Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: Goj6EDDEZNY22V+24gfCFmVJJq5mOrkTLOO1om5qNUE=
Subject key identifier: B8:4E:D9:EB:8A:4E:9C:E3:52:6A:50:2C:C1:BC:B9:04:74:F6:B9:9F
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 01A0889EA144954E16555C723BC0952A2D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 1421
Signing time: Thu 10 Sep 2026 00:01:32 +0000
Manifest this update: Thu 10 Sep 2026 00:01:32 +0000
Manifest next update: Fri 11 Sep 2026 00:01:32 +0000
Files and hashes: 1: 6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa (hash: k9XIzZz2YS/IqcKj1MEO/9AD4eBMuTTQ1lkoUK4El4A=)
2: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: y7q+H0HU0N5CrNqw7tmSi/PpGixVINx+sWW6oIhjWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:a1:44:95:4e:16:55:5c:72:3b:c0:95:2a:2d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Sep 10 00:01:32 2026 GMT
Not After : Sep 11 00:01:32 2026 GMT
Subject: CN=b84ed9eb8a4e9ce3526a502cc1bcb90474f6b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:a1:69:58:c6:ee:13:e0:f6:c1:f3:3c:09:
75:01:2d:e0:7e:c7:7f:44:b5:14:68:ca:85:45:18:
62:e3:9d:fe:11:34:41:91:d5:b1:0d:ff:52:87:9f:
d9:00:ab:bf:a4:e0:e5:f9:c1:0e:b7:cc:13:5b:eb:
9a:0c:9d:91:05:52:bc:95:5b:9a:53:22:c2:a8:90:
89:55:81:95:04:13:38:98:2f:93:0b:f5:21:59:74:
15:a2:6b:90:c2:15:88:b4:ee:26:be:de:cd:b9:b9:
ad:fc:92:01:99:5e:a7:08:b3:83:45:4f:b5:33:66:
c3:09:48:d1:dc:d1:f8:54:7e:06:c8:75:3d:df:21:
20:9f:8a:8c:af:c4:82:38:00:56:7f:cf:f7:fa:01:
0e:33:91:65:ed:2d:ee:64:cd:44:31:24:39:63:4c:
3a:66:6a:63:7c:fc:9c:d5:19:2f:a6:34:49:74:41:
49:1d:f9:fe:97:0f:55:24:18:4d:75:48:3d:61:63:
ba:e0:5b:de:3c:9f:26:61:a5:73:0d:5e:be:c5:89:
9e:af:98:78:ed:f0:f8:0d:2c:0f:28:16:be:8f:65:
b1:25:09:1d:d7:b7:2f:4a:34:cd:6d:9a:63:74:a0:
fe:a2:90:c9:15:1d:4d:74:91:16:66:a9:59:ce:3a:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:D9:EB:8A:4E:9C:E3:52:6A:50:2C:C1:BC:B9:04:74:F6:B9:9F
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:79:3d:76:a4:9d:9d:db:38:d7:87:74:7f:77:66:97:19:
ec:f3:ea:a3:c8:16:b8:91:e1:70:9f:9e:98:6c:81:3e:95:e2:
c2:28:e2:ea:98:ff:b4:4f:5b:82:2e:48:fa:cf:e4:3e:61:5d:
08:b9:ff:14:68:96:2a:73:fb:55:4f:b2:78:8a:56:39:ef:f3:
d5:75:06:37:20:ef:36:2c:c8:6f:2d:df:9c:de:3c:f7:15:73:
03:06:fb:37:e5:83:9f:8a:34:bd:e6:f3:73:d7:63:cd:d4:3b:
31:02:9c:91:93:81:e2:a0:4a:1b:d0:18:6f:8e:59:a7:3c:fe:
cf:3e:89:f0:7c:6c:09:3c:5a:4f:5b:fa:3a:47:f4:c3:c4:fa:
5a:c0:2a:42:9f:b6:5e:df:52:87:b6:b6:5f:14:47:90:a8:96:
45:5d:33:25:14:39:df:5f:f3:a9:4f:ab:fc:0b:96:65:7c:93:
61:00:50:2d:72:3a:2e:ee:86:ee:e2:9f:68:c3:49:cb:5c:48:
70:10:18:ee:89:ec:8d:8c:9a:22:48:60:49:ca:ef:14:6e:03:
9f:81:58:95:30:34:6d:3f:4e:9b:f8:7d:a8:37:ed:4d:c9:d2:
c0:09:1d:2e:93:c7:62:b9:42:24:6c:fb:77:36:45:a4:23:45:
f6:c0:4f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCInqFElU4WVVxyO8CVKi1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2I1ZmUzN2Q4NTExZjY3YTYwNTMxNmViMDk1MzUzOGZj
ZmU5ZTcwHhcNMjYwOTEwMDAwMTMyWhcNMjYwOTExMDAwMTMyWjAzMTEwLwYDVQQD
EyhiODRlZDllYjhhNGU5Y2UzNTI2YTUwMmNjMWJjYjkwNDc0ZjZiOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9ahaVjG7hPg9sHzPAl1AS3gfsd/
RLUUaMqFRRhi453+ETRBkdWxDf9Sh5/ZAKu/pODl+cEOt8wTW+uaDJ2RBVK8lVua
UyLCqJCJVYGVBBM4mC+TC/UhWXQVomuQwhWItO4mvt7Nubmt/JIBmV6nCLODRU+1
M2bDCUjR3NH4VH4GyHU93yEgn4qMr8SCOABWf8/3+gEOM5Fl7S3uZM1EMSQ5Y0w6
ZmpjfPyc1RkvpjRJdEFJHfn+lw9VJBhNdUg9YWO64FvePJ8mYaVzDV6+xYmer5h4
7fD4DSwPKBa+j2WxJQkd17cvSjTNbZpjdKD+opDJFR1NdJEWZqlZzjr3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhO2euKTpzjUmpQLMG8uQR09rmfMB8GA1UdIwQY
MBaAFP7LX+N9hRH2emBTFusJU1OPz+nnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMt
YzI1NzYwNzMxN2YzLzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMtYzI1NzYwNzMxN2Yz
LzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpl5PXak
nZ3bONeHdH93ZpcZ7PPqo8gWuJHhcJ+emGyBPpXiwiji6pj/tE9bgi5I+s/kPmFd
CLn/FGiWKnP7VU+yeIpWOe/z1XUGNyDvNizIby3fnN489xVzAwb7N+WDn4o0vebz
c9djzdQ7MQKckZOB4qBKG9AYb45Zpzz+zz6J8HxsCTxaT1v6Okf0w8T6WsAqQp+2
Xt9Sh7a2XxRHkKiWRV0zJRQ531/zqU+r/AuWZXyTYQBQLXI6Lu6G7uKfaMNJy1xI
cBAY7onsjYyaIkhgScrvFG4Dn4FYlTA0bT9Om/h9qDftTcnSwAkdLpPHYrlCJGz7
dzZFpCNF9sBPAQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:07:26 2026 by rpki-client