Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier: lb9RP1R9sgjDFthDoxtTGF+vlXONnjHxNrD420tVwA4=
Subject key identifier: 5B:9A:BE:90:75:77:ED:6B:37:C4:A6:D6:07:52:37:3A:48:8F:17:DA
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial: 01A17BF2603DC455992B1E65DBF62C53B8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number: 149F
Signing time: Tue 27 Oct 2026 06:00:44 +0000
Manifest this update: Tue 27 Oct 2026 06:00:44 +0000
Manifest next update: Wed 28 Oct 2026 06:00:44 +0000
Files and hashes: 1: 6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa (hash: k9XIzZz2YS/IqcKj1MEO/9AD4eBMuTTQ1lkoUK4El4A=)
2: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: axmE36/okv5dToKsX1++OYTvVNZdGO148YQbp2Pny40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:60:3d:c4:55:99:2b:1e:65:db:f6:2c:53:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Validity
Not Before: Oct 27 06:00:44 2026 GMT
Not After : Oct 28 06:00:44 2026 GMT
Subject: CN=5b9abe907577ed6b37c4a6d60752373a488f17da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:b4:93:91:e8:b4:c3:15:cf:d6:c2:5b:33:
36:c2:d1:96:f5:e7:1f:8b:ef:c4:a4:c1:a0:a0:bb:
79:64:b5:01:a8:d3:5f:45:02:07:ca:89:a4:88:1f:
94:82:8f:ae:d9:d1:f8:59:e4:ff:04:0c:f7:84:fe:
f9:35:f9:1f:99:af:18:3f:49:71:7a:ef:e7:4f:37:
5c:c3:16:25:4e:8d:fc:bd:ba:47:aa:bc:22:25:15:
67:54:23:41:5f:03:81:31:e1:fd:db:76:a0:9d:c5:
47:1f:f4:e9:86:21:54:9a:05:18:3c:d0:17:5a:00:
c3:bc:2c:85:a9:79:86:49:f1:fe:d7:46:59:db:a7:
07:66:13:c7:2f:d0:7d:aa:2a:12:fb:28:ca:7e:6a:
ee:90:80:81:6e:65:25:80:11:24:4c:c8:7c:c3:b4:
48:b7:43:d6:96:0d:04:bb:53:7b:e5:cc:b7:b9:62:
5a:a6:f7:e6:ec:76:8f:0f:00:87:75:e8:7b:42:b3:
80:88:d2:16:e8:11:80:29:71:c4:c5:7e:e5:ad:3a:
34:3b:15:6d:ae:ee:da:29:ac:23:4b:d3:14:d7:22:
5d:66:2a:2f:b2:48:39:58:65:e6:6b:93:92:28:f0:
84:1c:41:9a:16:fe:ac:7e:bb:9a:d8:73:09:3d:8c:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:BE:90:75:77:ED:6B:37:C4:A6:D6:07:52:37:3A:48:8F:17:DA
X509v3 Authority Key Identifier:
keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bf:a5:1e:7d:2b:90:ea:ff:08:59:e1:a4:6d:a3:7f:5a:39:
0e:28:57:08:e5:dd:06:0b:15:da:b4:80:6b:bb:c2:c0:8a:0b:
98:f6:3f:0f:36:0b:87:e1:bf:e5:ad:f4:2c:f1:80:65:81:a9:
68:55:97:94:d1:45:bc:16:53:26:96:f7:0d:bb:85:6e:7e:71:
27:50:68:50:67:69:68:17:92:33:f3:f1:66:aa:4e:b8:31:cf:
d3:49:cd:88:5c:4c:7d:4e:a7:1e:30:74:93:76:85:47:07:d9:
ad:49:89:c8:01:e4:67:d3:81:90:eb:f0:ca:fa:3f:be:40:6d:
14:cf:90:f8:b1:9e:d6:bd:5f:63:af:b4:9e:48:f0:08:22:64:
08:60:24:9c:65:ae:99:71:35:ee:f4:92:df:a9:95:9f:51:41:
6b:da:d9:59:48:e6:58:cb:ae:76:79:29:5c:b5:d1:bd:c8:dd:
95:df:7c:10:4f:1d:84:f5:33:93:ce:35:63:b1:c5:16:2d:7e:
47:ee:d4:7d:8e:4f:18:4f:21:a4:38:22:dc:2f:fe:35:b3:a7:
a3:51:d1:42:c4:a2:5d:d4:19:5b:22:4d:a2:6f:4c:c6:fe:ca:
df:8a:cb:b8:ea:00:15:7f:c3:75:3d:5c:f8:76:e9:1b:d1:cf:
b3:fa:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:51 2026 by rpki-client