Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.mft
File: stoXnKHJH58UR1uIzxZSvprpX6A.mft (raw, json)
Hash identifier: bhJrv13dsBnE+0+tvRV9anBYzm1cxZpeKkh6IifJis8=
Subject key identifier: 0F:D7:C1:F2:70:F3:EB:D1:2B:5E:C9:17:C7:44:EE:6B:9F:C9:94:61
Authority key identifier: B2:DA:17:9C:A1:C9:1F:9F:14:47:5B:88:CF:16:52:BE:9A:E9:5F:A0
Certificate issuer: /CN=b2da179ca1c91f9f14475b88cf1652be9ae95fa0
Certificate serial: 01A17A0369BEA21C21CE9CBEC7E9E8342EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stoXnKHJH58UR1uIzxZSvprpX6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.mft
Manifest number: 2C
Signing time: Mon 26 Oct 2026 21:00:06 +0000
Manifest this update: Mon 26 Oct 2026 21:00:06 +0000
Manifest next update: Tue 27 Oct 2026 21:00:06 +0000
Files and hashes: 1: 5kSOhfd8FT1TxwDD-dCwcrjf9MI.roa (hash: S627JewJpXGmVOz2GwVGhNJrDE6IzwJYgI60J/Gv0ZQ=)
2: stoXnKHJH58UR1uIzxZSvprpX6A.crl (hash: beGa7wk33UB/dKr71HhGastJ3zQel7wABuVsF7XG5uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/stoXnKHJH58UR1uIzxZSvprpX6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:69:be:a2:1c:21:ce:9c:be:c7:e9:e8:34:2e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2da179ca1c91f9f14475b88cf1652be9ae95fa0
Validity
Not Before: Oct 26 21:00:06 2026 GMT
Not After : Oct 27 21:00:06 2026 GMT
Subject: CN=0fd7c1f270f3ebd12b5ec917c744ee6b9fc99461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:a1:64:58:b7:b3:03:e6:bd:ae:63:f8:8c:
e3:d2:a5:24:3d:83:88:62:d1:62:fa:38:16:24:69:
9f:6c:7f:b7:60:3a:e2:56:b1:fc:da:5a:55:2a:7b:
ad:67:14:29:53:ba:63:91:d3:1f:be:2e:7d:a3:47:
cd:a7:a1:0f:fc:da:35:16:e8:cb:45:96:83:fd:53:
9c:00:b8:31:3a:93:00:d3:9b:bf:0c:4b:ee:e8:cd:
c4:f4:fa:40:99:49:d2:42:49:77:21:f9:11:af:e3:
fa:9a:e6:15:bd:00:a9:59:24:46:b8:01:f3:24:66:
36:df:2e:8e:45:ef:4e:ca:23:52:bd:54:dd:93:1b:
e8:21:e4:c1:1f:f4:11:7a:e2:85:69:be:b7:28:59:
ae:49:65:70:16:59:f9:11:13:9d:cc:2b:f4:3b:da:
d7:f4:fe:51:f5:54:83:1b:ba:5d:7e:dd:19:da:84:
ed:f1:2e:2b:1c:41:5e:03:82:3a:75:07:9c:ef:fa:
7d:61:f8:70:a7:42:d9:15:34:fa:4d:ef:f1:50:52:
17:4d:44:d7:51:7d:ca:a8:aa:c1:f0:48:23:67:e3:
0e:1a:24:5c:e5:3b:68:8e:ae:c4:b9:c1:fb:46:6e:
73:8b:bf:f2:40:a9:42:f2:39:ef:67:50:d7:01:28:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:C1:F2:70:F3:EB:D1:2B:5E:C9:17:C7:44:EE:6B:9F:C9:94:61
X509v3 Authority Key Identifier:
keyid:B2:DA:17:9C:A1:C9:1F:9F:14:47:5B:88:CF:16:52:BE:9A:E9:5F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stoXnKHJH58UR1uIzxZSvprpX6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e8:6d:7f:8f:b4:07:68:81:46:fa:3e:7b:1b:6f:51:41:fb:
