Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
File: stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json)
Hash identifier: +nW6E4CFa0p+XmYUnx5dZW39mUUZLFJ4F8yseELktNA=
Subject key identifier: 0E:63:48:04:78:5F:89:70:AF:D6:79:78:50:D6:A9:B4:CE:18:76:CE
Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Certificate serial: 019CAAFD0147D5272B486E01C473C0040510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
Manifest number: 1812
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: kI6O0uFJPftBH4xW35fguwVIj3w.roa (hash: Y0KF9po9o55fM0XpVubG9yoHKNbR7AYN/MNkbuUq+D0=)
2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: dOyp2A/2jYsCLYQAfJNngVrEatQgLDzKq+UswGyI8NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:01:47:d5:27:2b:48:6e:01:c4:73:c0:04:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=0e634804785f8970afd6797850d6a9b4ce1876ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:8d:a3:3c:4b:d2:85:be:79:5b:37:0a:f6:
67:8e:e5:8c:fd:c9:9d:78:bd:91:e9:55:ac:76:ac:
ff:7d:d6:20:5e:d6:28:91:5d:59:7e:e5:48:26:48:
9d:73:72:33:3a:e0:19:b1:45:7f:a0:f5:0a:8e:73:
ae:e6:06:84:e0:ee:20:ef:74:a1:78:68:d7:ac:7c:
04:9f:18:2a:f4:82:b3:4e:35:59:59:51:10:d2:df:
96:47:10:4c:eb:38:76:a7:5b:7a:2d:bc:99:cb:28:
7b:f3:f5:17:15:d5:60:16:a9:16:3a:c0:ae:39:ca:
f0:50:57:3c:d3:ec:59:8a:4a:83:26:d8:21:66:87:
41:5f:9d:b1:72:eb:98:cc:55:f1:04:86:b4:eb:4a:
97:c3:7d:1d:41:53:e7:c0:cb:fc:c4:e0:cf:dc:9e:
ba:74:dc:8b:fe:7b:a6:06:54:f5:b0:5b:d0:05:0d:
c2:fe:ad:f8:c7:54:ae:fd:ff:e2:fa:59:2e:ad:88:
94:e6:a1:20:fb:0b:f1:26:62:30:43:ff:c4:f6:fe:
8d:f8:0b:c6:bb:f0:b1:de:2c:4c:b8:55:36:4f:3b:
be:b7:3f:e8:fc:98:4e:30:eb:21:f3:a8:1f:67:d4:
db:1e:71:d5:bb:85:85:1b:56:89:e1:a6:00:75:1b:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:63:48:04:78:5F:89:70:AF:D6:79:78:50:D6:A9:B4:CE:18:76:CE
X509v3 Authority Key Identifier:
keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:a5:19:f9:5c:89:22:c9:b9:64:d9:27:b6:eb:34:3d:6d:
54:78:38:81:b0:02:6a:24:fe:a2:78:7f:a6:a9:ed:f2:d9:52:
39:54:a9:f7:1e:c7:6f:9a:94:61:d4:27:b0:a4:ad:ab:a1:ae:
0b:8b:7d:a9:49:44:39:29:0a:0f:f0:51:95:b6:61:d4:68:5e:
27:81:ef:e6:84:08:eb:50:83:c4:e9:83:d1:9b:32:81:a9:38:
54:0a:96:a1:52:93:11:1d:6d:ad:2b:98:84:6e:26:47:55:e5:
e1:79:d4:16:73:81:dd:2f:47:c6:1c:d4:85:57:b2:e3:65:c9:
b9:86:83:ca:50:b9:14:cc:3c:f9:11:29:ea:67:33:0f:4c:bf:
26:2d:37:80:a3:82:34:f2:f0:79:c0:7b:5f:90:aa:94:3a:1e:
ec:b1:f5:43:7b:36:b6:16:11:2f:ac:d6:7a:23:25:c5:43:36:
fb:16:eb:97:9e:8b:37:13:67:9e:d2:76:b5:be:b4:ee:a8:d4:
6f:a2:cb:03:16:3a:d3:97:53:ee:75:b5:98:13:d5:fd:bb:5f:
93:15:9c:bf:b3:d7:fc:82:0a:9c:4d:2b:cc:ea:ab:b1:b2:13:
26:0a:bc:f9:c2:3f:22:b2:3a:49:5a:46:00:cc:d9:63:68:a9:
31:34:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:39 2026 by rpki-client