Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: x5Ukdqk2qgwSxUrrm7b9E9vN3ivyjaj031zH0O9fpgw=
Subject key identifier: 53:25:91:73:AF:31:BF:26:E9:AC:42:0E:A2:EF:58:12:09:51:EC:CF
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 019D38659853C751DE077FEA426EDCB50F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 0751
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: YOZia8cwVdojG2QHQ6XQq2b9nN54vv41lTqrvFiOJM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:98:53:c7:51:de:07:7f:ea:42:6e:dc:b5:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=53259173af31bf26e9ac420ea2ef58120951eccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:45:1e:c9:1a:0f:5a:4a:50:b3:d2:70:96:
eb:b7:04:ed:38:e7:d6:d6:14:cd:f0:15:e5:59:fe:
5d:aa:36:1f:d0:02:b1:ae:06:f7:19:2f:bc:6e:01:
62:6c:12:51:6a:84:38:bf:aa:8c:1f:4d:b4:8a:45:
90:f3:b5:38:be:bd:90:60:a3:a7:e1:08:9d:8a:19:
3b:f8:5d:c5:28:fc:5f:87:e7:e3:de:8b:dc:40:7a:
94:17:9b:26:8b:cc:7d:fe:db:6b:50:6f:d6:0d:72:
75:48:48:4a:ff:6c:8d:6d:19:0a:4a:99:74:b9:e7:
d1:90:0c:46:77:96:7f:73:d2:ea:23:81:ad:40:54:
9f:22:24:28:a7:ff:3d:99:0b:fe:8f:36:a0:24:2a:
7a:ea:76:91:43:61:8b:cc:d6:bb:e4:56:22:c3:77:
47:dc:09:4d:31:94:58:07:b7:8d:41:60:1e:a5:7e:
e4:5d:38:91:da:a8:f3:65:73:8d:24:24:92:0a:10:
b9:66:d3:14:e2:eb:04:b7:91:e3:9a:e6:7e:d6:a0:
ad:1c:12:df:75:6d:a0:a4:20:eb:ce:1e:09:c6:4b:
6f:b5:b9:df:dd:6c:5f:16:69:1b:3e:0a:11:dc:21:
00:4b:5f:e6:01:ba:24:a2:4b:dc:4b:af:3c:37:f5:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:91:73:AF:31:BF:26:E9:AC:42:0E:A2:EF:58:12:09:51:EC:CF
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:81:a2:d8:7c:97:85:a9:06:5f:5e:f7:4b:f0:8d:80:1d:
08:65:96:bb:4c:bd:c9:8a:d3:41:46:34:0b:51:98:3a:ec:3f:
4c:b5:22:8f:d6:59:c7:14:e7:4b:18:5b:1f:32:ef:b7:13:26:
28:0d:70:ea:be:ee:f7:10:b3:89:aa:15:f7:9f:4e:56:da:93:
d8:49:49:0e:d3:c4:6b:95:05:93:fb:76:d3:2e:75:6a:f1:cc:
d1:6c:26:b3:d2:77:29:05:b0:70:2c:2b:b8:1e:47:01:30:3e:
88:2a:3f:64:bb:a4:6b:b7:45:0c:2a:97:e3:14:9e:b4:6e:91:
53:90:e4:50:04:fa:66:0a:49:3a:1c:a4:97:13:70:b9:71:cc:
01:5f:a9:4f:8d:04:ef:61:27:4f:e5:d0:59:47:bd:43:c3:4e:
5b:74:56:d8:d2:ae:a4:90:2a:01:d4:60:5c:eb:b2:e8:00:c3:
ae:2b:7a:25:02:dd:0c:9f:77:78:3d:d3:99:77:ab:52:81:d9:
2f:fe:3d:34:88:ce:6a:72:67:d5:91:ca:36:07:ed:de:fa:08:
e7:43:85:6b:a5:03:91:45:9f:38:66:5b:05:c9:47:e6:2c:67:
cf:52:cb:18:1b:21:ff:ab:c0:99:90:c0:86:7b:0a:84:1c:a1:
e1:36:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:03 2026 by rpki-client