Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: o3Yyq961SCRacDtLTJycFLaLBIudreJZurG8QkhrNik=
Subject key identifier: D0:CD:ED:2F:D9:0F:1F:DC:4F:D7:85:2B:C6:C9:54:74:9D:9E:D5:BB
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 01A08AFADA48D636CC9F1E72A27DFDD96248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 03E3
Signing time: Thu 10 Sep 2026 11:01:30 +0000
Manifest this update: Thu 10 Sep 2026 11:01:30 +0000
Manifest next update: Fri 11 Sep 2026 11:01:30 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: CPMaXRXYql9/GZHXiuvUV/i6ImUa2wfZRnlzJLcY4zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:da:48:d6:36:cc:9f:1e:72:a2:7d:fd:d9:62:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Sep 10 11:01:30 2026 GMT
Not After : Sep 11 11:01:30 2026 GMT
Subject: CN=d0cded2fd90f1fdc4fd7852bc6c954749d9ed5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:55:01:87:9b:89:b5:ec:1c:b8:2f:ea:a6:
52:46:e0:fe:ac:74:23:4a:00:45:de:11:85:c3:06:
2b:36:6e:9d:21:72:43:52:81:20:d0:ba:a5:de:56:
1c:c5:8e:cc:5a:de:9a:8b:be:5a:c3:b4:48:ac:0e:
1f:39:04:55:68:93:fd:5e:2a:4f:46:a0:29:30:93:
86:b4:f2:bc:ae:93:79:d2:37:69:4b:6b:dd:fe:cd:
a3:f0:83:47:68:7c:b0:b7:72:7e:18:66:0f:93:9e:
00:bf:ed:9d:af:1a:b1:c3:8d:83:8a:d5:12:90:ee:
45:58:be:5e:c6:b8:b7:52:6d:67:e5:54:7b:b3:9b:
0f:d9:13:9a:25:8f:9e:2d:c6:0b:44:f0:9d:8b:94:
49:68:bd:40:3c:ab:30:47:5e:d3:09:a6:33:e7:a3:
bc:c6:32:5c:4a:a7:12:ee:9e:9a:38:76:e7:95:ce:
9f:a8:d6:b5:62:f0:18:52:df:c5:82:19:f9:ff:d3:
20:8d:b8:80:bd:a1:60:4e:f5:83:71:ba:91:74:ef:
7f:f7:0d:0b:0b:63:83:ca:d6:cc:f4:68:54:fd:cf:
86:e6:ab:42:7c:41:a8:e9:3d:10:fb:12:e8:e5:ac:
7a:03:9c:26:03:1c:6a:28:5a:7d:53:de:ac:33:a4:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:ED:2F:D9:0F:1F:DC:4F:D7:85:2B:C6:C9:54:74:9D:9E:D5:BB
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:f6:be:66:e3:d8:74:37:a7:0b:0e:5e:e5:ec:2b:63:00:
4e:eb:80:4b:2f:f8:71:6f:50:fb:eb:4c:38:a7:76:79:a1:8d:
ea:bc:2a:08:4c:72:f7:eb:c5:82:bc:7c:09:85:93:b7:ca:f1:
aa:f5:e0:dd:72:70:1c:78:2e:37:d8:6d:39:e5:0e:28:ac:b9:
f8:89:7a:0d:56:5e:ee:22:ed:b6:2c:e7:ea:31:f7:a0:a1:47:
4f:69:03:3e:c7:44:36:28:e9:64:f7:8e:2f:01:cc:04:9f:a4:
86:03:ae:29:ef:96:e4:bb:0e:50:92:38:de:5e:7c:38:06:fc:
7c:bd:4c:17:a8:81:39:6f:33:40:54:c6:bc:6c:dc:53:f4:f3:
d6:2f:0c:ba:a4:4d:3b:0f:94:ab:2f:a3:14:72:92:78:dd:f1:
85:d3:57:74:a5:90:f3:b8:da:ee:49:87:e4:dd:11:cc:64:c8:
d4:cf:9f:0d:ea:04:24:a2:35:3c:f7:bb:c4:79:09:04:91:56:
43:71:29:3a:0e:76:8a:89:b3:da:4e:c9:d8:4d:9f:88:83:24:
b8:37:3f:47:ab:7e:1a:04:2c:79:14:88:de:3e:24:04:aa:bc:
4e:0e:ad:11:ab:22:a3:86:b1:ed:c8:5d:ba:62:ed:d9:68:0c:
a5:f1:ed:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+tpI1jbMnx5yon392WJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDJjMTFhZmYwNzJiZWMzN2E1ODI2MjExNGUxYzA2YmVk
YjQ5NDIwHhcNMjYwOTEwMTEwMTMwWhcNMjYwOTExMTEwMTMwWjAzMTEwLwYDVQQD
EyhkMGNkZWQyZmQ5MGYxZmRjNGZkNzg1MmJjNmM5NTQ3NDlkOWVkNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVVVAYebibXsHLgv6qZSRuD+rHQj
SgBF3hGFwwYrNm6dIXJDUoEg0Lql3lYcxY7MWt6ai75aw7RIrA4fOQRVaJP9XipP
RqApMJOGtPK8rpN50jdpS2vd/s2j8INHaHywt3J+GGYPk54Av+2drxqxw42DitUS
kO5FWL5exri3Um1n5VR7s5sP2ROaJY+eLcYLRPCdi5RJaL1APKswR17TCaYz56O8
xjJcSqcS7p6aOHbnlc6fqNa1YvAYUt/Fghn5/9MgjbiAvaFgTvWDcbqRdO9/9w0L
C2ODytbM9GhU/c+G5qtCfEGo6T0Q+xLo5ax6A5wmAxxqKFp9U96sM6QU2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDN7S/ZDx/cT9eFK8bJVHSdntW7MB8GA1UdIwQY
MBaAFLLSwRr/ByvsN6WCYhFOHAa+20lCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yODNkMzItMzgwYS00ZTZlLWE5NTct
YzViYWVhM2YxNzI5LzEvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yODNkMzItMzgwYS00ZTZlLWE5NTctYzViYWVhM2YxNzI5
LzEvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVf2vmbj
2HQ3pwsOXuXsK2MATuuASy/4cW9Q++tMOKd2eaGN6rwqCExy9+vFgrx8CYWTt8rx
qvXg3XJwHHguN9htOeUOKKy5+Il6DVZe7iLttizn6jH3oKFHT2kDPsdENijpZPeO
LwHMBJ+khgOuKe+W5LsOUJI43l58OAb8fL1MF6iBOW8zQFTGvGzcU/Tz1i8MuqRN
Ow+Uqy+jFHKSeN3xhdNXdKWQ87ja7kmH5N0RzGTI1M+fDeoEJKI1PPe7xHkJBJFW
Q3EpOg52iomz2k7J2E2fiIMkuDc/R6t+GgQseRSI3j4kBKq8Tg6tEasio4ax7chd
umLt2WgMpfHtnQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:13 2026 by rpki-client