Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: AcOWcubaqhLU55MQ7Nefgs973bLd3shQK/geDwmHI6U=
Subject key identifier: 4D:CA:EC:B4:56:96:B1:A0:40:40:40:2E:FA:D7:E2:B7:12:1D:C0:B6
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 01A17E4F3F9F3F266584CA2D723185CBF77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 0461
Signing time: Tue 27 Oct 2026 17:01:24 +0000
Manifest this update: Tue 27 Oct 2026 17:01:24 +0000
Manifest next update: Wed 28 Oct 2026 17:01:24 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: RC74E98F9A4LY0ChlfVEImHeexcRIwYJy77OItpiyuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:3f:9f:3f:26:65:84:ca:2d:72:31:85:cb:f7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Oct 27 17:01:24 2026 GMT
Not After : Oct 28 17:01:24 2026 GMT
Subject: CN=4dcaecb45696b1a04040402efad7e2b7121dc0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:b7:6c:19:3f:b6:c5:61:8c:3c:7c:fd:16:
20:37:b0:ef:3c:3c:db:a1:f1:6a:7f:fe:13:b0:15:
95:f7:a0:b4:2e:0b:1c:72:b5:60:14:a2:e6:f0:82:
68:5a:96:fb:b3:2f:86:2c:80:9a:77:e5:a7:da:63:
63:1e:b8:71:8f:ae:d2:3c:80:38:a6:55:34:ac:8b:
95:6e:78:6e:83:55:b2:43:15:95:c6:d6:ed:e4:25:
5d:59:2e:e0:ea:a5:06:ac:72:75:94:ba:67:f6:b7:
fd:55:23:fb:d1:2b:e6:c1:6b:cd:90:96:f7:ef:db:
9d:b4:f3:89:a2:87:62:8c:95:af:da:e2:33:39:fe:
37:ce:de:3c:06:2a:e9:91:06:54:3b:ca:d4:e5:1e:
76:26:4d:e5:77:8f:64:84:c0:20:b0:e4:d4:f2:12:
30:c7:23:f0:ce:0d:70:d6:37:4a:a5:27:36:ff:b8:
b1:5c:3d:89:d1:7c:34:aa:d6:2c:d9:54:b2:75:3c:
a0:bd:a7:e2:84:20:a4:68:a0:de:1e:d4:c1:6f:21:
2b:d8:e4:3a:d9:d9:45:b7:66:d4:64:82:e8:21:43:
02:7c:53:78:7d:07:29:51:73:54:8d:e4:f0:9e:ec:
a0:c3:ab:72:1a:d5:5b:b5:ad:2f:8f:11:3b:c0:a8:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:EC:B4:56:96:B1:A0:40:40:40:2E:FA:D7:E2:B7:12:1D:C0:B6
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:86:0b:80:0f:72:53:d6:38:d4:55:14:cc:15:44:fa:7a:
ce:b7:e3:1d:66:d8:04:dc:6d:71:f6:22:eb:c6:2a:84:f6:cb:
ab:f8:58:05:ac:7c:cc:25:a0:6e:07:74:4a:12:e5:1b:81:c8:
21:7c:e2:a1:7f:5b:29:7a:a7:56:06:96:cc:bf:59:2b:86:87:
f4:1a:d3:2e:4b:de:5d:c8:6c:56:cf:2a:3c:c8:c6:ff:6a:e5:
13:9e:70:cc:30:67:f9:d7:81:97:3b:99:c2:f1:61:c7:1f:2d:
c7:58:ce:fa:bf:78:b8:17:05:d0:e7:bf:0b:ea:17:82:b9:56:
84:ef:6a:6d:3c:fe:6b:50:fc:7d:fb:5f:e9:90:64:da:35:e6:
12:48:ea:94:e7:c8:e7:ba:4c:40:66:c6:8b:5c:e3:7a:2a:0c:
b3:6e:0c:02:a0:e7:60:00:6b:38:57:23:44:11:c2:66:b7:f8:
55:9c:04:3c:50:21:67:39:10:fc:8c:62:27:6e:d0:fd:35:4c:
cf:3f:91:9a:99:c8:30:72:37:0d:9b:89:82:f6:90:46:21:e4:
8f:4b:98:2b:cc:be:41:56:ec:29:3e:e8:b2:e7:7f:71:de:e3:
91:22:2f:60:23:bb:de:3b:5e:6c:04:9f:76:50:f8:36:13:8c:
c4:ea:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:38:46 2026 by rpki-client