Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: RFA2vCRSXN94q7mB0LhRKql5KzoIpKdU4/Tv0HFragQ=
Subject key identifier: 01:26:4B:85:64:C9:DE:DB:F8:D1:37:D4:D7:D0:25:4C:B3:00:ED:27
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019FAAF62732204C949653C5050D8A2E259F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 036F
Signing time: Tue 28 Jul 2026 23:01:26 +0000
Manifest this update: Tue 28 Jul 2026 23:01:26 +0000
Manifest next update: Wed 29 Jul 2026 23:01:26 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: OsttgpXWuBo76wpFb4U4Gme0alI+QlLeqlXV6vs4QkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:27:32:20:4c:94:96:53:c5:05:0d:8a:2e:25:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Jul 28 23:01:26 2026 GMT
Not After : Jul 29 23:01:26 2026 GMT
Subject: CN=01264b8564c9dedbf8d137d4d7d0254cb300ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:f1:87:f3:4d:f3:c0:99:a5:59:ba:d0:91:
43:d9:ca:12:54:9f:e9:0d:06:7b:69:a6:79:6f:02:
2c:21:3d:2b:5c:09:3f:44:97:a4:42:3d:3f:94:02:
e4:6b:17:97:d1:f9:61:dd:bd:fd:4d:76:e4:4d:5f:
c7:53:dd:48:cc:7d:6b:f1:55:05:23:f3:a0:5c:b0:
1a:89:33:d6:22:77:fe:d5:22:f2:ec:34:3a:96:73:
dd:2b:38:2d:d4:ee:b2:43:8b:fb:4c:25:f0:35:76:
37:aa:b7:cf:f4:76:ed:2f:00:eb:ad:e1:07:e6:77:
2a:61:e2:77:48:10:f9:3c:ad:2c:09:40:ba:d4:04:
c1:5f:00:be:9b:d2:f3:47:6f:72:c0:2d:5d:d3:d5:
52:c2:4b:53:27:85:29:96:a5:29:da:32:43:f5:3c:
07:16:1d:65:ad:e5:c1:f2:6d:3d:d4:c0:b4:d5:2d:
a7:63:20:9a:7d:d9:cb:02:67:14:fd:68:cc:02:a4:
e3:d9:87:5c:ef:f0:ff:e8:26:85:54:c3:56:23:0f:
01:b0:7f:7a:a6:2a:4d:65:85:6f:fb:fa:03:4b:a3:
f7:05:fc:a8:6c:cd:76:a6:29:36:1c:9d:4f:27:6d:
e4:47:53:01:c7:0d:f2:d6:f0:6a:10:5a:0e:87:8b:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:26:4B:85:64:C9:DE:DB:F8:D1:37:D4:D7:D0:25:4C:B3:00:ED:27
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:4a:99:6c:2e:4f:0b:38:fa:34:b2:ae:31:af:83:b4:77:
f7:49:8c:a2:03:2c:4c:e9:dc:b0:6c:6a:85:b0:e2:8b:dd:e2:
5f:c8:d3:85:31:62:5a:4a:09:a8:9f:fb:54:8c:77:6f:6d:7b:
d5:70:88:43:94:b7:a5:fc:13:64:cd:4e:d8:19:ec:1d:36:af:
76:82:0a:37:dd:60:3e:1e:55:d5:6f:55:03:2b:5d:a3:ab:0a:
73:3d:e9:0e:f7:de:8d:fc:36:25:52:fc:91:a9:94:cb:22:56:
58:7c:3c:51:32:16:90:27:6e:95:cf:08:ee:b9:e9:22:a2:8f:
38:fe:ae:42:fe:e3:67:f7:6a:5b:2a:f2:86:36:87:42:b7:48:
4d:c4:be:99:ff:c9:86:7e:24:e0:0c:02:2c:cd:84:0c:73:da:
1d:fa:73:93:64:0b:bb:7d:c2:9c:0e:3a:33:93:d5:fc:74:6d:
ae:bb:60:a2:80:25:92:36:4b:a3:a7:af:26:b2:31:db:99:f9:
ca:41:9a:42:4e:7a:2e:9f:9f:b5:c1:70:ab:bc:7d:c4:5f:08:
f6:67:a3:69:38:6d:b5:59:7d:3a:a2:42:34:35:b3:fb:e7:1d:
56:d0:96:a7:49:99:65:a2:97:01:aa:a2:08:2c:61:82:ad:a4:
17:07:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:33 2026 by rpki-client