:fa:c7:6a:00:55:27:7d:bc:b4:ad:02:0b:dd:d6:
33:25:c6:3c:d6:da:bc:cf:7a:5f:8f:37:c5:d1:01:9b:d6:fa:
9c:51:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:55 2026 by rpki-client