Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.mft (raw, json)
Hash identifier: 4c8cCRwQtdUS22JBsvqAFzzxPaycTstY7e7m7/bFROM=
Subject key identifier: 6D:F0:77:BA:92:3E:54:41:CE:E4:4E:39:6D:38:99:18:5C:63:A7:2F
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019EC1492A338D989089FE59E0622B8446B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
Manifest number: 02F6
Signing time: Sat 13 Jun 2026 14:00:58 +0000
Manifest this update: Sat 13 Jun 2026 14:00:58 +0000
Manifest next update: Sun 14 Jun 2026 14:00:58 +0000
Files and hashes: 1: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (hash: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=)
2: stLBGv8HK-w3pYJiEU4cBr7bSUI.crl (hash: Tl6xpPb0XIADq5t9mRLs6Fyh9Gs+Fsri8DtTgGClrpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:2a:33:8d:98:90:89:fe:59:e0:62:2b:84:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Jun 13 14:00:58 2026 GMT
Not After : Jun 14 14:00:58 2026 GMT
Subject: CN=6df077ba923e5441cee44e396d3899185c63a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:9c:b1:ca:a1:0e:71:bb:e1:46:aa:65:dd:
8d:f3:5b:e4:b7:cf:1f:48:a2:e2:07:29:9e:fc:87:
65:f6:2b:b3:a1:39:44:23:96:c3:d4:5f:ac:4b:09:
50:d1:4a:b1:2a:63:be:93:a7:86:5c:f9:fc:1f:d0:
0c:ef:91:06:3f:22:ec:20:c8:70:86:d1:e4:72:11:
01:b9:9d:cf:35:05:8d:1a:ff:44:05:f5:15:fe:0f:
40:66:a2:aa:1a:31:98:8a:ac:9e:34:6b:cd:d2:3f:
76:9f:41:d2:3b:0b:db:cd:0a:13:74:68:6b:d2:7d:
c8:ea:9b:2e:e8:1f:ea:39:40:81:7a:fb:f8:5d:39:
53:e4:ff:b6:05:2e:bd:6a:76:7b:1e:e5:f4:03:4e:
1a:ad:bd:f1:d9:74:84:16:66:21:c4:cf:5f:bc:68:
65:bf:32:93:22:20:27:3c:49:66:ef:8e:29:f4:12:
b3:3a:91:7c:6b:d1:fc:15:ea:32:4a:c2:be:6c:fc:
15:c2:41:8c:b8:bd:02:7f:3d:b5:0c:c6:b4:cc:53:
8b:4e:d2:97:df:7b:24:9c:7b:15:e6:a8:64:3d:2b:
bd:37:ed:0a:20:54:02:d3:3d:d9:36:3c:57:87:f1:
99:35:63:1e:9f:47:cd:85:ac:d6:0e:52:56:10:a5:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F0:77:BA:92:3E:54:41:CE:E4:4E:39:6D:38:99:18:5C:63:A7:2F
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:17:7e:64:ff:2d:c1:38:33:2e:70:8c:3b:fd:5d:3b:dc:
6d:bb:40:c7:72:2c:58:7f:c6:d7:49:10:43:1c:a9:96:ba:f3:
fe:d0:42:f2:d0:3a:7f:d0:55:be:b1:32:b0:b9:21:e6:f1:cf:
88:d3:43:17:cc:93:fb:c3:f8:ea:c4:5c:51:c4:81:e4:70:b9:
bd:fc:b2:46:ab:ac:96:e7:07:0a:07:0e:f8:9c:ed:b8:5c:df:
bf:43:3c:f4:99:82:2d:0f:f7:e9:79:7a:69:5f:ef:93:31:36:
e2:02:16:d0:63:a6:3d:a1:e7:60:4c:50:a2:41:5b:3c:65:4e:
da:ee:13:30:76:c7:c2:a5:aa:9f:fe:2a:c7:d3:38:6e:ea:1b:
8f:50:2c:01:56:d7:53:f9:c0:26:71:d8:95:90:ff:0d:0f:e8:
8f:42:95:4b:a7:1e:61:e2:17:4d:12:0a:b0:50:5d:f7:49:ee:
14:7f:71:c3:5b:66:8f:4c:39:4f:25:a9:fc:27:f9:78:8b:18:
55:a9:46:39:0a:91:4b:4c:54:10:a2:37:97:85:80:25:8f:ff:
be:14:93:93:17:60:a7:63:07:ca:84:4c:6c:cc:a2:82:8b:e8:
31:00:78:85:d6:ca:6c:68:47:04:d6:95:b0:19:43:04:01:e4:
fb:8e:43:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSSozjZiQif5Z4GIrhEazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDJjMTFhZmYwNzJiZWMzN2E1ODI2MjExNGUxYzA2YmVk
YjQ5NDIwHhcNMjYwNjEzMTQwMDU4WhcNMjYwNjE0MTQwMDU4WjAzMTEwLwYDVQQD
Eyg2ZGYwNzdiYTkyM2U1NDQxY2VlNDRlMzk2ZDM4OTkxODVjNjNhNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LacscqhDnG74UaqZd2N81vkt88f
SKLiByme/Idl9iuzoTlEI5bD1F+sSwlQ0UqxKmO+k6eGXPn8H9AM75EGPyLsIMhw
htHkchEBuZ3PNQWNGv9EBfUV/g9AZqKqGjGYiqyeNGvN0j92n0HSOwvbzQoTdGhr
0n3I6psu6B/qOUCBevv4XTlT5P+2BS69anZ7HuX0A04arb3x2XSEFmYhxM9fvGhl
vzKTIiAnPElm744p9BKzOpF8a9H8FeoySsK+bPwVwkGMuL0Cfz21DMa0zFOLTtKX
33sknHsV5qhkPSu9N+0KIFQC0z3ZNjxXh/GZNWMen0fNhazWDlJWEKX4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3wd7qSPlRBzuROOW04mRhcY6cvMB8GA1UdIwQY
MBaAFLLSwRr/ByvsN6WCYhFOHAa+20lCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yODNkMzItMzgwYS00ZTZlLWE5NTct
YzViYWVhM2YxNzI5LzEvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yODNkMzItMzgwYS00ZTZlLWE5NTctYzViYWVhM2YxNzI5
LzEvc3RMQkd2OEhLLXczcFlKaUVVNGNCcjdiU1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIwXfmT/
LcE4My5wjDv9XTvcbbtAx3IsWH/G10kQQxyplrrz/tBC8tA6f9BVvrEysLkh5vHP
iNNDF8yT+8P46sRcUcSB5HC5vfyyRquslucHCgcO+JztuFzfv0M89JmCLQ/36Xl6
aV/vkzE24gIW0GOmPaHnYExQokFbPGVO2u4TMHbHwqWqn/4qx9M4buobj1AsAVbX
U/nAJnHYlZD/DQ/oj0KVS6ceYeIXTRIKsFBd90nuFH9xw1tmj0w5TyWp/Cf5eIsY
ValGOQqRS0xUEKI3l4WAJY//vhSTkxdgp2MHyoRMbMyigovoMQB4hdbKbGhHBNaV
sBlDBAHk+45DkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:09 2026 by rpki-client