Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: tscs5KRDSsKu13eme83APxYHX4Ouq7C0Z1C64Yf5GgA=
Subject key identifier: 58:ED:35:4E:20:7B:DB:84:EF:FC:AC:F5:70:AF:08:42:EF:17:1F:E6
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 019FCB5D8CF8F2F2ED971BB871785EEDFA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: 5E
Signing time: Tue 04 Aug 2026 06:02:13 +0000
Manifest this update: Tue 04 Aug 2026 06:02:13 +0000
Manifest next update: Wed 05 Aug 2026 06:02:13 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: H4c2MUe6UrjFyV9fsjzieGagmOJp1yYHoeT8FrgONmY=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5d:8c:f8:f2:f2:ed:97:1b:b8:71:78:5e:ed:fa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Aug 4 06:02:13 2026 GMT
Not After : Aug 5 06:02:13 2026 GMT
Subject: CN=58ed354e207bdb84effcacf570af0842ef171fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:34:7a:03:f5:e3:44:13:1b:1e:3e:e6:61:
67:8b:6f:8c:69:7c:83:56:40:43:40:b0:69:28:bf:
da:3f:79:65:3c:04:76:ff:d2:6f:f0:3f:8a:f2:53:
49:e3:88:58:90:04:ff:c2:94:ee:61:12:ad:15:e9:
73:4c:03:33:5e:8d:0a:0b:a7:97:92:fe:ab:04:89:
50:82:b5:9f:aa:70:75:38:72:fe:e1:42:b0:93:88:
4c:44:d7:74:fd:af:69:3a:b0:79:9f:34:4b:d9:ff:
e1:28:38:cd:f1:e2:66:ff:7f:87:1d:dd:ba:06:d3:
32:c4:43:8a:26:e5:bc:be:0b:65:5f:b3:78:02:3f:
72:73:60:ce:36:88:2d:75:e9:8d:44:cf:f6:91:08:
44:6b:1a:bb:82:80:e9:13:c4:b4:27:f0:5d:08:5a:
1e:a2:a2:66:e4:e1:4c:2f:3a:d7:49:d2:9e:03:4b:
3d:9d:47:63:67:ed:68:d6:53:52:1e:ea:df:fd:28:
c7:d3:8d:49:62:34:e8:2f:53:aa:12:3b:56:07:bb:
78:e5:95:da:e0:01:9d:5b:24:9b:51:6a:80:ad:95:
6d:da:52:31:e1:1c:ac:90:c9:fb:48:fc:f3:49:4b:
98:a5:ad:64:b7:b3:53:3c:27:52:a5:35:41:81:4d:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:35:4E:20:7B:DB:84:EF:FC:AC:F5:70:AF:08:42:EF:17:1F:E6
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ae:09:c5:bd:b9:4b:e6:31:35:fb:ac:33:dc:3a:72:5d:b0:
17:63:70:00:67:96:88:75:ef:d1:5f:fe:f2:c5:87:d6:cc:2b:
85:5b:85:bc:d3:9a:b7:b4:db:30:08:74:4f:79:6d:95:b1:0d:
20:6c:2c:f4:02:f1:d3:50:4c:56:0f:41:44:72:d8:d2:32:f2:
d6:a6:84:54:c4:0e:cf:67:1c:6d:5e:0c:d9:22:50:ef:7f:c5:
b2:f7:83:79:ac:01:6c:14:85:6d:cb:c3:9d:b9:7f:96:9a:54:
13:b5:b8:ec:05:fe:d6:96:39:ee:5b:1f:2b:c7:2b:ff:d2:05:
3e:cd:6e:9b:e4:48:39:ec:ea:b3:7d:3c:f0:fd:fa:c8:ce:59:
33:08:6a:b3:e9:7b:fe:9a:f9:38:70:0d:a2:22:a2:67:f9:cb:
f2:b1:2d:7e:90:20:c9:86:45:c4:94:a3:d7:cc:16:6c:2d:97:
ae:1c:90:f4:7c:dd:2b:21:a1:b6:53:b4:e3:55:e0:81:65:be:
d1:db:6f:11:07:f1:24:a5:43:c4:b3:17:db:75:5d:0c:7b:2d:
f9:e3:27:f8:25:c4:62:b0:3c:eb:77:db:0b:3b:43:2d:4a:ac:
16:ca:d9:e0:66:c2:c9:67:44:4f:a6:e7:11:e5:30:e5:17:0a:
cc:e3:ff:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LXYz48vLtlxu4cXhe7fqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDJhNzQ2MzRmODYxMTdkYzEzZDFhOTI2MDQ3MGRlZWU2
Zjc2YjUwHhcNMjYwODA0MDYwMjEzWhcNMjYwODA1MDYwMjEzWjAzMTEwLwYDVQQD
Eyg1OGVkMzU0ZTIwN2JkYjg0ZWZmY2FjZjU3MGFmMDg0MmVmMTcxZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQM0egP140QTGx4+5mFni2+MaXyD
VkBDQLBpKL/aP3llPAR2/9Jv8D+K8lNJ44hYkAT/wpTuYRKtFelzTAMzXo0KC6eX
kv6rBIlQgrWfqnB1OHL+4UKwk4hMRNd0/a9pOrB5nzRL2f/hKDjN8eJm/3+HHd26
BtMyxEOKJuW8vgtlX7N4Aj9yc2DONogtdemNRM/2kQhEaxq7goDpE8S0J/BdCFoe
oqJm5OFMLzrXSdKeA0s9nUdjZ+1o1lNSHurf/SjH041JYjToL1OqEjtWB7t45ZXa
4AGdWySbUWqArZVt2lIx4RyskMn7SPzzSUuYpa1kt7NTPCdSpTVBgU1KoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjtNU4ge9uE7/ys9XCvCELvFx/mMB8GA1UdIwQY
MBaAFErSp0Y0+GEX3BPRqSYEcN7ub3a1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAt
YzBmNzk4MzM1MjdmLzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAtYzBmNzk4MzM1Mjdm
LzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAla4Jxb25
S+YxNfusM9w6cl2wF2NwAGeWiHXv0V/+8sWH1swrhVuFvNOat7TbMAh0T3ltlbEN
IGws9ALx01BMVg9BRHLY0jLy1qaEVMQOz2ccbV4M2SJQ73/FsveDeawBbBSFbcvD
nbl/lppUE7W47AX+1pY57lsfK8cr/9IFPs1um+RIOezqs3088P36yM5ZMwhqs+l7
/pr5OHANoiKiZ/nL8rEtfpAgyYZFxJSj18wWbC2XrhyQ9HzdKyGhtlO041XggWW+
0dtvEQfxJKVDxLMX23VdDHst+eMn+CXEYrA863fbCztDLUqsFsrZ4GbCyWdET6bn
EeUw5RcKzOP/Ew==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:33:15 2026 by rpki-client