Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json)
Hash identifier: fGsONoxIL6NjqQ/CpUmcl9BImIWDrKIjYHprJV+Tdlk=
Subject key identifier: C1:E1:35:51:A4:72:F0:44:4C:7C:29:C6:4E:3A:10:07:BF:1E:09:EF
Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516
Certificate serial: 019CAAFD18CC5D831844EB87E54797E6A2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
Manifest number: 14F3
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: 7fzqQSK2bc8ZjNPbkgCtNK7/YRLigt91X3Z3q+9A+3E=)
2: YW79Yef_XcQH-yQeSEH6dsBEV58.roa (hash: OnfUE3JgvIAolLyP0DJV9UMqit9OdFdesv9RsZ2Z4TI=)
3: qHkKc6qThO5LVCCZnqTx59tVQVQ.roa (hash: hYX8MCTn1ruNTten5OGMYptvMIuzTBWfYXGAUvW3g24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:18:cc:5d:83:18:44:eb:87:e5:47:97:e6:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=c1e13551a472f0444c7c29c64e3a1007bf1e09ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:8c:66:4c:d3:1b:1d:99:4a:cc:51:32:5f:
fd:62:6f:d4:5b:d8:20:9e:3f:db:47:f1:9d:d1:32:
a5:97:3b:b2:b4:bd:8f:8b:a7:e3:8a:66:a8:29:ed:
1d:2e:13:c1:f9:d0:68:c6:31:ce:3f:34:16:d4:7d:
c1:de:57:82:ee:3d:58:c7:20:ab:2a:85:98:a3:67:
95:20:ed:c6:3f:1a:dc:4e:c3:5b:4f:3e:2b:22:bf:
53:46:3e:ca:89:c4:63:39:bb:9e:cf:0d:66:fa:dc:
63:fd:15:0f:b5:31:ae:5c:65:19:45:e0:27:3e:4e:
42:59:5c:b7:fc:86:b1:8f:5d:aa:00:d6:af:ce:33:
9c:74:0f:7c:31:74:55:3f:6f:bc:59:03:12:f4:e7:
e3:68:c2:41:4b:3b:29:10:e7:ff:29:ab:fe:fa:19:
9b:d6:75:27:a5:cc:f0:6c:c2:1b:bc:f1:2d:8c:f0:
4f:3f:70:21:0b:23:43:0a:53:43:17:62:34:8f:fb:
b0:e4:05:ef:93:44:54:a8:48:07:86:04:07:98:79:
1b:71:6f:b5:7e:be:4f:9c:e2:c2:69:55:b7:35:94:
92:ad:b1:52:74:38:f5:7b:d4:6e:8e:cb:b9:30:a3:
5a:3e:eb:b3:a6:a2:a7:78:df:dc:d0:07:9a:cb:bc:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:35:51:A4:72:F0:44:4C:7C:29:C6:4E:3A:10:07:BF:1E:09:EF
X509v3 Authority Key Identifier:
keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9d:50:7b:e3:7d:74:b1:f4:c5:1f:bd:87:38:04:ed:73:1f:
38:ea:ad:43:e4:79:f8:10:a7:2d:55:d5:a4:f3:28:ad:34:e0:
4e:4a:db:6e:af:b2:65:cf:88:98:1e:5e:69:90:10:64:64:22:
62:1a:b9:87:a8:71:cb:b7:21:3e:fb:77:b1:4a:4e:8f:8b:22:
0b:48:20:9b:a0:fb:84:26:85:78:7b:0f:6e:3e:b6:50:05:33:
db:42:85:01:bd:5a:ec:d4:67:87:5e:5d:45:9f:3b:6d:e8:f7:
77:d1:ce:9f:93:17:6a:57:d9:55:12:89:3d:d5:7d:28:4e:29:
cc:6f:b5:7d:d3:e6:5c:d3:aa:cd:eb:98:ab:07:9a:e0:05:8f:
66:b6:65:83:ed:5e:5b:cc:14:c5:ea:b8:73:6d:30:37:b0:a6:
f6:78:68:41:3e:48:ab:98:4c:1c:e6:11:bb:2c:5c:a4:4b:de:
51:96:5d:67:8f:95:e8:b7:80:91:fe:ce:af:33:e3:8a:2c:4d:
f6:49:ca:4d:b8:15:00:b3:f9:b6:1c:39:a4:fc:f8:c6:8a:bc:
64:5c:15:fe:9e:bc:2a:23:0c:da:6f:0a:23:ce:49:bd:e1:57:
e5:85:cf:b5:75:44:fb:23:13:0a:7f:5c:9a:0f:1a:6d:4c:46:
ac:95:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:24 2026 by rpki-client