Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: E+WSrVqCVb03m/RSFwvRK0anU7zxalazQRIHUJbc/4I=
Subject key identifier: 13:6D:A6:4A:77:FE:0C:0A:49:2C:4C:9F:0F:84:AB:C8:BF:BD:DC:A7
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 01A0DA28A7B42458E3EBBA0DEFE3E5511A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 040C
Signing time: Fri 25 Sep 2026 20:01:32 +0000
Manifest this update: Fri 25 Sep 2026 20:01:32 +0000
Manifest next update: Sat 26 Sep 2026 20:01:32 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: Uj9a5sYbz155HKq7+k1z5bQUkUinwQ1Bq09h2QtCJdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:a7:b4:24:58:e3:eb:ba:0d:ef:e3:e5:51:1a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Sep 25 20:01:32 2026 GMT
Not After : Sep 26 20:01:32 2026 GMT
Subject: CN=136da64a77fe0c0a492c4c9f0f84abc8bfbddca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:ac:72:7b:a1:dc:3f:a4:18:df:0e:d9:ad:
d8:77:6c:2d:8d:fe:ef:83:4c:83:73:d0:03:a1:ec:
5a:6b:2f:58:14:5a:b6:5a:40:a5:26:8e:64:a9:19:
b7:dd:4e:7f:bb:c1:08:aa:0b:26:11:29:d5:c7:dd:
8d:d0:bd:27:92:6c:df:b3:ff:0e:60:b9:99:eb:9f:
52:26:42:cc:f0:38:6f:e8:16:09:1d:e2:9f:a2:62:
07:5d:ed:ae:7d:34:e4:b8:73:9e:29:34:08:b0:20:
38:8e:4e:f7:a9:85:fb:59:f2:98:85:9b:ff:9c:25:
d3:42:0f:28:8d:76:67:82:7d:f6:d2:bd:72:66:d7:
3f:84:8a:f6:c7:d7:81:82:c5:15:c8:cb:a8:83:3c:
42:38:e7:07:17:87:19:fe:98:a1:c5:91:b4:a6:58:
32:b2:e5:01:56:32:c1:d3:57:d9:7e:79:a0:70:96:
b5:6a:f5:b9:26:f3:6e:2a:40:27:c8:a9:c2:6c:4a:
e4:d2:25:16:09:c7:0c:37:81:50:79:9c:94:b0:fa:
8e:0c:d2:af:96:ae:30:bb:cb:91:a7:a5:52:5f:dc:
b3:6b:a7:57:28:ed:aa:7c:3a:42:10:8a:b9:45:66:
ce:f3:dc:15:88:d5:bb:4c:2c:dc:5f:55:c8:94:35:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:A6:4A:77:FE:0C:0A:49:2C:4C:9F:0F:84:AB:C8:BF:BD:DC:A7
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:00:12:50:33:7b:90:ef:7c:97:da:f1:61:65:b1:80:c6:
17:69:31:1b:ec:36:93:19:30:30:45:96:24:5c:4e:fd:79:01:
a7:c3:a1:77:ac:42:3d:79:8b:1d:94:09:4d:c8:30:b8:a9:1b:
5a:07:96:0f:27:e6:9d:95:16:89:7e:c4:16:bb:1c:b2:9f:7e:
61:a3:be:c5:f0:d5:cd:7e:07:de:85:19:d2:94:cb:25:2c:e6:
d3:c4:04:5f:9b:25:c3:32:4e:a1:31:e1:c9:37:49:e1:58:20:
54:11:30:fb:98:62:ba:98:fb:6c:4a:3d:2d:76:a6:b0:1b:be:
13:8f:25:7a:c2:63:2c:43:d3:8a:0f:6a:0d:f2:8f:81:b3:6f:
42:b7:a8:57:e7:2d:89:e8:73:11:b3:7b:ef:0a:61:cc:ca:74:
36:54:6d:39:1b:42:66:ee:6b:6e:e1:7c:0a:b3:ea:a6:3d:65:
59:6d:ad:6b:6b:7d:05:21:2d:7d:9b:91:3f:2a:e3:2c:04:fb:
4f:89:f1:6a:64:ca:66:82:e8:97:9a:cb:e0:16:28:94:da:ab:
02:b9:71:f6:0c:bb:b5:b3:fa:49:3f:a7:4d:db:92:f9:75:e6:
61:6d:d1:ce:3d:23:5b:12:65:f4:58:cd:54:c3:7a:16:83:a4:
05:07:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:53 2026 by rpki-client