Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: NfMnv/VPWRlLMitdXio/GR6/XwciboFvU8zF6868jaA=
Subject key identifier: 82:AC:86:72:69:F0:FD:DF:27:EA:46:84:C4:BF:65:F8:B0:42:50:DE
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019D28F311F7B41F4BDBCE602982C5506CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0E1D
Signing time: Thu 26 Mar 2026 07:01:51 +0000
Manifest this update: Thu 26 Mar 2026 07:01:51 +0000
Manifest next update: Fri 27 Mar 2026 07:01:51 +0000
Files and hashes: 1: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: N61emE31lElXtn8vx7NhBBRgowI9cihjhLHIbXP8XnY=)
2: eTeZJkz6TZKR9fBABuCYkveSXH4.roa (hash: IXje/wOsdswfN7bHHCSup3yOBkGIBAgKtGMcyKtHLG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:11:f7:b4:1f:4b:db:ce:60:29:82:c5:50:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Mar 26 07:01:51 2026 GMT
Not After : Mar 27 07:01:51 2026 GMT
Subject: CN=82ac867269f0fddf27ea4684c4bf65f8b04250de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:1e:c6:d2:6b:d8:0b:86:ca:18:3e:49:b0:
94:fd:45:3c:fe:53:53:8d:30:d4:22:59:c3:27:69:
ef:17:15:f8:65:ff:b1:a2:ec:eb:cf:10:44:bc:18:
3e:58:d8:3b:d8:3e:5d:1f:d4:3e:55:0a:fa:b6:7d:
fb:18:6c:69:70:ee:db:8a:06:59:39:87:8f:42:be:
ed:a4:ff:78:1b:96:b6:13:f8:8c:74:6c:e9:bd:3e:
dc:b8:d6:40:9d:cf:b9:7f:d3:81:ad:27:90:85:3f:
88:80:88:e2:66:74:96:50:18:9c:03:ed:41:38:2d:
95:22:db:15:c5:5c:cd:a6:49:48:57:df:e6:60:f7:
a1:9f:60:38:d0:19:9c:cb:d9:e1:fc:99:28:8f:58:
a0:44:9e:f4:88:d3:0a:e7:f5:93:58:e7:5c:e4:2b:
a1:10:01:40:32:41:58:1b:dd:a2:c3:cf:00:c4:37:
93:1d:90:36:d9:a2:88:a5:65:0c:c5:aa:be:ee:3d:
c9:ad:1d:fd:e7:0b:e7:ce:5e:d4:fb:69:94:8c:74:
bb:b5:0e:98:3e:2f:7b:18:97:4e:04:93:01:f5:30:
45:d9:d9:a7:e1:50:6e:de:cf:8c:7a:27:60:af:dc:
72:52:0d:ac:87:b0:58:a0:fb:98:12:31:b4:ad:bf:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:86:72:69:F0:FD:DF:27:EA:46:84:C4:BF:65:F8:B0:42:50:DE
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:de:e7:ef:f2:d5:cf:f4:b5:f6:d7:b0:49:eb:8c:a7:86:
8a:9f:7c:3f:69:65:a4:20:c3:d6:98:d2:0c:1b:e1:59:08:dd:
61:0d:32:94:22:03:c1:23:d2:69:c8:ea:6a:60:70:a1:d0:b2:
83:f5:56:b4:27:06:52:36:74:e2:4c:a5:76:39:e0:e4:50:29:
49:d1:30:e4:19:36:6a:24:c9:38:9a:12:7e:71:a6:e1:af:6a:
c2:75:21:6b:57:ca:29:19:9a:b6:4c:b4:47:06:c6:15:e5:8e:
ae:ec:6d:63:88:74:d8:8c:df:0b:46:88:35:26:ff:b1:68:93:
8b:c4:49:f0:86:48:97:d8:00:76:5c:10:fa:14:87:b8:4e:aa:
c4:22:43:fc:67:f6:46:e9:c5:99:f7:e9:6f:1d:9c:7e:62:bb:
3e:be:bf:46:cc:43:da:fb:4e:73:b3:e9:97:e0:59:df:55:a9:
b2:87:dd:be:c3:8d:cd:43:e4:a7:06:a2:98:99:09:db:76:e5:
ea:61:59:6d:ae:8c:18:26:ee:56:f8:ac:5a:d9:2b:eb:de:8b:
6f:7c:33:ec:f9:c0:fe:0d:c9:e1:75:52:c9:4b:c2:c3:42:a4:
16:cc:9f:7e:62:2d:b9:d7:63:99:e6:3b:9c:ac:b7:dd:a5:be:
34:9f:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:19:22 2026 by rpki-client