Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: /CwmBUAhA95gWNvgHmwLhf1oGTbY8oGJ3UAaJZvqoaU=
Subject key identifier: 12:99:25:C7:FA:E5:4D:79:DD:CA:47:C2:99:0F:2D:D5:FC:AC:99:5B
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 01A0B6F7EB74E69D0D57F43B4064BFBD5B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:01:36 +0000
Manifest this update: Sat 19 Sep 2026 00:01:36 +0000
Manifest next update: Sun 20 Sep 2026 00:01:36 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: xGWPpLoof2qr8wanAv80gpLwEWQHqH5frwqX47K13Cc=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:eb:74:e6:9d:0d:57:f4:3b:40:64:bf:bd:5b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Sep 19 00:01:36 2026 GMT
Not After : Sep 20 00:01:36 2026 GMT
Subject: CN=129925c7fae54d79ddca47c2990f2dd5fcac995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:64:f4:8e:11:f4:f9:b8:1b:0c:be:74:e2:
bc:30:46:e8:c4:02:cd:d6:10:a5:a6:63:7f:e8:a2:
2f:cf:13:72:f5:97:1a:ae:2c:b4:b4:f9:6e:14:d1:
a0:14:d1:a5:40:8b:a0:f1:e1:7a:a3:1c:a4:a1:0a:
c5:4f:41:ad:ce:45:21:d9:27:5c:b0:93:a9:ad:5b:
6f:42:bd:66:eb:7e:61:14:3f:74:e5:f2:62:39:53:
bf:d3:43:9a:f1:26:28:bd:ee:be:de:75:21:22:e4:
50:41:92:b0:bf:44:52:a3:41:0b:bd:2a:85:7a:6c:
72:0a:b9:3c:01:e8:00:6f:e8:36:46:87:9c:5b:86:
c0:2d:c5:34:35:29:11:e6:7f:12:46:53:c9:11:30:
43:5e:e5:e1:d4:3f:88:b7:7b:d3:a1:78:d5:ce:1e:
02:f3:a0:30:b1:bd:78:5e:54:d9:7a:74:9a:7c:a6:
2e:54:96:79:41:cf:4e:96:f8:bc:98:61:95:17:ee:
67:e7:41:6a:0e:81:26:27:21:1c:a9:57:f5:91:87:
29:fe:5b:a6:50:82:23:34:3c:de:07:5d:ce:86:31:
4c:5b:a6:4c:81:71:22:e9:7b:f3:fa:5f:d5:f7:e1:
d5:c0:1c:5a:73:8d:ef:cb:c5:83:8a:d3:cc:0e:9a:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:25:C7:FA:E5:4D:79:DD:CA:47:C2:99:0F:2D:D5:FC:AC:99:5B
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:4d:80:15:e0:8a:b8:4c:c6:c7:99:e8:69:15:6f:01:75:
66:46:93:bc:1c:f1:98:14:64:5b:37:de:74:1f:52:40:dd:6a:
bb:5e:28:7e:30:54:20:f9:d1:82:15:05:d8:7e:2c:f8:1e:b1:
93:ae:95:d0:70:f9:02:ec:30:14:22:31:7a:ad:1c:0a:95:ff:
d3:5e:68:53:14:82:68:61:73:f3:ed:12:d8:e1:f3:7d:1f:48:
e3:ad:29:2e:97:2c:7c:99:cb:56:cc:e1:03:5a:fa:f6:1c:29:
dc:31:ea:3a:5b:77:e9:e1:3a:5e:16:38:0e:16:cb:d2:2e:f5:
9b:8a:14:75:e4:b0:e2:83:74:9f:25:21:32:43:f3:83:91:8d:
59:45:9f:8b:5d:c3:8c:26:af:3d:8c:19:99:64:c2:ea:8c:78:
f3:f8:65:07:35:3e:4f:ef:d1:e0:a4:86:38:1b:be:7e:8f:f1:
b5:1a:d5:40:10:8d:b6:a1:2b:57:59:c5:12:1f:71:0b:54:de:
4c:3a:06:63:a9:4a:26:56:6b:fa:c6:13:3a:8a:f0:bf:7e:ab:
9d:c7:28:fe:28:c5:2f:89:f5:00:43:0a:8e:ce:2d:e8:64:83:
a9:8e:ab:ec:ff:5f:30:8b:5b:4e:0b:1d:7f:00:25:c7:89:29:
ee:c7:1b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC29+t05p0NV/Q7QGS/vVsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDJhNzQ2MzRmODYxMTdkYzEzZDFhOTI2MDQ3MGRlZWU2
Zjc2YjUwHhcNMjYwOTE5MDAwMTM2WhcNMjYwOTIwMDAwMTM2WjAzMTEwLwYDVQQD
EygxMjk5MjVjN2ZhZTU0ZDc5ZGRjYTQ3YzI5OTBmMmRkNWZjYWM5OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq85k9I4R9Pm4Gwy+dOK8MEboxALN
1hClpmN/6KIvzxNy9Zcariy0tPluFNGgFNGlQIug8eF6oxykoQrFT0GtzkUh2Sdc
sJOprVtvQr1m635hFD905fJiOVO/00Oa8SYove6+3nUhIuRQQZKwv0RSo0ELvSqF
emxyCrk8AegAb+g2RoecW4bALcU0NSkR5n8SRlPJETBDXuXh1D+It3vToXjVzh4C
86Awsb14XlTZenSafKYuVJZ5Qc9Olvi8mGGVF+5n50FqDoEmJyEcqVf1kYcp/lum
UIIjNDzeB13OhjFMW6ZMgXEi6Xvz+l/V9+HVwBxac43vy8WDitPMDpplJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKZJcf65U153cpHwpkPLdX8rJlbMB8GA1UdIwQY
MBaAFErSp0Y0+GEX3BPRqSYEcN7ub3a1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAt
YzBmNzk4MzM1MjdmLzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2FhNDgtNmFhMy00NjFiLWI0OTAtYzBmNzk4MzM1Mjdm
LzEvU3RLblJqVDRZUmZjRTlHcEpnUnczdTV2ZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7FNgBXg
irhMxseZ6GkVbwF1ZkaTvBzxmBRkWzfedB9SQN1qu14ofjBUIPnRghUF2H4s+B6x
k66V0HD5AuwwFCIxeq0cCpX/015oUxSCaGFz8+0S2OHzfR9I460pLpcsfJnLVszh
A1r69hwp3DHqOlt36eE6XhY4DhbL0i71m4oUdeSw4oN0nyUhMkPzg5GNWUWfi13D
jCavPYwZmWTC6ox48/hlBzU+T+/R4KSGOBu+fo/xtRrVQBCNtqErV1nFEh9xC1Te
TDoGY6lKJlZr+sYTOorwv36rncco/ijFL4n1AEMKjs4t6GSDqY6r7P9fMItbTgsd
fwAlx4kp7scb0w==
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:34:17 2026 by rpki-client