Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
File: stCgxoogOf8MpRQCQRUnHIoEZgg.mft (raw, json)
Hash identifier: Tr0MFUJ8SvUXcI2q0TQpbuZYgOgzsBsmfLAzDST0NUQ=
Subject key identifier: F2:57:62:ED:A4:45:5D:9E:69:EA:A1:2D:9D:D8:BC:D3:ED:7C:63:25
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 01A108EF3E0C2DADBFF2444356A8EB49F940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
Manifest number: 1A18
Signing time: Sun 04 Oct 2026 22:00:59 +0000
Manifest this update: Sun 04 Oct 2026 22:00:59 +0000
Manifest next update: Mon 05 Oct 2026 22:00:59 +0000
Files and hashes: 1: 4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa (hash: NGm7oj0oNNHffCOXmAY3fJHH7vgq8EjhCAsgIYkz9sk=)
2: stCgxoogOf8MpRQCQRUnHIoEZgg.crl (hash: c/t9Vz/+MAXToqhip4DOYQZYzflW5brlN1mWkcW4GoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:ef:3e:0c:2d:ad:bf:f2:44:43:56:a8:eb:49:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Oct 4 22:00:59 2026 GMT
Not After : Oct 5 22:00:59 2026 GMT
Subject: CN=f25762eda4455d9e69eaa12d9dd8bcd3ed7c6325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:65:3d:af:90:fc:70:36:8a:fa:b2:4e:3e:
21:f4:a9:38:a7:a7:98:a7:1c:e6:5c:a3:7a:86:bd:
6c:c7:68:5b:64:24:12:26:a8:b6:6c:58:7f:d0:2b:
70:4f:c8:d8:33:ab:45:32:9b:ba:ca:4c:4f:aa:b1:
c5:5f:47:06:cd:a2:a5:c9:4b:47:50:12:b7:67:e1:
c6:ea:13:8f:92:6c:30:58:ac:9d:45:a3:c3:e4:6d:
37:dd:0c:8c:80:53:25:7f:e0:f2:83:8b:83:b4:88:
8c:47:0a:34:fe:71:23:33:2a:70:d4:a4:ee:92:ad:
a2:46:5b:99:b2:12:d9:79:e4:56:f9:3e:ba:3c:03:
6a:46:d1:9e:09:14:1a:2f:62:69:c2:99:84:db:13:
6a:17:91:c0:11:56:0a:5b:58:20:7a:9b:38:d9:77:
51:16:53:d3:4f:27:3d:c2:96:af:e6:05:9c:10:36:
e9:9e:ed:08:6f:28:5f:8d:ea:4f:72:02:db:ac:6a:
f3:e4:8e:26:18:54:86:8d:65:c2:a0:36:f6:67:d7:
e4:48:70:83:e4:3b:23:c3:38:bf:db:7f:f6:4f:af:
74:d6:14:6a:a1:13:4d:d8:3b:3c:96:22:80:6f:be:
8c:3d:68:6a:3b:15:07:43:43:bc:88:46:1b:1f:4b:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:62:ED:A4:45:5D:9E:69:EA:A1:2D:9D:D8:BC:D3:ED:7C:63:25
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f6:13:1a:c9:6f:93:08:d5:66:bb:47:ef:6b:61:84:8e:44:
cc:21:a0:3a:3d:b2:ce:da:a4:5c:f3:e4:fb:f8:48:95:54:f4:
56:48:a8:b9:08:25:31:bc:5c:85:25:07:3e:57:eb:2f:23:b5:
1d:75:78:70:76:eb:39:7a:8d:0a:17:7c:6d:21:76:b1:02:5e:
ea:b7:3e:79:e7:3f:92:7a:11:c0:0d:69:75:aa:07:4e:19:ae:
aa:94:72:4c:6b:61:f4:e9:eb:62:a9:cb:79:ab:83:ae:a1:ba:
37:e3:55:f2:e5:ea:de:04:0b:26:bd:c2:1e:88:44:24:bb:2e:
ce:b2:fe:d0:c1:3c:6e:0c:9c:3b:a2:71:1b:a0:2d:74:7e:0d:
ff:ef:ef:2a:65:f9:47:a8:7a:b4:7b:5a:12:7e:b8:ae:93:34:
56:22:65:c7:11:6b:9e:37:e9:df:02:91:6a:93:e3:52:04:5b:
bd:a9:50:e3:d1:2c:69:16:5c:ef:48:66:d4:fc:73:27:3c:39:
f0:cd:37:64:da:55:06:47:10:8c:27:54:91:bd:8d:72:7a:d1:
4c:52:0f:ba:98:56:fd:e8:cd:9a:4a:08:fd:cd:a7:1a:2d:e4:
58:6b:64:96:b0:75:d0:fd:94:c6:b6:15:20:d4:12:6a:21:e9:
e8:f8:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:33:48 2026 by rpki-client