Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: zsGJUm0wmHLTZGLu9LrdYVVmeohNg4Rq+QTT91Brt+A=
Subject key identifier: FE:BC:28:72:F9:F6:FE:B9:0A:50:BD:A4:DB:F7:08:FD:40:68:0B:E3
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019CDB0E32CA06EA32B0B141CB612E898B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 07C6
Signing time: Wed 11 Mar 2026 04:01:06 +0000
Manifest this update: Wed 11 Mar 2026 04:01:06 +0000
Manifest next update: Thu 12 Mar 2026 04:01:06 +0000
Files and hashes: 1: 4LvgqQnRm-5wgkIxb2YREs-b2RY.roa (hash: OXbW7JLQRI/gw7tyjauy/Oxf9k522sPNsWVSUNOr3ok=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: c7H3osn+YXJlAxdtNo4pOBvHrZqgKWgIwpIkcNez7Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:0e:32:ca:06:ea:32:b0:b1:41:cb:61:2e:89:8b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Mar 11 04:01:06 2026 GMT
Not After : Mar 12 04:01:06 2026 GMT
Subject: CN=febc2872f9f6feb90a50bda4dbf708fd40680be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:14:53:18:ce:c2:da:99:de:8e:1d:ad:2b:
d5:3f:77:88:73:b4:06:0d:2c:7a:a1:3b:aa:44:8a:
3b:e8:47:c5:bf:dc:7c:b4:4e:56:be:d1:dc:8e:5b:
30:1b:56:90:a9:0d:96:11:19:c4:11:7e:1a:70:92:
c0:e5:58:43:1b:c2:62:e8:26:85:df:02:90:fe:fe:
e4:a7:b0:46:31:de:81:0f:f1:29:a5:73:cc:29:99:
99:ba:4b:14:25:8a:c7:6f:fc:c0:43:20:be:80:b0:
35:c0:ac:6c:80:e0:c1:b4:1a:d0:8d:55:25:2f:5b:
97:ab:04:05:0e:fb:3b:9f:49:cb:90:60:2b:58:ff:
48:4d:42:4a:38:ed:ca:e9:4c:55:4d:ff:da:ff:d8:
e3:43:d7:ff:c1:62:92:e2:2a:a9:39:c0:95:de:cf:
ac:99:c5:f5:06:b5:73:0e:2a:c7:eb:18:d8:24:84:
71:5c:21:95:7c:91:65:63:43:f1:33:81:14:5f:42:
ed:e8:7d:1b:a8:1d:b8:0f:48:c4:55:d9:10:11:b0:
95:72:28:be:bc:98:cf:d6:80:5b:c6:c0:55:c8:d2:
f3:43:76:b5:35:65:83:f4:71:5d:dc:33:18:a4:4b:
98:b2:9d:fc:41:db:1e:6d:db:00:2e:b5:e1:47:56:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:28:72:F9:F6:FE:B9:0A:50:BD:A4:DB:F7:08:FD:40:68:0B:E3
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7a:01:22:0f:c8:31:e9:20:97:80:e6:22:eb:f4:37:cb:e0:
4a:62:c0:0e:c6:11:18:79:e1:e8:10:38:d1:cf:32:ef:20:ed:
bd:df:0e:31:96:da:ce:6d:b3:df:f6:c7:c3:ad:c8:6d:a0:0c:
8f:85:1c:1f:b7:87:ba:cd:34:69:b5:f4:cd:95:71:b0:a3:9d:
56:18:39:ad:c2:72:73:9f:ba:a5:b7:96:dc:a1:ac:b6:2e:0f:
e5:60:6c:51:b4:d5:c0:31:24:fa:61:61:c0:06:bf:15:a8:57:
88:c6:3c:5f:f1:d4:fa:5f:74:86:f0:e5:0b:d4:9d:13:ca:e5:
bd:54:50:9e:f4:03:8f:cd:37:2d:24:7b:44:db:d2:da:17:25:
3f:8e:3d:b9:17:98:71:45:95:56:72:a6:26:8b:6b:fa:90:21:
8f:d3:ae:d0:7b:4d:dd:7e:2c:2b:87:da:bf:45:a3:00:8d:61:
a7:e9:05:61:12:84:f4:9a:b1:89:49:49:37:c1:62:60:a7:1a:
45:5f:3a:c5:8e:83:42:f7:9a:c5:4e:6e:57:54:c3:1c:2c:f1:
7b:b6:e5:c9:f5:db:7e:7e:9d:d9:60:aa:6c:04:f3:98:54:86:
71:b0:f4:60:7d:b5:59:0a:23:b3:9e:e4:59:23:30:74:eb:ae:
c1:02:3f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 10:56:31 2026 by rpki-client