Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json)
Hash identifier: jI/ualfdI2N11BkJyri6ZYaGiNP/NGUHseeAjvgqvv0=
Subject key identifier: FD:B6:7D:3E:3B:EA:C7:9A:F9:E5:A8:32:73:ED:FD:A2:6D:1D:FD:EF
Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Certificate serial: 019D258336E1D29F72ECBDE49C83E5906C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
Manifest number: 03F1
Signing time: Wed 25 Mar 2026 15:00:49 +0000
Manifest this update: Wed 25 Mar 2026 15:00:49 +0000
Manifest next update: Thu 26 Mar 2026 15:00:49 +0000
Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: vM22cALJ1c6ile+mHqWIb7qSWrfzuJ+Xj7fzZ/PunPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:36:e1:d2:9f:72:ec:bd:e4:9c:83:e5:90:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Validity
Not Before: Mar 25 15:00:49 2026 GMT
Not After : Mar 26 15:00:49 2026 GMT
Subject: CN=fdb67d3e3beac79af9e5a83273edfda26d1dfdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:35:db:62:c5:7b:8e:3a:3e:97:70:bb:91:
ba:53:6a:27:32:73:8f:2d:82:44:de:d7:f4:3a:b0:
c3:bb:a1:e4:aa:23:f1:1d:1a:94:81:9f:43:0e:d7:
63:08:9b:d0:8a:14:7c:b7:06:ce:3e:30:96:37:c8:
1a:8e:b3:c3:ae:eb:94:77:8d:11:07:c6:ce:4a:9c:
64:f9:26:aa:6b:54:0c:2c:fe:74:ee:89:48:a1:67:
c1:d2:c3:11:58:8d:dd:db:5b:4e:a3:da:44:53:52:
45:5a:f5:9d:d3:99:ee:54:0f:55:b3:1b:55:70:00:
e5:0f:b1:6b:90:3e:76:be:b8:a8:86:93:ca:81:2c:
e3:68:19:72:2c:01:d2:bd:bb:dd:ab:d9:e1:81:0e:
2b:86:3e:79:7e:9d:73:ab:17:64:78:22:88:bb:ac:
df:33:e4:93:ae:f8:74:0a:61:9c:9b:57:ae:11:2d:
78:fa:d0:a5:a7:f9:31:c6:ed:e9:fa:31:e0:3b:8d:
ed:5f:5a:59:4c:40:40:93:3b:bc:c6:11:e4:32:c1:
27:18:69:1a:c7:ee:29:23:a8:3e:c9:be:b8:a8:7f:
41:76:73:5d:68:aa:77:ca:bd:a8:d9:e5:bd:e9:cb:
79:d5:83:42:c5:0d:50:08:df:79:83:c3:16:77:39:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:7D:3E:3B:EA:C7:9A:F9:E5:A8:32:73:ED:FD:A2:6D:1D:FD:EF
X509v3 Authority Key Identifier:
keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2a:27:15:87:ea:c5:3b:4b:72:7f:ff:d8:4d:dd:3c:bc:da:
33:61:6a:12:24:b9:d5:53:88:7e:07:73:57:fd:91:8f:64:87:
07:6b:54:38:fa:0c:0e:a1:91:03:2a:b3:89:47:dc:90:c2:75:
c0:29:90:5e:de:d8:62:30:e3:b4:26:c1:f7:fc:c3:29:67:b9:
a9:17:8f:4b:94:84:c5:1b:53:2e:43:e5:95:4c:70:d7:ab:cc:
7a:e2:e5:5c:d9:e3:75:d5:d5:cb:86:2c:76:69:6a:37:2d:c1:
c9:fd:ec:de:04:6d:46:d5:35:09:f4:84:18:ff:32:97:c2:15:
06:2d:f8:5f:4f:1b:98:fd:71:41:88:7f:b9:36:f5:a6:9f:e3:
c1:d6:a5:be:22:88:97:5b:e8:20:6b:57:ba:a9:3d:ea:cc:78:
3c:6d:b6:0b:29:a9:2c:c7:0a:5f:02:db:5d:78:37:c8:ba:0e:
9a:4a:dd:d4:02:1e:da:fc:15:90:e4:9d:ea:f0:87:87:da:a5:
63:eb:b5:9c:3f:e8:71:e2:37:e1:c7:68:76:bb:7f:97:c4:84:
28:df:0b:e7:9a:e2:44:a5:86:fb:cb:44:75:9b:fe:71:02:4f:
a6:78:bd:3c:5a:09:81:07:3a:2f:1a:cb:c5:cb:a6:ee:5f:60:
bd:57:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:31 2026 by rpki-client