Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: xwgPzvD3ZRZ0HybbDS7qB6LsB/IEGUYEs9mkAYV/FxE=
Subject key identifier: 30:5F:4F:1D:71:8B:43:37:C4:2C:78:35:6F:12:52:EB:0A:22:78:39
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 019D37F79736E1249696D3D3BBD099EAA158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: LyH072gfUMGAgt_4wmd5jVPgEkk.roa (hash: hULmRNFiKgC2IUf4UTD/aN/EAbJh9VEEauv42jZuyn0=)
2: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: xxGRXiCKPO4WS26rjxnnCk5i0g19g6BkhEnL9NP8ZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:97:36:e1:24:96:96:d3:d3:bb:d0:99:ea:a1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=305f4f1d718b4337c42c78356f1252eb0a227839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:c9:2c:4e:94:bd:30:72:3f:da:b3:9e:36:
af:f7:01:02:63:27:d5:ec:a0:fc:a3:71:2a:ad:4b:
c9:fb:78:69:c0:48:7f:72:96:84:cf:40:db:37:3c:
aa:d2:9a:fd:1d:cf:bb:43:ba:c3:b9:78:a9:d3:2e:
f6:a6:32:b5:0d:e7:4f:24:da:cf:b9:92:26:1a:eb:
78:07:90:08:2c:99:35:88:53:42:09:80:b3:1c:ca:
95:03:05:ed:9b:50:88:a6:ad:c0:52:7a:d4:ae:f9:
4d:61:a4:83:50:e3:99:f4:ba:fe:6a:d7:8c:73:db:
ce:54:fe:69:e3:7a:e1:a7:05:7e:29:88:f7:7a:57:
cc:f9:4c:79:8f:99:6a:92:54:b4:99:5c:d5:3b:c7:
1b:01:21:48:c9:49:e0:e0:48:48:da:09:02:88:8e:
54:78:35:e0:16:c1:c6:31:74:1b:62:90:73:bc:bd:
9c:0f:89:f6:e7:8b:5b:c0:d9:9e:50:5b:0b:bc:8c:
85:ec:ff:34:96:cb:ec:2a:8c:df:28:2e:48:aa:8c:
cb:a0:e6:de:d3:30:f9:85:3a:69:71:ea:f9:db:66:
1a:cf:6b:0e:8b:00:65:65:23:57:33:03:07:a0:75:
45:50:ae:3a:a7:19:c3:1e:41:08:ec:28:a8:51:1f:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:4F:1D:71:8B:43:37:C4:2C:78:35:6F:12:52:EB:0A:22:78:39
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:ed:78:71:ac:d9:97:a6:1a:a2:63:51:a5:a6:c4:88:4d:
f3:09:a5:40:9a:ea:86:34:d4:bb:72:98:e8:83:c8:88:06:c3:
f1:51:bc:b3:6a:bc:d6:d6:c7:67:b4:6a:4e:71:d9:d0:44:4d:
01:68:c8:7d:96:f3:c4:62:ce:c3:96:1b:78:21:77:b2:0a:c4:
a5:4d:e0:d5:32:5a:8f:fb:5e:99:b6:86:36:7d:1b:3f:df:5e:
1a:a7:7f:b4:31:e5:93:29:93:78:c9:c8:5f:0e:21:07:39:6d:
8b:62:39:be:6d:7f:c9:55:1a:15:18:8e:e2:e8:96:50:51:ce:
8b:65:81:7d:5f:f7:0e:91:fe:ef:4f:b4:fd:0c:80:f7:f0:64:
5f:66:4c:19:0b:af:ec:d5:67:3c:68:6c:31:a0:20:95:36:84:
35:ba:30:d8:f9:35:95:95:c9:b1:a0:7b:bc:47:4e:b7:6d:a1:
3e:fb:4d:2b:45:d0:23:df:1f:7e:55:8d:af:a4:50:55:4a:cf:
7b:c9:16:41:de:51:b1:92:4b:cd:c4:f3:5b:ce:1c:0c:80:4a:
75:16:f3:7a:da:8a:19:49:98:a2:16:21:db:ac:e7:b0:e6:94:
9f:e4:9d:e4:0d:c7:f2:f8:18:5d:d5:40:23:5d:1b:00:bd:8d:
aa:eb:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:35 2026 by rpki-client