Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: NfSVKN/ULczSJKV7iZr41hDknFouuB600JVdvkK5gBc=
Subject key identifier: 9A:76:BA:8A:14:47:64:C6:74:46:D3:BE:6C:8B:68:BB:64:9B:EA:42
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019F91DB3BB5A613FCFB1F6835D5C60F3164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 0362
Signing time: Fri 24 Jul 2026 02:01:31 +0000
Manifest this update: Fri 24 Jul 2026 02:01:31 +0000
Manifest next update: Sat 25 Jul 2026 02:01:31 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: YfuN06j7g8BT8abXd9bYzspdTN/fu7e9xu/atau0aFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:3b:b5:a6:13:fc:fb:1f:68:35:d5:c6:0f:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Jul 24 02:01:31 2026 GMT
Not After : Jul 25 02:01:31 2026 GMT
Subject: CN=9a76ba8a144764c67446d3be6c8b68bb649bea42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:3c:d3:6e:6f:a5:f6:6b:c9:63:90:e5:65:
08:4c:3a:8a:f6:8f:92:42:82:d5:6b:26:62:f3:d3:
95:d9:ee:66:dd:db:2e:57:99:a8:23:14:d3:f6:8b:
56:24:a4:88:16:36:3e:e0:b2:9d:26:f2:a9:46:0f:
77:83:0f:49:2a:49:18:c7:6b:41:94:ea:1a:9e:c4:
5f:96:2c:d9:ac:b9:51:2f:af:4d:a1:8e:1f:b0:6d:
44:03:1c:ac:17:39:4e:56:0a:98:3e:0e:ba:f8:eb:
2a:89:b9:33:2a:9b:06:9f:33:85:ec:8d:a2:ca:c4:
73:f6:41:cf:07:cb:b6:6f:cb:aa:a2:a2:01:ab:b2:
fa:6b:47:a8:e5:d1:7c:70:07:24:34:c0:43:59:5c:
29:63:e4:1c:4e:43:2c:ed:dd:83:a2:09:7b:8c:95:
f8:ad:2e:83:d8:8c:10:a9:02:8c:8b:ab:15:40:1c:
3d:6c:f7:68:4e:b0:cc:63:15:fd:09:a1:fe:c9:76:
34:16:7a:71:93:c9:22:87:8a:83:b7:ae:c7:59:02:
6c:a8:d5:cf:43:dd:0a:bc:d2:80:33:6a:21:2d:5e:
7c:5e:2a:c4:2f:4d:84:75:b8:ec:f7:e3:dd:64:d4:
36:b9:60:84:46:ff:f8:0e:19:87:74:73:00:04:71:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:76:BA:8A:14:47:64:C6:74:46:D3:BE:6C:8B:68:BB:64:9B:EA:42
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:04:f4:55:9e:fb:76:de:5c:db:1b:21:9a:0a:8c:f4:45:55:
cd:5c:64:66:2a:91:e2:7d:59:70:e8:7c:af:0c:fd:59:2b:01:
8d:65:0d:4a:57:86:9e:a0:20:ec:c3:9b:62:89:2f:bd:e1:ed:
e5:dd:17:bf:11:7e:f5:89:b9:a6:62:fc:4f:ee:75:92:ed:d7:
ac:cd:75:30:fa:97:8a:a4:6d:26:d6:c9:f3:e8:c8:ad:5d:ce:
3d:e2:d9:e0:c8:f2:32:6e:43:c5:2a:06:28:1a:e9:5b:48:4d:
51:07:26:b2:e0:28:2c:a3:1e:30:d3:5d:26:33:46:b4:8c:a6:
3e:ea:6b:c5:66:7a:b1:8e:80:dd:99:58:fd:76:95:8b:7a:91:
40:3c:ec:ea:71:84:f0:b1:7d:af:94:39:cd:62:b1:1e:46:2b:
87:62:90:e1:67:1a:3a:18:ee:66:18:c1:30:fc:7a:1c:d7:2f:
55:d5:1a:d6:67:92:dc:7a:87:92:3d:39:f7:f7:b1:e7:85:11:
c2:97:63:ca:b8:41:4c:bc:29:5b:59:65:a8:78:55:f0:51:be:
fc:54:56:3b:af:59:f6:05:95:c4:86:ec:40:1a:6d:be:36:98:
25:45:91:43:3d:c8:ab:2d:3e:ad:21:02:2f:08:7a:78:ca:73:
7f:ff:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:49 2026 by rpki-client