Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
File: stCgxoogOf8MpRQCQRUnHIoEZgg.mft (raw, json)
Hash identifier: 0FvMQXooPV85ltlQ2TTkI1qVvQ2AcXJqa0HNbAMMxao=
Subject key identifier: F3:56:AF:AE:A6:3B:8B:4F:F2:7E:13:A8:FE:2C:87:7B:7E:09:C9:D6
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 01A0E43E3168BD9107D5AD047EDA77C8C39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
Manifest number: 1A05
Signing time: Sun 27 Sep 2026 19:01:16 +0000
Manifest this update: Sun 27 Sep 2026 19:01:16 +0000
Manifest next update: Mon 28 Sep 2026 19:01:16 +0000
Files and hashes: 1: 4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa (hash: NGm7oj0oNNHffCOXmAY3fJHH7vgq8EjhCAsgIYkz9sk=)
2: stCgxoogOf8MpRQCQRUnHIoEZgg.crl (hash: EzyzkP2w4tXt0skkthNum1qwHFb9qPEID+kGNf2Jj+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:31:68:bd:91:07:d5:ad:04:7e:da:77:c8:c3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Sep 27 19:01:16 2026 GMT
Not After : Sep 28 19:01:16 2026 GMT
Subject: CN=f356afaea63b8b4ff27e13a8fe2c877b7e09c9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:45:1a:d1:0e:37:b1:c9:04:c7:b5:9d:72:
b7:f8:ed:81:71:0d:76:16:90:c7:43:0e:85:8f:6d:
35:08:12:55:1b:5e:f6:67:8b:5c:29:06:b9:e0:ac:
4b:3d:77:41:18:e9:39:13:6f:ee:b8:eb:cd:87:0c:
34:f5:67:e3:f1:65:51:f5:34:ad:c3:a4:fa:34:3a:
2e:7a:86:f3:b7:3c:5a:6a:bc:ec:d5:29:f5:c2:7c:
51:ed:39:02:81:d0:36:cf:a4:26:81:3b:67:12:8b:
98:a2:a8:d0:5f:a1:30:43:48:71:b1:17:5f:55:5e:
a3:b6:7f:66:28:70:9d:c6:f6:60:30:35:aa:b8:3a:
ab:b7:bb:a8:4e:59:35:ec:17:33:5f:20:a9:65:dc:
b9:14:62:e7:6c:53:bd:7c:17:81:8c:64:6d:a1:70:
62:17:a5:2f:07:a6:9d:54:6f:4a:cc:2b:6d:99:59:
13:ea:fb:f7:87:c4:f9:cf:e8:92:0f:c2:e4:9b:42:
55:e6:53:e1:32:ed:3e:37:63:85:49:c9:8e:83:65:
84:b3:5f:47:b5:7e:96:f0:82:1d:9b:cd:aa:88:42:
0b:69:e9:d8:7b:fc:d2:6c:cc:aa:68:34:da:50:fe:
25:91:3d:0a:2f:90:f6:9a:f4:26:b7:39:a2:76:e4:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:56:AF:AE:A6:3B:8B:4F:F2:7E:13:A8:FE:2C:87:7B:7E:09:C9:D6
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:eb:d9:1f:29:0f:bd:24:4f:65:6d:f4:a0:f6:31:4f:a1:
e3:33:8b:ff:74:c0:ce:bf:41:2d:42:26:6d:bf:b9:33:7b:19:
f2:29:24:9e:f8:0e:58:46:44:03:45:06:fe:e3:f9:4c:24:c8:
c0:aa:91:a3:20:78:ef:21:5f:55:8d:71:ad:32:d8:50:57:a5:
85:79:12:bf:bf:4c:83:6d:86:95:b2:6e:0b:51:76:a1:fb:30:
bc:3d:f6:47:8e:d0:2c:39:e3:8c:3a:74:96:09:53:10:82:a0:
a5:a8:ed:72:4d:2b:7e:4a:52:c3:6f:38:82:54:56:95:e4:e0:
2d:51:66:ab:0c:f1:f2:24:f9:f7:46:db:d5:8c:32:70:71:13:
6f:08:b4:6b:84:15:39:75:bf:9f:e6:56:06:fc:9d:ed:60:e4:
9b:6b:1d:9a:3c:a0:5f:76:c8:0f:ac:45:d1:fb:82:30:b0:35:
3e:8c:c2:6e:08:5e:b7:a0:d8:c6:56:e8:af:c2:53:3a:98:1e:
d2:4b:87:6f:ac:b9:70:3b:ba:24:86:a0:01:c5:94:eb:19:ef:
08:c4:8e:c5:d3:d1:3d:f0:c6:dc:fd:26:d0:c3:0d:1b:40:b8:
ce:21:e8:bb:b2:91:a3:17:90:9b:5f:f2:8b:eb:19:b8:26:02:
3d:ce:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:31:58 2026 by rpki-client