Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File: stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier: hXXh81mKvwqh3zIU8XkQf9tGVbBCbEIXsTkmuXT08L4=
Subject key identifier: BF:2E:90:07:07:C3:CA:CF:A5:3C:16:4F:EF:8D:88:84:B3:69:46:15
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer: /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial: 01A08B9F54562E1E7BB89ED315C5E1B6F888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number: 1537
Signing time: Thu 10 Sep 2026 14:01:09 +0000
Manifest this update: Thu 10 Sep 2026 14:01:09 +0000
Manifest next update: Fri 11 Sep 2026 14:01:09 +0000
Files and hashes: 1: ODWTOuQzruA6ho_UERn0GtVqVf0.roa (hash: 0ZGtpcC1iCRZQmVMpvlkv+WlgjdEhITWUsgUWVKAkJI=)
2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: pIGS8Eq0VGKvmaI7nEHkpdyzW29HMMGb20R/4aCNXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:54:56:2e:1e:7b:b8:9e:d3:15:c5:e1:b6:f8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Validity
Not Before: Sep 10 14:01:09 2026 GMT
Not After : Sep 11 14:01:09 2026 GMT
Subject: CN=bf2e900707c3cacfa53c164fef8d8884b3694615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:9b:af:c9:04:87:26:ed:7c:15:ae:b8:52:
b5:b6:b7:24:ff:f2:88:7f:fd:89:c4:1b:1e:4a:31:
0c:fe:fe:e1:09:24:af:04:2b:33:0c:c6:ee:af:83:
ca:57:9e:53:1a:ff:33:5b:cf:de:fa:4a:79:e8:1c:
3c:c9:c3:82:48:96:bd:c9:6a:82:c1:25:80:3e:0c:
93:29:9d:3d:08:bb:81:7b:ff:d7:ef:f7:1f:56:f2:
12:c3:e6:67:9f:42:75:9f:50:08:0b:6d:01:21:16:
bf:74:bd:05:3d:8b:f6:61:fb:81:3b:b3:16:a7:b2:
66:85:6a:90:fb:38:e7:ea:db:52:fb:7f:26:c1:d1:
0a:4b:54:33:cb:d6:86:aa:41:ea:14:61:3c:be:e5:
6a:74:e1:a3:ff:dc:c1:1a:92:91:bc:71:95:d5:f0:
fb:01:c3:15:26:a8:e9:7d:e9:e7:19:a2:5a:82:18:
11:7d:5e:4b:f0:35:28:d4:75:95:52:69:66:18:7b:
cd:35:c3:11:ec:1f:3d:7f:8c:24:98:f0:22:3b:8c:
be:29:a4:48:36:06:82:27:c9:40:3e:e5:b9:a4:15:
99:b3:3a:e8:ec:f6:f0:94:63:45:81:24:97:b4:92:
25:29:86:1a:20:a5:c4:30:cc:c5:ab:23:61:4f:59:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:90:07:07:C3:CA:CF:A5:3C:16:4F:EF:8D:88:84:B3:69:46:15
X509v3 Authority Key Identifier:
keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:ed:91:43:49:d1:1d:db:1a:88:e6:d1:f8:30:05:f6:2e:
06:f7:ca:60:24:4a:15:40:3e:5f:ce:5b:3e:11:10:a3:d6:a2:
ab:86:4f:6b:07:c6:e3:74:f5:7f:8f:c6:de:0d:47:29:0c:f4:
e4:d3:f9:a1:62:f3:69:79:b9:98:34:e4:8a:aa:1a:67:a0:a8:
d3:d6:ce:f3:51:f2:26:d7:35:18:0f:92:47:e3:56:46:05:ba:
98:cf:1a:73:1a:b6:a6:49:b5:d3:f4:a1:44:e6:a6:ad:13:c7:
f4:7e:3e:d0:23:41:9e:29:31:ca:c0:48:32:60:82:62:73:8c:
cb:2f:d6:da:fa:9b:68:b1:ab:7b:31:06:22:6e:b4:74:82:76:
58:28:9f:03:5a:46:aa:92:87:0a:29:36:df:13:10:4d:f5:2f:
cb:9f:4c:a1:8e:71:6f:8b:17:11:50:98:64:43:aa:6b:e1:00:
31:2c:6a:e0:f5:73:d8:b8:74:65:78:3b:ea:d8:19:51:e2:a3:
65:37:6f:8b:62:ec:98:32:3d:34:bb:d8:28:1a:d1:eb:ee:e6:
06:3d:fd:3a:5c:9f:d9:bb:ba:10:c1:c9:b8:8a:a1:e4:81:03:
9c:4d:d9:31:a0:07:bc:41:1a:6b:f5:24:d5:97:09:cf:77:ef:
01:76:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:10 2026 by rpki-client