Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: DHreWPp2Ga1VxqeWeYq9ThBL5yVzogQpu+jALIxuEHM=
Subject key identifier: 45:1E:DB:4C:8D:79:C3:4A:9D:EB:45:28:08:D6:59:EA:B8:0A:A6:6E
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019CAE350B744526C3778B6E924AAC82071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 01E3
Signing time: Mon 02 Mar 2026 11:00:37 +0000
Manifest this update: Mon 02 Mar 2026 11:00:37 +0000
Manifest next update: Tue 03 Mar 2026 11:00:37 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: isl/2BjqYZc48qJM56rqQwHN8o7QHWhsOv74mvcnJFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:0b:74:45:26:c3:77:8b:6e:92:4a:ac:82:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Mar 2 11:00:37 2026 GMT
Not After : Mar 3 11:00:37 2026 GMT
Subject: CN=451edb4c8d79c34a9deb452808d659eab80aa66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:6e:98:f9:4d:ca:68:c0:0b:f5:54:27:59:
ee:fe:24:93:af:93:bf:2d:94:32:c5:f7:44:1b:96:
b1:5b:83:fa:ac:04:62:09:2d:4e:28:1b:8d:a4:71:
44:04:af:a2:25:c3:8a:9a:19:27:89:42:2c:05:3c:
c1:35:43:b2:55:7b:5a:e8:0a:48:97:d2:5f:e7:be:
68:b3:99:5c:84:aa:88:28:1b:70:2b:64:c5:48:a0:
e9:89:7e:fc:fc:d5:eb:c8:f6:a5:27:dd:d1:18:94:
a1:18:cd:21:dc:b6:d2:a5:75:ee:52:4e:e9:6b:43:
81:96:a2:99:a2:6d:2a:34:0a:be:8f:9d:8d:39:bc:
e5:62:99:be:e5:bc:fe:8a:a7:93:c7:4f:99:cb:55:
33:93:e0:fb:6d:ff:78:9e:ed:06:22:66:89:15:88:
b9:a2:bb:44:ed:31:e9:82:01:11:55:93:3e:75:0c:
28:48:84:02:ce:5a:93:48:f2:56:bc:77:f7:10:16:
2c:50:4b:24:2b:e4:f4:1d:a8:8f:b1:b9:67:8e:46:
cb:16:a3:fe:15:c1:8e:b0:e4:d7:2c:7f:2a:f9:28:
cd:b8:37:2a:4b:98:be:ef:cc:11:7e:7e:3e:33:2c:
77:03:84:a8:69:93:ec:50:de:f8:fc:9b:87:b6:e0:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:DB:4C:8D:79:C3:4A:9D:EB:45:28:08:D6:59:EA:B8:0A:A6:6E
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4b:98:5f:2e:e9:a9:b9:96:10:17:ae:11:db:10:d7:f0:9b:
43:14:e0:8b:f3:f0:22:4c:ed:77:18:6e:8e:e6:16:8d:7e:84:
35:2e:bb:eb:c4:93:e9:65:1c:4c:37:05:38:0d:25:c2:f7:70:
79:39:12:d6:5c:0c:d0:6e:ef:51:db:50:74:e9:03:0e:9c:ba:
1e:22:77:c4:eb:84:be:5f:86:83:7a:e7:90:cd:c2:44:22:4e:
f6:70:c3:56:f2:48:91:f5:ee:89:06:be:ad:48:98:1d:d1:18:
20:d3:62:fa:18:58:ff:70:7c:78:cd:3a:f3:a3:34:d6:92:35:
89:4e:28:91:0f:5a:67:df:88:f2:2d:02:32:87:bb:6a:13:1d:
0a:81:90:a4:a0:6b:5a:f6:c0:f8:ec:41:ce:fa:bf:ef:5c:0e:
26:01:1c:4f:54:dd:b7:9e:3d:a6:f0:43:6b:1a:d0:cf:18:b8:
14:a3:79:d0:dd:bf:83:0b:9d:74:2e:0d:43:d9:2d:62:c4:4c:
20:09:ff:d8:c8:ca:70:22:51:7a:ae:58:7f:f6:53:f6:40:d0:
85:10:cf:ff:27:a1:eb:97:6b:35:4c:ef:9d:8c:10:91:25:59:
9b:70:ba:ef:6a:ed:56:6b:8c:d9:40:9b:d0:a3:40:c8:ab:ce:
2d:cc:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:37 2026 by rpki-client