Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
File: StKnRjT4YRfcE9GpJgRw3u5vdrU.mft (raw, json)
Hash identifier: SQOwOOz9VklrhxTZgyJOF/sDZAArh+/puxt+h/IVIRk=
Subject key identifier: BA:0F:B9:CB:E7:89:0E:62:DF:2B:9A:B3:76:D9:17:18:63:B7:0D:E4
Authority key identifier: 4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
Certificate issuer: /CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Certificate serial: 01A1AC3AFB91B5A16307491DD160C007CCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
Manifest number: 0157
Signing time: Thu 05 Nov 2026 15:01:48 +0000
Manifest this update: Thu 05 Nov 2026 15:01:48 +0000
Manifest next update: Fri 06 Nov 2026 15:01:48 +0000
Files and hashes: 1: 9Ofa4VmuCjaO-DF5AbTQmQU6YGY.roa (hash: KQP2rMOpDatuw1qkt95mEYPMGXLnMr/DJh8hFVLv6+A=)
2: StKnRjT4YRfcE9GpJgRw3u5vdrU.crl (hash: m/Q1JzdSUa1EDFhaLsTpBEda9eJeDeL8PfI0SXoQKdE=)
3: UWpDxfB-ZuspD5wESUrL1kAVF7U.asa (hash: KLnBS9RAg/FIurQ1lNJtMihGIo9/bb6dhIB8i9SVeek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:3a:fb:91:b5:a1:63:07:49:1d:d1:60:c0:07:cc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad2a74634f86117dc13d1a9260470deee6f76b5
Validity
Not Before: Nov 5 15:01:48 2026 GMT
Not After : Nov 6 15:01:48 2026 GMT
Subject: CN=ba0fb9cbe7890e62df2b9ab376d9171863b70de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:26:1e:7f:8e:3c:8c:2e:b9:06:c3:21:3b:
2d:b6:a9:36:c8:bb:7b:29:d0:1d:1b:5a:46:ee:79:
e0:f4:ef:1c:e4:b3:22:7d:42:b5:62:aa:eb:30:5b:
d4:e9:1f:c6:17:f4:d3:71:48:98:d4:a1:06:7a:fb:
9c:40:4a:b5:6c:52:d7:e6:9d:61:88:79:4f:fd:af:
59:79:c7:0e:0c:ef:4c:3f:06:3c:2c:5b:76:05:50:
a5:97:45:83:f9:5b:d3:b5:22:f8:ab:d5:a4:b2:11:
97:92:b8:e1:51:4b:84:15:14:4d:4a:76:2a:7c:09:
b9:a4:ca:b4:84:9e:43:b4:8d:a1:fb:1d:7e:fd:99:
10:69:1b:93:ea:fe:80:db:a0:ac:2d:b5:9a:1b:d3:
17:d2:f9:7d:2d:77:b9:55:f5:12:c7:20:09:16:cb:
01:5b:8e:cb:92:f1:e5:fd:95:58:6b:57:d6:80:4c:
6f:5b:59:ab:be:3e:e8:a1:0f:d9:75:1b:66:09:bd:
11:b1:d3:dd:30:3d:0e:b5:95:0f:db:a4:34:27:9a:
62:37:da:cb:07:f4:cd:15:f2:39:ac:d4:56:7e:dd:
3c:57:bd:ff:63:56:c0:4d:22:6c:77:10:f8:25:ba:
a9:e4:cf:d7:09:3f:8a:3a:d1:e2:22:74:b7:2a:82:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:B9:CB:E7:89:0E:62:DF:2B:9A:B3:76:D9:17:18:63:B7:0D:E4
X509v3 Authority Key Identifier:
keyid:4A:D2:A7:46:34:F8:61:17:DC:13:D1:A9:26:04:70:DE:EE:6F:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StKnRjT4YRfcE9GpJgRw3u5vdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0caa48-6aa3-461b-b490-c0f79833527f/1/StKnRjT4YRfcE9GpJgRw3u5vdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:ff:f1:7b:59:f3:2e:d4:26:28:c3:70:03:8c:a9:6a:66:
ce:ce:bb:94:de:a7:b9:75:a0:44:c4:cf:ea:7b:2b:cc:15:b0:
bc:6d:e0:02:f7:b1:7f:37:b9:d4:3f:83:23:e5:1a:1d:d6:20:
6c:05:a6:46:55:3e:ab:0c:27:8d:80:99:7f:72:b7:18:49:dd:
76:c1:40:fe:68:76:33:a4:dc:d7:c7:14:fc:01:9e:c0:bc:c9:
c1:77:47:d3:32:7f:3d:0d:62:90:28:fd:30:e6:ad:81:61:3a:
85:8f:98:1b:63:02:cc:83:4a:ec:48:99:c7:04:df:ac:7d:4e:
84:01:e4:21:b2:b7:97:bb:7f:31:f5:bc:61:76:56:6f:bc:7d:
7a:6c:e2:c8:7b:09:4b:49:7e:7c:97:bf:d9:03:5b:ac:82:03:
d4:36:19:c6:37:ac:ae:ec:35:24:b8:fa:52:23:6c:66:f4:87:
e6:2e:ce:6b:7f:c5:3a:1e:2f:e2:87:66:b3:40:75:cf:11:ba:
06:c3:bb:2c:e7:6b:aa:69:24:09:7d:46:77:fc:ac:d9:4c:28:
32:e9:8f:93:11:86:aa:83:35:63:ad:d7:01:5f:2a:2e:3c:b5:
af:bc:e7:3a:d1:3f:c3:a2:8a:81:6b:03:00:da:df:69:3b:69:
0d:13:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:24:39 2026 by rpki-client