Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: he+9kZU/2206CbYsU9O9A4jnd+kFT+GP2QI3/tucNbE=
Subject key identifier: 40:F4:7F:38:00:A7:D4:7C:A2:DF:36:F9:44:F3:59:E8:39:9A:E2:76
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 019D389BEFDC9AA9F8DCDB7227FC87A07D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 0DB8
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: Ndo0H8OG8vRSLoifFLdL4WBmDe0.roa (hash: 5hp1DShZ+J7PJA9pLGwqVerUNVFFVAfh1QBYpOplNiw=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: 2WtFMOGvzAyrrj9c065XHHeFN4OCBlJoTA7NrfhAcUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ef:dc:9a:a9:f8:dc:db:72:27:fc:87:a0:7d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=40f47f3800a7d47ca2df36f944f359e8399ae276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:83:c5:ba:16:1f:86:e4:a3:48:ea:94:79:
7e:c6:4b:d9:0e:4d:98:86:2f:4e:02:4c:d2:35:52:
71:04:18:e7:b9:a7:51:2a:d8:a3:99:51:51:40:8f:
88:72:a1:91:28:57:2d:11:15:9f:e8:60:f2:2f:84:
7e:f8:f9:a8:de:68:60:37:11:a9:7e:95:b5:27:23:
18:f6:5a:68:0d:5a:3e:e7:88:3a:05:b7:ea:13:1f:
d6:d0:5d:5b:ea:c7:b6:8d:05:4e:d0:7c:11:5e:5f:
d3:a3:46:d3:9f:67:4c:14:4b:d1:c1:c6:60:5b:96:
6c:d2:26:5b:7c:b6:31:fb:86:4e:74:e3:58:f8:e9:
95:e1:84:5b:27:83:56:51:dc:b3:fa:05:88:53:4b:
3c:fd:eb:10:11:dc:74:d1:e1:a9:b4:71:3d:bb:f6:
50:db:b5:0a:60:3b:89:64:ea:c8:35:ce:78:d4:8f:
1a:d7:0b:13:39:27:05:7b:d5:66:b0:86:37:69:80:
1e:0d:cf:92:39:ce:52:a4:31:13:0b:38:7d:ca:2b:
38:6b:33:8c:c6:08:5c:0b:1f:56:9f:0b:7b:fc:d8:
1d:a0:76:26:1c:5e:25:f2:9c:7f:44:e4:a4:f2:a2:
29:55:32:0c:38:e8:ed:6f:33:ce:0c:3c:4c:67:1c:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:7F:38:00:A7:D4:7C:A2:DF:36:F9:44:F3:59:E8:39:9A:E2:76
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:e7:6a:a4:04:bd:c6:7a:c7:bd:c2:74:ee:12:0b:66:5a:
57:b0:bb:f0:7c:ce:c8:6f:15:0c:43:1d:9a:dd:c6:d6:af:9a:
b0:cf:27:a7:e9:c4:18:e3:4c:66:79:3a:8f:47:39:97:1e:38:
97:ad:8d:34:84:a9:1d:58:c7:28:74:6f:f4:53:6e:98:4d:36:
af:92:c2:fa:9c:fa:d5:4a:ec:9e:c8:60:12:98:fd:34:e1:d2:
1e:6d:ec:0a:ee:8f:61:48:2e:ee:87:4c:5b:df:4e:5d:1d:e9:
e5:3c:39:3c:de:4b:57:27:27:50:4a:31:25:b0:96:9d:80:fb:
fd:e6:06:39:43:23:8e:03:95:6d:7a:12:1f:9f:2e:c8:75:0e:
84:16:cb:c0:fa:80:6a:91:90:fa:25:6c:e1:ea:af:d8:e8:e6:
99:8b:3f:82:df:5d:80:0d:ec:70:6b:5b:2f:28:cc:a6:db:2e:
4f:c2:39:af:43:3b:a4:58:42:56:97:81:d3:b5:09:71:e8:ce:
de:ad:1a:d8:40:02:0b:f3:9a:11:03:2c:57:b0:c3:51:88:c2:
77:26:fc:6e:89:d3:d6:8f:ad:83:f5:3e:21:a5:7e:e6:3d:34:
5a:e1:ea:16:85:55:3d:ac:85:c0:07:1c:10:44:60:b9:95:ef:
26:fe:9a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m+/cmqn43NtyJ/yHoH2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0
ZDg0NDAwHhcNMjYwMzI5MDgwMDM2WhcNMjYwMzMwMDgwMDM2WjAzMTEwLwYDVQQD
Eyg0MGY0N2YzODAwYTdkNDdjYTJkZjM2Zjk0NGYzNTllODM5OWFlMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrODxboWH4bko0jqlHl+xkvZDk2Y
hi9OAkzSNVJxBBjnuadRKtijmVFRQI+IcqGRKFctERWf6GDyL4R++Pmo3mhgNxGp
fpW1JyMY9lpoDVo+54g6BbfqEx/W0F1b6se2jQVO0HwRXl/To0bTn2dMFEvRwcZg
W5Zs0iZbfLYx+4ZOdONY+OmV4YRbJ4NWUdyz+gWIU0s8/esQEdx00eGptHE9u/ZQ
27UKYDuJZOrINc541I8a1wsTOScFe9VmsIY3aYAeDc+SOc5SpDETCzh9yis4azOM
xghcCx9Wnwt7/NgdoHYmHF4l8px/ROSk8qIpVTIMOOjtbzPODDxMZxyvTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED0fzgAp9R8ot82+UTzWeg5muJ2MB8GA1UdIwQY
MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt
NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj
LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikDnaqQE
vcZ6x73CdO4SC2ZaV7C78HzOyG8VDEMdmt3G1q+asM8np+nEGONMZnk6j0c5lx44
l62NNISpHVjHKHRv9FNumE02r5LC+pz61UrsnshgEpj9NOHSHm3sCu6PYUgu7odM
W99OXR3p5Tw5PN5LVycnUEoxJbCWnYD7/eYGOUMjjgOVbXoSH58uyHUOhBbLwPqA
apGQ+iVs4eqv2OjmmYs/gt9dgA3scGtbLyjMptsuT8I5r0M7pFhCVpeB07UJcejO
3q0a2EACC/OaEQMsV7DDUYjCdyb8bonT1o+tg/U+IaV+5j00WuHqFoVVPayFwAcc
EERguZXvJv6aGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:20 2026 by rpki-client