Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: Tr0IG1HxZ7TX6BuCelBodib6XExam3TajTzQaj6KmT4=
Subject key identifier: A6:65:30:D6:0A:08:06:66:86:88:55:85:34:FE:2B:0D:8B:6B:8A:D5
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019DA566DAF9694A91D369816DBC68815EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 0263
Signing time: Sun 19 Apr 2026 11:01:14 +0000
Manifest this update: Sun 19 Apr 2026 11:01:14 +0000
Manifest next update: Mon 20 Apr 2026 11:01:14 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: hiHahdc+2j6GVnyfjQ9NCfJYS/sBVWLeBubJ2VlBCaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:da:f9:69:4a:91:d3:69:81:6d:bc:68:81:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Apr 19 11:01:14 2026 GMT
Not After : Apr 20 11:01:14 2026 GMT
Subject: CN=a66530d60a0806668688558534fe2b0d8b6b8ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6b:70:75:59:c4:b5:69:02:f2:e3:d7:7d:56:
44:01:9e:2b:21:55:7b:46:73:2f:69:11:12:9a:a8:
19:91:c6:70:70:48:81:39:f4:2d:a4:27:60:2c:24:
5e:f0:ab:e4:99:22:0e:56:49:57:06:70:33:50:f6:
99:c2:0e:bb:d9:08:db:f9:e0:07:e7:38:29:1c:7c:
b2:d8:df:ad:68:f9:55:4b:85:87:d9:d5:b9:4e:c4:
27:3c:46:8f:85:70:75:a6:a0:9e:95:63:bb:d3:51:
f0:28:88:07:af:16:a6:d2:2a:70:e0:ab:60:c3:a0:
9a:52:5c:c8:13:35:61:d8:9f:19:4e:0c:b1:77:dc:
c7:ed:29:dd:fc:9c:73:14:e9:0e:45:a6:13:1d:2a:
b0:32:ad:4a:b9:7a:8b:99:4c:b3:37:cf:e4:1a:d3:
cd:7d:37:a7:b6:55:be:98:c4:7f:1c:2f:09:48:57:
47:af:b0:d9:a4:3a:12:43:4d:1b:3b:c3:34:b7:60:
60:62:23:4d:48:d9:00:26:4e:62:d8:e1:74:de:ce:
99:be:f3:90:bb:69:d2:86:0f:7b:b1:af:25:48:75:
89:10:09:28:7a:14:b1:c4:59:14:bc:9f:a6:70:3a:
bf:4a:ed:7e:27:8c:22:65:d5:52:66:fb:a0:db:21:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:65:30:D6:0A:08:06:66:86:88:55:85:34:FE:2B:0D:8B:6B:8A:D5
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:07:ad:4f:3a:eb:38:d1:70:f9:c8:db:2d:41:64:b1:52:5d:
cb:27:32:2f:5c:3c:f7:bf:80:ca:be:38:06:1c:20:4f:c3:9d:
02:19:08:7e:9b:a4:7a:08:a3:95:a6:4b:89:58:eb:63:0b:b7:
f7:6f:bf:8f:82:7f:55:2b:5d:97:f5:55:25:c4:f8:ac:aa:fe:
74:8b:1d:09:13:68:ea:47:f3:f2:c8:d2:77:44:9f:6c:26:dd:
35:2e:14:63:21:1a:8f:f4:6d:ee:35:88:6d:35:2b:66:9a:d7:
e8:c5:e4:8a:6b:c6:1b:af:ad:43:f2:37:67:2f:aa:b1:b5:93:
fd:70:e8:5d:50:d9:cf:93:cb:60:15:3b:48:ca:87:0c:bf:0f:
04:78:44:31:15:7a:57:7b:e4:08:13:3c:d9:b0:79:0a:5d:c4:
b2:b0:a2:4d:49:8f:24:0e:4b:ea:76:fd:a7:87:ba:f6:ad:74:
8b:03:38:5e:30:a4:f3:40:b2:ad:a3:2c:53:ce:f1:aa:af:c8:
2a:c5:93:59:32:b0:4e:1e:a5:5b:6c:35:b3:a9:5b:22:f2:27:
e2:8d:11:68:99:37:12:6e:1f:a6:a9:e3:a6:21:ba:82:3b:2c:
25:90:dc:aa:06:78:d0:4e:10:08:bc:ba:16:49:89:bf:5d:a6:
06:83:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:42:42 2026 by rpki-client