Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
File: ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft (raw, json)
Hash identifier: 8ipZa2/oVc9sl8bT2Tde1QjF4vKch8q0A/v+aQpJUrg=
Subject key identifier: 7E:C9:20:17:71:56:E0:18:A9:F6:EF:30:69:23:4A:E2:DE:47:39:5A
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 019FAE2DB3476D49260B5814D88983DB3A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
Manifest number: 2D
Signing time: Wed 29 Jul 2026 14:00:58 +0000
Manifest this update: Wed 29 Jul 2026 14:00:58 +0000
Manifest next update: Thu 30 Jul 2026 14:00:58 +0000
Files and hashes: 1: 9KcTd1IGZHRv0B-1lN3bR5j0dnA.roa (hash: eFhdSfFf7rhWziAPLqibOglSLYqWl4gf7RvZLdXF6D0=)
2: ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl (hash: oSxAQPKdgPBv4Bt59LvqUsjjwN35aDxo9AodO0o7ASI=)
3: fHjeWk0X-9p1R4DiQBN0NOabyAY.roa (hash: CXvc3jafQmeKRESg6l+phyxsh/MDhMbCl7fOLISnWT8=)
4: iM1oUl29TZo8TBmUQuzNvFuJWQs.roa (hash: jxbp4u9Zss89VbcKpO1URl2CR7HBCn20++6ggU5n1h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:b3:47:6d:49:26:0b:58:14:d8:89:83:db:3a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Jul 29 14:00:58 2026 GMT
Not After : Jul 30 14:00:58 2026 GMT
Subject: CN=7ec920177156e018a9f6ef3069234ae2de47395a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:07:ad:ee:c3:a6:51:10:96:a0:5b:29:8f:
15:57:ca:0c:a3:c2:93:c3:c6:10:85:dd:9a:63:6d:
d7:0f:90:67:6a:c2:32:c9:dc:81:98:71:0d:79:25:
fe:e4:6e:1f:ab:1d:ab:4c:08:d3:f7:79:ae:25:2a:
9c:76:d5:15:e8:cf:39:d5:4a:64:42:8b:6f:7d:c0:
f3:97:3d:a6:80:ff:a3:e5:c7:48:99:58:5e:be:42:
60:af:68:02:c2:7f:68:69:a1:c3:a4:60:72:9c:b2:
ed:ab:11:7f:98:48:d6:7f:31:b1:97:e4:15:26:68:
b7:64:86:76:1d:0f:c5:8f:25:bb:ad:4f:8b:ed:7a:
d7:25:74:a7:60:05:a6:e6:12:81:84:5d:2d:e8:3f:
f6:32:fc:c5:62:a5:59:a1:b4:b6:69:64:83:7d:bf:
7f:c0:c9:0f:72:0b:83:1d:d2:82:f6:bf:1d:56:91:
78:95:7f:e8:ea:48:05:23:a2:34:0d:66:94:39:56:
67:97:10:7c:ea:80:2b:3c:55:f2:dd:4a:71:c5:58:
ca:ec:9d:42:83:86:f6:b6:df:94:05:47:bd:c1:19:
3d:dc:77:42:75:23:7a:99:df:2f:31:35:3f:26:3c:
62:f4:ef:97:0b:7d:df:1b:37:77:b6:c6:45:19:00:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:20:17:71:56:E0:18:A9:F6:EF:30:69:23:4A:E2:DE:47:39:5A
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:3d:27:e5:b9:b1:41:89:7e:cd:98:c4:a5:b1:6e:94:9b:
f3:42:6a:52:5b:ef:fc:68:5b:a5:c7:7c:89:78:8e:89:03:66:
60:e7:c5:42:97:4b:25:70:25:4e:41:73:04:8e:24:8a:7a:cc:
ca:81:33:fc:cc:c7:f1:13:b4:b1:b6:03:39:f6:95:f1:a7:16:
02:fd:fb:00:fa:cc:4b:04:50:7f:6f:34:c2:b2:a3:51:05:1c:
c7:49:85:75:07:ff:2a:ee:45:b5:b3:ba:94:a8:3c:63:c6:84:
28:ab:15:a4:f5:0a:59:7d:9c:63:23:4f:d7:9a:48:23:66:4d:
28:0c:16:4d:b9:00:8e:49:c7:8e:51:10:3d:29:cf:a2:92:3b:
34:33:64:b1:dd:6e:ff:8a:39:63:98:7c:e0:51:5c:34:da:10:
28:cb:9d:67:b0:cd:86:e0:1a:31:a8:a7:c5:18:a2:7a:19:f2:
d8:58:dd:2d:18:25:86:f8:fc:df:64:c5:1d:7c:f5:53:30:ec:
32:a9:ba:1a:52:3e:2d:cc:75:fb:25:5c:5a:f2:70:39:35:ca:
b8:3b:9c:ce:98:4f:37:eb:05:d0:58:a9:de:2a:c3:2f:ee:44:
5e:7c:51:35:e0:78:8e:a4:29:82:f0:d2:a1:ad:de:b4:95:2e:
3a:09:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:36:59 2026 by rpki-client