Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: Q3uWq17aUXR7lMdaHCI2YV1rmz5J4SU1+o/Yy2+RuPw=
Subject key identifier: EB:AA:04:D6:AB:3C:05:47:CF:D9:E0:A0:91:5B:AB:26:8C:11:8B:BA
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 019D39778B0DAA8F8FB1102E0FA1531AFCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1780
Signing time: Sun 29 Mar 2026 12:00:28 +0000
Manifest this update: Sun 29 Mar 2026 12:00:28 +0000
Manifest next update: Mon 30 Mar 2026 12:00:28 +0000
Files and hashes: 1: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (hash: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8=)
2: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: lHoMV64u3gwdZ6hKnVotnwZaZ2G2mSWNv0sWN8LVxtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8b:0d:aa:8f:8f:b1:10:2e:0f:a1:53:1a:fc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Mar 29 12:00:28 2026 GMT
Not After : Mar 30 12:00:28 2026 GMT
Subject: CN=ebaa04d6ab3c0547cfd9e0a0915bab268c118bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:40:95:22:15:41:a5:b2:f6:45:e0:47:09:
15:72:f7:b3:76:20:df:72:96:ae:ff:2d:4b:bf:38:
6c:c7:c7:84:ed:8a:c8:d3:45:c3:b4:31:21:15:62:
fd:81:54:4c:4e:c8:ba:9f:6a:c7:1d:11:eb:33:db:
04:99:92:cb:c2:c9:5c:5f:41:50:ee:30:bd:de:24:
46:7f:10:2f:30:4d:b7:eb:5a:27:74:67:0c:8e:d6:
48:07:d9:9a:64:9d:9d:62:7b:9f:94:e3:68:9a:7d:
32:bc:36:dc:f5:8d:36:c6:0a:45:9c:61:b5:d4:77:
01:b1:69:7b:e0:05:c5:93:1f:b9:d2:7e:2c:35:e1:
9b:f1:42:d9:fb:12:b1:5a:30:28:82:3e:76:7b:d8:
39:5f:aa:52:05:80:38:d4:dd:82:1a:8f:81:70:aa:
2b:b3:ec:3d:c1:74:c4:5a:aa:58:cb:54:d8:00:c6:
b9:97:b0:21:4c:0f:9d:86:96:c7:44:9e:5f:27:ef:
8f:f2:1e:bf:e7:56:68:e7:c9:f3:c3:d7:9e:a3:6b:
9a:70:f3:e9:df:38:43:3a:3c:9f:10:92:ab:bb:24:
32:bf:89:a7:5c:51:cd:8b:ad:bf:d8:e6:f1:fa:a6:
73:ab:02:b4:1d:6d:8e:a8:69:e0:fe:6d:1e:3c:d4:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:04:D6:AB:3C:05:47:CF:D9:E0:A0:91:5B:AB:26:8C:11:8B:BA
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:69:c8:ea:ec:cc:de:ad:85:8a:eb:d6:db:cc:05:8c:69:10:
4f:fe:2e:f8:22:2a:6a:36:62:db:e7:ee:9e:44:9c:c4:6f:3b:
13:cd:94:82:f8:3d:97:95:96:66:58:0f:51:71:01:28:fc:ee:
bc:04:cb:50:36:42:6b:42:b7:0b:7d:c3:36:27:86:ab:b1:24:
ac:c7:0d:04:4e:54:dd:43:07:a8:8f:ef:03:ca:22:6f:f4:90:
8c:35:9b:10:d7:c8:65:68:39:9f:a0:68:51:b4:b5:3a:c7:4e:
c0:cb:10:5e:57:bf:8a:ea:ab:64:fe:d6:da:eb:dc:86:80:d8:
f5:31:89:39:84:cf:26:a5:cb:29:c3:6e:2f:47:0e:7f:e4:e8:
dc:4b:d0:d8:11:4d:dd:f1:1f:14:42:fb:6e:d9:a1:b8:5d:1d:
5f:77:78:85:5b:e1:6b:61:ff:be:de:e6:ef:a2:03:f1:a7:50:
cf:af:e9:5d:51:20:62:78:6c:9e:b2:3e:42:ea:15:de:b0:da:
32:74:32:9a:47:9c:3f:3f:ad:7d:40:d4:1d:73:79:2a:e6:1c:
b9:5a:c9:45:95:de:70:ca:a3:60:6d:d8:04:51:84:fb:ba:9e:
cf:17:4d:96:4f:ef:29:f8:da:fa:62:ac:f0:46:58:1d:00:ec:
14:85:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:04 2026 by rpki-client