Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
File: StzxlnKWX1GxbYevqxsUkILmw-4.mft (raw, json)
Hash identifier: 553caXkPAnImVpC/R+8Ah1Zfw/GiKQXcCxafNQYcSJo=
Subject key identifier: BC:D3:FF:2E:24:FF:FD:EE:CD:FF:9B:63:D8:02:2D:FC:E7:F2:A3:DC
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 019D28F323961F60A317C5F312FE2DC4AB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:55 +0000
Manifest this update: Thu 26 Mar 2026 07:01:55 +0000
Manifest next update: Fri 27 Mar 2026 07:01:55 +0000
Files and hashes: 1: 7W79sTA0NxFZ4zMhc8AztOa-azo.roa (hash: tcnWpiANUyetrxx26pyTnP9yDe9GvVdkOz2GPw7slj8=)
2: StzxlnKWX1GxbYevqxsUkILmw-4.crl (hash: rEQwVg0/DuAUW/jmH/yx8Xhn+5P+JqTVGgCk0JfM//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:23:96:1f:60:a3:17:c5:f3:12:fe:2d:c4:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Mar 26 07:01:55 2026 GMT
Not After : Mar 27 07:01:55 2026 GMT
Subject: CN=bcd3ff2e24fffdeecdff9b63d8022dfce7f2a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:4b:47:1d:9d:94:9e:e7:51:11:ea:42:54:
05:23:d6:f6:5f:c1:62:85:58:3d:8a:12:fe:a0:9c:
6e:d7:35:e3:07:76:12:90:75:36:42:7d:f0:30:8e:
6e:cf:e2:fb:57:53:45:64:9a:d1:65:98:af:c1:f4:
c5:0a:96:f8:19:2f:c6:b7:e8:f0:11:92:4e:1d:12:
df:0f:92:80:3c:53:72:ac:70:6c:22:0c:b3:2f:3c:
64:3c:a0:8f:f8:42:b0:bc:dd:d4:33:85:83:15:f9:
51:e2:ac:ac:73:29:77:2d:d8:dc:78:36:15:8a:61:
cb:e8:d2:06:b0:5c:60:e1:01:72:52:88:f5:be:10:
31:49:70:50:6a:a8:ab:0c:eb:e6:7d:83:f7:96:29:
84:71:4e:33:75:39:5b:3b:db:3f:04:fb:6a:b0:3c:
74:e8:86:ca:61:49:ed:81:62:cc:88:ea:48:64:c3:
4d:02:97:9c:e0:f3:2b:8d:88:71:87:fa:3a:7a:2f:
84:ce:f2:5e:37:ca:5d:fd:fc:9e:ec:9c:53:b1:43:
29:4f:9b:0b:b9:75:00:1e:6f:fa:f4:66:c4:36:cd:
28:fd:c3:66:57:69:1d:81:17:ac:bf:ba:59:20:cf:
7a:21:5d:9d:16:f2:66:fd:17:d7:5d:76:53:91:76:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:FF:2E:24:FF:FD:EE:CD:FF:9B:63:D8:02:2D:FC:E7:F2:A3:DC
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:cc:dc:82:d1:82:49:dd:15:b5:b8:19:97:f6:d8:60:1c:
78:65:4c:dd:07:07:84:df:71:94:04:68:4d:e4:3c:f9:a1:5a:
2a:b2:86:97:c2:3c:2d:83:ba:85:95:1c:31:19:ee:08:5c:de:
d3:26:f8:ce:5d:f3:2e:1c:6b:10:5d:36:01:cb:f9:1c:56:72:
74:9c:eb:a1:47:97:99:87:ea:05:78:94:d8:8f:4f:3a:1c:09:
b8:87:a4:f6:7a:c5:8e:cc:3f:43:c1:62:44:d0:27:bc:9b:ec:
e2:5f:3f:e0:e0:ea:f4:84:a2:39:6a:f4:df:84:a6:7b:01:1b:
d3:1b:d3:b5:f2:b7:7e:fa:f5:2e:07:aa:09:65:6a:61:ba:22:
b1:af:f4:4e:53:59:33:f0:ff:43:fe:3f:01:5c:9b:31:c4:c4:
2e:8d:22:a7:47:f9:ab:b1:d7:63:51:54:6d:65:44:ca:34:08:
c6:bb:47:93:6c:c2:fb:26:15:51:f6:a3:d5:3a:0a:74:f1:db:
92:44:b0:3c:1f:92:3a:da:29:51:32:56:43:e8:3a:f5:00:b2:
7d:c8:aa:b0:0f:d8:1c:fd:9c:fb:ad:44:03:ef:ca:de:e0:14:
8b:71:56:2a:a8:71:63:1c:62:ed:1a:f2:46:36:04:d6:4c:bf:
91:c8:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:07 2026 by rpki-client