Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: 97ssDc5J50+MC1lTQ+2ifrnsxWM1EOBEyBPs+qiJzK8=
Subject key identifier: E0:8E:85:A5:40:25:73:D1:4B:57:14:00:5A:E5:3B:0C:5F:7B:D6:C8
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 019EB5E933F87388B1F732344D0E77DE3C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1845
Signing time: Thu 11 Jun 2026 09:00:19 +0000
Manifest this update: Thu 11 Jun 2026 09:00:19 +0000
Manifest next update: Fri 12 Jun 2026 09:00:19 +0000
Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=)
2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: vlkCSxDL3ad5OSgAlI+oqUjOw2Wnyaz+fbx1GO+AiK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:33:f8:73:88:b1:f7:32:34:4d:0e:77:de:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jun 11 09:00:19 2026 GMT
Not After : Jun 12 09:00:19 2026 GMT
Subject: CN=e08e85a5402573d14b5714005ae53b0c5f7bd6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:85:fd:d8:76:0a:2c:5d:6f:2e:ed:29:b3:8e:
f8:14:d8:65:56:40:3d:d1:92:5c:1f:de:00:00:1c:
45:0c:07:db:69:2a:ee:df:41:3e:e3:d7:1c:52:49:
d1:ab:2b:fb:fe:f7:31:72:c7:ce:f3:e2:0d:a7:80:
ae:98:b7:05:dd:17:9d:1e:fd:4e:ce:bf:82:aa:f0:
22:b8:c2:87:ea:f1:65:3d:a5:27:fe:04:e0:f9:11:
75:b2:da:04:c7:e1:d0:24:49:7f:e5:04:a3:fd:99:
51:31:0b:a8:ed:32:6d:ec:0c:d6:d9:3f:a4:60:e0:
4d:8e:ed:1f:c2:10:92:95:5c:4c:80:b1:46:5f:84:
2d:ca:c5:08:f4:bf:19:ee:35:a3:4e:2c:cf:53:0a:
8c:5c:0a:97:e2:bb:72:e3:f3:80:bb:9c:56:e0:50:
ef:0f:db:e0:0e:fd:75:2f:bd:9f:b4:e4:22:e4:3f:
dc:af:0a:75:04:89:32:d7:d4:9d:41:2b:af:c4:85:
31:c7:47:c7:ab:55:30:73:c1:3f:05:d2:0f:1d:54:
bd:0d:9c:de:33:f7:04:1d:8b:cf:3a:f2:57:34:5c:
e1:16:11:15:4e:5a:d7:6d:37:a0:1a:5e:72:9b:4b:
de:bd:00:e6:07:c8:52:ec:66:14:02:99:98:53:0f:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:85:A5:40:25:73:D1:4B:57:14:00:5A:E5:3B:0C:5F:7B:D6:C8
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:b0:2c:3a:0b:e9:8c:ba:6b:67:ae:b9:49:84:5e:37:3f:
26:26:b2:98:e1:f3:af:5e:0a:60:0c:ce:f5:24:e0:9d:95:e4:
bf:1b:c0:e2:d1:86:34:ce:f9:43:70:6d:4f:f9:8a:5f:b5:aa:
e0:f4:88:f2:b4:a8:a3:00:36:aa:67:ee:3c:0b:e4:69:7c:ee:
db:d8:fd:6f:a7:7f:6e:0e:eb:b2:59:08:30:55:a6:18:13:2e:
f2:02:b6:6f:1d:ff:b8:07:4b:43:0b:0c:b3:a0:fc:2e:d1:c4:
6a:33:d4:5f:b1:10:e7:dc:28:8a:dd:c9:95:3d:83:5a:e7:db:
37:9c:0d:94:84:aa:4b:e7:2f:49:fa:3f:c7:e6:08:39:ad:bc:
50:9e:f3:4a:95:e9:b7:28:c0:45:8d:ee:e2:1a:8e:50:e7:6e:
3c:c8:e1:e0:71:90:db:43:ef:8b:b6:ab:39:34:6a:60:11:8d:
ae:fe:71:4c:9a:bd:92:8e:f6:ed:54:21:54:f2:f2:b4:a2:b4:
23:34:5a:08:f3:bd:99:68:6c:6a:1f:51:0a:ae:e7:08:8d:ed:
5c:e9:52:13:da:7d:aa:51:14:46:b8:fe:eb:4c:7d:24:fb:b6:
65:6a:da:bd:6a:5f:bf:0f:47:c6:a3:d9:b8:b8:5f:48:e6:8a:
41:be:8e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ616TP4c4ix9zI0TQ533jxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj
NTY5NDEwHhcNMjYwNjExMDkwMDE5WhcNMjYwNjEyMDkwMDE5WjAzMTEwLwYDVQQD
EyhlMDhlODVhNTQwMjU3M2QxNGI1NzE0MDA1YWU1M2IwYzVmN2JkNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YX92HYKLF1vLu0ps474FNhlVkA9
0ZJcH94AABxFDAfbaSru30E+49ccUknRqyv7/vcxcsfO8+INp4CumLcF3RedHv1O
zr+CqvAiuMKH6vFlPaUn/gTg+RF1stoEx+HQJEl/5QSj/ZlRMQuo7TJt7AzW2T+k
YOBNju0fwhCSlVxMgLFGX4QtysUI9L8Z7jWjTizPUwqMXAqX4rty4/OAu5xW4FDv
D9vgDv11L72ftOQi5D/crwp1BIky19SdQSuvxIUxx0fHq1Uwc8E/BdIPHVS9DZze
M/cEHYvPOvJXNFzhFhEVTlrXbTegGl5ym0vevQDmB8hS7GYUApmYUw+VzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCOhaVAJXPRS1cUAFrlOwxfe9bIMB8GA1UdIwQY
MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt
ZTAzOGQ4MWIzZjk3LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3
LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFGwLDoL
6Yy6a2euuUmEXjc/JiaymOHzr14KYAzO9STgnZXkvxvA4tGGNM75Q3BtT/mKX7Wq
4PSI8rSoowA2qmfuPAvkaXzu29j9b6d/bg7rslkIMFWmGBMu8gK2bx3/uAdLQwsM
s6D8LtHEajPUX7EQ59woit3JlT2DWufbN5wNlISqS+cvSfo/x+YIOa28UJ7zSpXp
tyjARY3u4hqOUOduPMjh4HGQ20Pvi7arOTRqYBGNrv5xTJq9ko727VQhVPLytKK0
IzRaCPO9mWhsah9RCq7nCI3tXOlSE9p9qlEURrj+60x9JPu2ZWravWpfvw9HxqPZ
uLhfSOaKQb6OZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:39:51 2026 by rpki-client