Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json)
Hash identifier: VuQLuGTRv6eqnZtosiUwbyCiWKyEobgQ/n2AEz0QbbU=
Subject key identifier: 6C:43:43:50:32:60:A7:AD:BF:C2:4D:13:0A:16:7D:E2:48:8C:FD:BB
Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f
Certificate serial: 019D2704B66D914CA2BB809BBEA055559A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
Manifest number: 0748
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: wzHtcNdl5pQJseyldf18/2FuGszgH63CRL8T61r7wOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b6:6d:91:4c:a2:bb:80:9b:be:a0:55:55:9a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=6c4343503260a7adbfc24d130a167de2488cfdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:5a:ae:f7:3d:89:21:56:37:b6:f5:44:e6:
52:77:40:a4:d5:c2:c0:92:57:d3:0b:a2:f5:82:bc:
72:6c:11:8a:9f:86:cc:dc:f8:19:84:ba:d3:09:03:
45:14:f8:92:40:21:ff:ab:a4:75:49:e9:07:67:b2:
2b:60:78:c4:89:d8:e2:7e:e3:36:c0:c6:88:27:a7:
4f:06:96:b6:5a:62:67:46:c6:e4:7d:03:4f:51:0e:
a8:67:1a:ca:e6:e0:25:c1:87:e7:15:97:76:2e:14:
a0:48:b2:0e:8b:e7:4c:e8:4c:24:cb:0a:c5:2c:41:
a2:58:4b:b0:a6:a5:3d:15:91:d3:68:ad:85:2d:4c:
b4:19:76:af:a6:c7:91:e8:c5:59:26:52:fa:7b:64:
ae:bb:f0:ab:fb:a0:97:9a:e5:fd:68:7e:a3:fb:a3:
e2:3d:80:a0:c1:42:a5:7b:c4:99:0e:3c:3c:3e:d2:
8c:c6:24:da:ba:78:26:2b:4b:4c:15:fb:32:69:dd:
b0:41:d8:cc:eb:61:fd:ec:33:e6:cb:ce:df:88:0f:
09:5f:e0:9d:af:a6:dc:0d:af:e2:fa:4d:8e:eb:4f:
b4:6e:a4:f2:30:d4:df:8e:b0:1c:0c:85:42:77:44:
db:a3:92:0f:d3:b6:8d:68:7d:08:9c:81:9e:93:a0:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:43:50:32:60:A7:AD:BF:C2:4D:13:0A:16:7D:E2:48:8C:FD:BB
X509v3 Authority Key Identifier:
keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f5:0c:a6:e5:b8:09:47:c8:11:e6:dc:27:f7:d4:74:a8:66:
1c:c1:64:4d:1d:84:5e:26:6f:06:50:f2:a6:e8:03:5e:36:be:
32:7d:c7:04:28:34:5c:49:b5:57:71:ce:90:d4:26:fc:3b:41:
46:6a:ba:80:1d:cc:08:b2:64:13:83:a7:89:25:e4:78:07:92:
01:03:75:4e:40:a5:e5:6c:c6:15:70:ae:93:38:37:1a:e2:d9:
3a:b4:e8:dd:09:1f:92:d2:ca:a4:19:b3:6a:5a:ca:81:a0:97:
7e:7e:e4:0d:f8:d3:eb:89:b1:bb:58:83:71:2f:42:70:c1:7d:
a3:fd:45:4f:48:c7:8f:d7:e0:1b:bf:d9:8c:58:17:5e:15:21:
15:c7:1a:1d:88:af:35:da:66:88:d0:15:c3:65:99:81:ba:fc:
15:e9:bc:f7:91:9d:53:39:f4:bc:99:a2:80:09:4d:79:22:97:
b5:82:23:76:3e:14:c0:8d:a4:1a:a5:60:9f:d1:78:11:07:fb:
91:72:c8:f8:2a:41:98:24:69:4e:bc:7e:4f:9d:4c:e4:d1:39:
4a:c9:e0:26:3a:47:3d:0f:67:fa:f6:a1:ed:0c:65:9d:9d:a2:
5b:c1:79:a3:cc:5c:02:e0:94:f0:04:19:53:ef:bf:74:a0:01:
f6:06:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:53 2026 by rpki-client