Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: YlibN9voxUhtYbKI01AqrXEvN/bodk59iWWbYz8nCww=
Subject key identifier: C8:E0:8D:1C:E2:E0:AD:DC:83:15:1B:A4:28:E0:A5:82:C6:03:CA:93
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 019D288474D70887AB2673CBFB883A387DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: LyH072gfUMGAgt_4wmd5jVPgEkk.roa (hash: hULmRNFiKgC2IUf4UTD/aN/EAbJh9VEEauv42jZuyn0=)
2: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: tgGQZu3VM9G3zvmW0zH0BKxmfpTMxxXHlBMJQQsHXBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:74:d7:08:87:ab:26:73:cb:fb:88:3a:38:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=c8e08d1ce2e0addc83151ba428e0a582c603ca93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:63:a3:86:1a:0e:bc:1a:23:4f:37:71:53:
0d:0c:c1:6a:f1:02:7a:e8:84:d9:02:c1:ca:e9:46:
9e:1e:fb:60:96:18:c6:9a:5c:3e:be:67:b3:78:11:
6b:a9:87:e0:89:ff:0d:61:07:15:91:f5:dc:40:f8:
fe:85:5f:35:eb:db:aa:54:f4:b0:be:39:4f:bf:d5:
ef:0d:47:eb:56:92:b1:1a:49:8f:69:52:27:8f:3a:
bd:4f:d2:81:ca:52:5d:76:39:0c:31:7b:45:90:aa:
24:72:40:82:7f:b2:1c:91:d4:06:e8:a0:65:b5:57:
7c:fb:ec:6e:4a:3c:fc:68:88:ec:f0:75:0f:a1:bc:
80:bc:43:f3:45:1a:8e:3c:a4:c2:67:68:ba:bd:7c:
ed:4a:01:c8:3d:69:f8:fe:17:99:81:91:56:1c:23:
88:00:de:d2:75:d3:78:b7:8d:ac:83:1c:8f:cf:d4:
a5:16:81:6f:6b:ac:33:07:ba:30:87:d5:46:32:3d:
d8:24:2d:55:17:5e:ac:fd:35:ca:c1:55:e3:b1:64:
31:b3:a9:ce:78:d2:7e:65:58:2c:33:74:c4:6b:53:
ec:69:97:ec:71:31:29:95:54:7f:2a:5b:2e:77:79:
dc:77:81:01:0d:aa:b5:46:ff:87:85:6e:87:bb:73:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E0:8D:1C:E2:E0:AD:DC:83:15:1B:A4:28:E0:A5:82:C6:03:CA:93
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c5:82:c9:c4:8f:57:24:b0:75:09:a6:68:78:50:a3:c8:c8:
03:9c:14:50:f7:85:8f:93:e5:ad:d8:57:8e:0d:00:1f:72:ea:
6b:f5:32:23:1c:97:7d:82:35:77:01:68:0f:df:7b:3b:ac:b8:
3e:d1:5c:77:4b:da:95:cb:3e:d7:45:fc:61:78:09:91:0d:d7:
2b:a2:18:b1:bb:6c:d3:be:d1:e9:47:e2:c5:c3:b5:3c:21:4f:
12:e4:69:23:ac:80:a3:ff:9f:ce:54:3b:5d:f4:1c:ae:62:1d:
ed:45:6f:19:b6:0f:ec:2b:d7:a6:be:ff:3e:63:c4:bd:20:4a:
4c:fc:1b:dc:11:3b:09:7b:b2:4a:fc:fe:c1:36:42:6d:b6:59:
5d:9c:2e:d6:5c:b0:34:8e:cd:5d:4e:42:5f:9f:be:ac:ea:31:
ae:e5:42:46:e9:da:85:d1:81:b8:c6:ee:7e:53:2e:35:fb:ee:
e4:e7:03:d1:fb:67:5f:10:81:0b:0d:dd:06:18:7e:2f:50:e3:
97:a6:4b:95:ef:6e:93:39:cf:e2:4c:46:d3:ad:66:55:cd:e5:
be:99:2f:f8:ca:de:3a:83:1f:39:9a:c6:ae:dc:ad:52:80:8f:
6d:3a:39:52:bc:61:fc:27:f9:19:5b:ad:a4:57:e8:18:a3:f3:
1e:a4:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:01 2026 by rpki-client