Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
File: st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json)
Hash identifier: l5MwsMVE+yl/4a01RlCHEwKXa9BEeHcN8YVFOkn6BH0=
Subject key identifier: B6:7B:0F:DD:F9:F3:27:85:1A:FF:BF:53:53:46:AB:60:DF:83:B2:FC
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 019D3940AA4E072B0566C479BC8AA3713A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
Manifest number: 13F9
Signing time: Sun 29 Mar 2026 11:00:32 +0000
Manifest this update: Sun 29 Mar 2026 11:00:32 +0000
Manifest next update: Mon 30 Mar 2026 11:00:32 +0000
Files and hashes: 1: 1-9MzMIRI9EZUWy0_EdU5hjULaQY.roa (hash: 6DcD4YBSDKFcP7fuSl9OrTUJJR5lZIill0/ldDdy3gw=)
2: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: AXGLRNC0mS7gjDBPMzpmGH6Aw77SLuVIwX1/tr3qfiw=)
3: tlAQgGMhDgT__rhJHf56aqlul7E.roa (hash: BWDoEWyH3pvyZXWpW+PEd6Elxpc6FH99ZQRpTprPKtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:aa:4e:07:2b:05:66:c4:79:bc:8a:a3:71:3a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Mar 29 11:00:32 2026 GMT
Not After : Mar 30 11:00:32 2026 GMT
Subject: CN=b67b0fddf9f327851affbf535346ab60df83b2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:32:7e:07:be:e2:9c:82:15:69:1b:5b:47:bc:
3c:85:99:45:bd:83:08:c5:f5:7f:93:7c:29:f5:06:
d1:54:d5:7f:1f:4b:ab:05:b5:05:5d:ba:5c:e3:e4:
28:69:98:c9:08:d2:7e:9d:0c:55:48:d3:40:42:ea:
e3:9e:1f:04:09:6b:ba:ee:22:80:74:12:ca:6c:d8:
06:b5:52:d1:b2:9f:8f:44:45:49:96:56:ab:b1:56:
36:77:bd:b2:f3:a3:f7:80:b6:89:09:59:19:9e:e9:
bc:6f:54:e3:7f:e9:55:70:62:d2:8c:51:c6:d4:f2:
6a:99:ab:3f:50:e8:d1:3e:66:86:7e:ad:8e:80:b4:
f3:5b:46:3e:a4:6f:ad:89:ca:ea:6d:b6:9a:77:6d:
0c:bb:cf:8a:ce:5d:7b:f3:3b:73:d2:68:12:4c:81:
17:c6:61:7d:ec:f4:a5:c4:a4:83:b6:50:5b:37:e7:
b6:cf:80:a4:1b:6b:13:72:d6:49:d1:db:ac:57:16:
54:b9:14:5d:2c:59:21:fe:16:65:8f:2d:7b:25:d7:
be:f7:c8:c9:52:a6:18:b7:65:2f:03:53:81:be:4e:
f7:40:dd:f0:10:81:fc:fa:e0:86:77:8a:9b:a9:03:
24:4e:e4:90:c7:02:b2:c1:18:d2:19:d0:8e:24:a8:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:0F:DD:F9:F3:27:85:1A:FF:BF:53:53:46:AB:60:DF:83:B2:FC
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a4:ce:d8:e5:85:31:32:2e:e1:26:ae:c8:f3:cf:12:c8:70:
3d:9d:4b:c6:ad:b2:4b:b6:d8:fc:6a:2e:b7:ea:08:42:47:14:
99:20:a0:54:90:30:56:73:7c:19:da:57:19:ed:8f:b2:73:3a:
6b:86:67:70:2c:de:3a:80:2b:0f:6d:7b:c3:64:38:bf:4e:b1:
80:b6:58:fd:81:f8:74:39:e9:12:a8:58:16:49:4b:a4:19:b7:
f7:7f:49:94:a9:40:b6:ad:23:27:9c:dd:39:f6:88:0c:2d:3e:
f6:6c:cd:7f:86:b3:2e:3b:7e:b5:b2:35:37:e0:21:32:5c:f9:
4f:15:c0:13:93:c0:f4:4a:35:cf:03:bd:9a:b0:3a:40:f5:95:
b5:b3:4c:50:75:fc:53:34:7f:72:01:32:36:59:06:e9:7d:6b:
b5:e3:db:02:a2:66:92:9f:f1:b2:75:99:9a:0e:05:3c:6d:cf:
65:95:01:6e:03:0a:08:bd:8d:6c:a7:39:70:31:7f:76:b4:6a:
c6:5f:d3:2f:1e:20:02:63:2a:64:33:de:b1:65:06:6b:95:8c:
8f:df:37:39:e6:21:1c:72:8c:f6:d6:ad:44:73:13:c3:37:86:
1b:9b:9e:44:7b:25:74:71:b1:f0:96:84:83:4b:0e:35:a2:13:
c2:07:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:18 2026 by rpki-client