Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: VLZ3QrYe4uvPRhxefkYZFZskY6v+GphizB6q8wLlbW8=
Subject key identifier: CD:27:25:9A:C8:E5:C3:43:A5:68:E6:C4:CE:C0:6F:D5:3B:3B:B6:A0
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019D3A549CF230D97963D890A0F084FB981F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0E26
Signing time: Sun 29 Mar 2026 16:01:56 +0000
Manifest this update: Sun 29 Mar 2026 16:01:56 +0000
Manifest next update: Mon 30 Mar 2026 16:01:56 +0000
Files and hashes: 1: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: N2fQHZ1sI+tJMOAk2U91nbknw8MiMx7zDypoJOue4qU=)
2: eTeZJkz6TZKR9fBABuCYkveSXH4.roa (hash: IXje/wOsdswfN7bHHCSup3yOBkGIBAgKtGMcyKtHLG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:9c:f2:30:d9:79:63:d8:90:a0:f0:84:fb:98:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Mar 29 16:01:56 2026 GMT
Not After : Mar 30 16:01:56 2026 GMT
Subject: CN=cd27259ac8e5c343a568e6c4cec06fd53b3bb6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:71:60:85:2b:4c:70:e5:a2:a0:82:e7:d7:
25:fa:b6:33:1d:8f:c1:84:3a:80:79:89:31:93:4f:
2a:18:44:cd:58:66:1d:4d:94:68:ec:cb:f2:0e:48:
6e:83:75:6e:a0:c8:30:bc:a7:eb:d7:85:2e:34:fd:
50:e9:cc:c7:7f:b1:fc:3c:6c:59:69:0b:d7:0b:9c:
b8:d0:1e:11:82:d1:e2:83:11:39:10:cd:ce:15:73:
9d:74:0e:22:ce:cd:69:7c:f4:e0:7b:31:27:4f:29:
7b:e9:62:2d:7f:95:0e:05:6f:b7:e5:7a:f1:f9:f3:
80:7e:6b:bf:bc:7a:c9:fc:d3:ad:b3:e4:c2:26:ff:
7e:94:d8:b5:45:63:6d:21:9a:49:4f:8d:65:f2:cf:
40:6b:3a:bf:00:5a:44:56:5d:b0:32:58:9f:a3:bc:
01:f7:3c:69:09:0c:f8:40:da:f3:b2:8f:47:50:1e:
58:04:33:3c:52:8e:8f:31:ee:5d:fd:5c:d1:16:32:
14:01:70:34:25:72:89:92:fd:d6:40:fa:f7:e5:cd:
4b:f1:1c:29:4e:6b:e4:e3:31:e3:b5:a8:49:f0:5c:
9e:6a:50:4c:5a:6b:5d:32:79:f3:48:a4:77:6a:69:
c1:d9:ad:5f:f7:4f:67:c2:8e:6c:05:2e:22:d5:fe:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:25:9A:C8:E5:C3:43:A5:68:E6:C4:CE:C0:6F:D5:3B:3B:B6:A0
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:27:fd:d5:59:f6:8f:2d:85:da:71:1d:69:40:9e:38:55:6e:
a3:4e:53:ce:33:13:2d:b3:88:8a:f4:5f:6c:92:91:91:e9:69:
6f:74:88:df:c2:9a:9d:d8:a1:96:57:6e:87:dc:72:74:99:fe:
17:fb:d9:f8:a1:ae:5d:c1:d3:42:d7:dc:d3:b4:f2:21:81:d4:
eb:f6:7c:5f:9c:9d:f3:ce:ce:80:a6:34:1c:1e:6a:8f:01:5c:
d0:db:8a:e5:78:97:8d:ed:c0:36:39:63:9f:02:09:43:86:5d:
32:7a:cd:cd:68:fd:42:5f:88:ce:43:65:b5:44:25:04:a4:32:
59:3d:47:85:ae:35:7d:1e:a0:9d:10:08:d5:75:1d:05:28:54:
d2:92:74:bb:f5:ee:8a:38:20:20:aa:da:b6:e3:14:01:83:45:
f7:7a:be:dc:b8:ff:e6:27:52:9c:83:0b:cb:ab:48:ff:d4:8b:
20:5a:79:21:4e:29:2e:ac:2f:f3:42:43:6b:c6:09:fd:c5:57:
dd:3e:66:70:e9:a8:eb:96:6c:9b:63:eb:a1:8c:92:eb:3f:e0:
76:be:50:ce:64:50:2d:87:fa:d6:4b:2b:7a:15:f9:95:43:a8:
41:0e:b2:44:69:ce:7f:de:16:08:e4:a5:48:32:a8:f5:94:65:
03:b0:85:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VJzyMNl5Y9iQoPCE+5gfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi
NzEwNTEwHhcNMjYwMzI5MTYwMTU2WhcNMjYwMzMwMTYwMTU2WjAzMTEwLwYDVQQD
EyhjZDI3MjU5YWM4ZTVjMzQzYTU2OGU2YzRjZWMwNmZkNTNiM2JiNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXhxYIUrTHDloqCC59cl+rYzHY/B
hDqAeYkxk08qGETNWGYdTZRo7MvyDkhug3VuoMgwvKfr14UuNP1Q6czHf7H8PGxZ
aQvXC5y40B4RgtHigxE5EM3OFXOddA4izs1pfPTgezEnTyl76WItf5UOBW+35Xrx
+fOAfmu/vHrJ/NOts+TCJv9+lNi1RWNtIZpJT41l8s9Aazq/AFpEVl2wMlifo7wB
9zxpCQz4QNrzso9HUB5YBDM8Uo6PMe5d/VzRFjIUAXA0JXKJkv3WQPr35c1L8Rwp
Tmvk4zHjtahJ8FyealBMWmtdMnnzSKR3amnB2a1f909nwo5sBS4i1f6stQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0nJZrI5cNDpWjmxM7Ab9U7O7agMB8GA1UdIwQY
MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt
NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri
LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWif91Vn2
jy2F2nEdaUCeOFVuo05TzjMTLbOIivRfbJKRkelpb3SI38Kandihllduh9xydJn+
F/vZ+KGuXcHTQtfc07TyIYHU6/Z8X5yd887OgKY0HB5qjwFc0NuK5XiXje3ANjlj
nwIJQ4ZdMnrNzWj9Ql+IzkNltUQlBKQyWT1Hha41fR6gnRAI1XUdBShU0pJ0u/Xu
ijggIKratuMUAYNF93q+3Lj/5idSnIMLy6tI/9SLIFp5IU4pLqwv80JDa8YJ/cVX
3T5mcOmo65Zsm2ProYyS6z/gdr5QzmRQLYf61ksrehX5lUOoQQ6yRGnOf94WCOSl
SDKo9ZRlA7CFzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:42 2026 by rpki-client