2d:ee:e5:d2:5a:fd:a6:3c:fa:c7:0f:b5:58:4a:68:66:5d:dd:
1c:aa:2f:5f:52:2f:76:dc:04:6e:0d:e5:5c:23:af:77:1e:0a:
15:4e:0c:f8:38:27:ee:2d:91:a8:a0:64:ed:37:e7:73:51:44:
b1:0c:ca:db:4c:01:ba:4d:df:76:ad:b0:2c:70:f7:3e:6b:13:
53:73:85:59:0a:f2:e0:89:f3:16:0c:bb:ea:90:d9:4c:c3:f9:
c8:b2:f9:85:a3:be:56:65:ba:1b:ec:51:04:22:84:46:33:6c:
bf:58:86:4f:52:72:c0:a2:7b:b8:d6:75:f0:87:9b:2b:9a:0c:
56:f8:99:96:0b:cc:db:4e:22:38:1f:6e:d6:92:8e:42:d7:76:
f6:26:e3:27:5e:e7:b1:84:b1:c5:dd:e7:05:a9:70:f4:e4:ef:
b5:e9:3a:ec:56:cd:9f:ad:3a:27:9b:56:d4:2d:c5:90:3a:fc:
98:40:97:e6:a0:66:22:c3:5c:1b:b4:d5:19:b6:4a:ee:4a:06:
1e:7d:15:de:6e:e0:82:02:de:9f:f1:80:11:dc:2d:7b:57:6a:
d7:e0:4f:af:03:4a:a7:1f:bc:5d:5e:31:f8:3e:11:36:25:f6:
a7:05:6d:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6A2m+ohwhzpy+x+noNC7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGExNzljYTFjOTFmOWYxNDQ3NWI4OGNmMTY1MmJlOWFl
OTVmYTAwHhcNMjYxMDI2MjEwMDA2WhcNMjYxMDI3MjEwMDA2WjAzMTEwLwYDVQQD
EygwZmQ3YzFmMjcwZjNlYmQxMmI1ZWM5MTdjNzQ0ZWU2YjlmYzk5NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s6hZFi3swPmva5j+Izj0qUkPYOI
YtFi+jgWJGmfbH+3YDriVrH82lpVKnutZxQpU7pjkdMfvi59o0fNp6EP/No1FujL
RZaD/VOcALgxOpMA05u/DEvu6M3E9PpAmUnSQkl3IfkRr+P6muYVvQCpWSRGuAHz
JGY23y6ORe9OyiNSvVTdkxvoIeTBH/QReuKFab63KFmuSWVwFln5EROdzCv0O9rX
9P5R9VSDG7pdft0Z2oTt8S4rHEFeA4I6dQec7/p9Yfhwp0LZFTT6Te/xUFIXTUTX
UX3KqKrB8EgjZ+MOGiRc5Ttojq7EucH7Rm5zi7/yQKlC8jnvZ1DXASjZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/XwfJw8+vRK17JF8dE7mufyZRhMB8GA1UdIwQY
MBaAFLLaF5yhyR+fFEdbiM8WUr6a6V+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RvWG5LSEpINThVUjF1SXp4WlN2cHJwWDZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZTEyOWEtNDU5YS00ZjE3LWFkOWEt
OTQ1YzBjZDUxYWZiLzEvc3RvWG5LSEpINThVUjF1SXp4WlN2cHJwWDZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kZTEyOWEtNDU5YS00ZjE3LWFkOWEtOTQ1YzBjZDUxYWZi
LzEvc3RvWG5LSEpINThVUjF1SXp4WlN2cHJwWDZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+htf4+0
B2iBRvo+extvUUH7Le7l0lr9pjz6xw+1WEpoZl3dHKovX1IvdtwEbg3lXCOvdx4K
FU4M+Dgn7i2RqKBk7Tfnc1FEsQzK20wBuk3fdq2wLHD3PmsTU3OFWQry4InzFgy7
6pDZTMP5yLL5haO+VmW6G+xRBCKERjNsv1iGT1JywKJ7uNZ18IebK5oMVviZlgvM
204iOB9u1pKOQtd29ibjJ17nsYSxxd3nBalw9OTvtek67FbNn606J5tW1C3FkDr8
mECX5qBmIsNcG7TVGbZK7koGHn0V3m7gggLen/GAEdwte1dq1+BPrwNKpx+8XV4x
+D4RNiX2pwVtDg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:25 2026 by rpki-client