Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: QmRydf84bLydq1/MdxzCDGQKtqZtDc54GBNAU3cnGE8=
Subject key identifier: CE:64:83:C6:84:41:C9:64:84:66:F9:AA:BA:34:8F:11:32:00:A6:AF
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 019CAB6B4FD2A7391282A453D8D90138000D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 111F
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: aQQSTSwY4vnwn1cWlnr9eLV7cKJlk7RXEryjb2IawDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4f:d2:a7:39:12:82:a4:53:d8:d9:01:38:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=ce6483c68441c9648466f9aaba348f113200a6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:90:52:12:a5:ab:9e:9a:7d:78:0e:73:e6:
00:62:c4:d8:5c:be:19:a3:20:91:01:b4:e7:08:bb:
a2:0d:74:18:c5:ea:9d:de:87:32:7a:85:84:c5:ab:
0d:46:39:b8:a4:c0:53:77:15:d5:d8:5b:bb:e9:cf:
37:8e:19:64:61:0e:ba:1a:60:71:26:e9:6b:e5:16:
ce:46:ea:d5:21:4e:9f:f3:d5:b1:a8:db:84:50:41:
9d:dc:8b:0d:22:64:87:6a:63:6a:f4:f3:16:04:ff:
9b:16:62:64:3e:57:d1:6d:af:c4:e6:03:b0:6c:de:
71:52:da:97:0f:14:07:9a:44:fa:41:51:c9:53:86:
d4:60:17:71:9f:2c:f0:a4:4a:a6:57:d8:4e:a4:cf:
dd:ee:99:0f:26:d0:ba:4e:3d:4c:88:ef:5d:9e:d0:
44:26:10:d6:d0:d5:fb:7e:3d:0d:25:f7:00:f4:03:
00:df:09:b3:7b:5d:36:eb:1b:84:71:b6:0d:9d:1f:
a5:90:a9:71:85:68:7b:d8:91:31:17:cd:b5:0a:dc:
38:d3:22:98:47:a4:07:55:2c:6d:1e:11:d9:0d:fd:
00:a4:ad:b0:39:d5:00:4f:cd:a0:33:e0:3b:33:a6:
55:3d:07:c4:b0:2c:41:75:45:62:a8:cb:a3:61:e0:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:83:C6:84:41:C9:64:84:66:F9:AA:BA:34:8F:11:32:00:A6:AF
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:b1:6e:e2:f6:c8:a1:31:81:9f:2d:02:cd:6b:58:1e:6e:
78:70:9b:e1:e3:fe:80:ed:c8:13:cc:62:00:97:a6:a3:61:24:
63:91:00:d0:bd:73:39:fb:d5:18:2c:45:a9:b2:8d:e4:0c:ce:
79:b4:c3:a3:52:a1:73:fc:7e:22:a5:10:13:6f:21:01:46:cb:
fd:37:c8:3d:0d:6f:76:9e:c4:4d:46:f6:6e:95:f9:78:89:59:
25:c1:82:2e:af:fa:dd:a7:90:ef:61:f6:d4:af:29:e8:e4:5a:
12:67:c2:cc:15:1a:65:7a:ca:f3:f2:f5:8a:3e:0a:54:16:f8:
2d:b9:de:02:94:2e:e4:f5:61:eb:73:10:d3:f1:63:26:8e:c2:
7a:3e:ac:6e:ba:ee:89:21:5f:89:ec:e5:40:87:a6:0d:40:4a:
95:7c:7e:ac:2c:29:c7:85:dc:67:d1:f1:91:9b:07:84:a1:20:
58:a0:b5:c3:41:34:06:38:9d:71:80:cf:ee:15:35:09:56:c2:
c1:85:c0:fe:55:5e:e4:8e:29:d0:7c:f6:82:5e:78:d5:15:f2:
be:55:67:d6:90:10:51:3a:79:18:af:b2:39:83:9b:04:56:46:
a1:3e:6e:f0:a5:7d:d1:7f:ab:f0:b9:0d:ea:0b:9c:90:9d:69:
2c:eb:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:27 2026 by rpki-client