Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json)
Hash identifier: 5FhUzznVY6kZUfTYzkh1dNjl0TGFM8h7YqaGTg903A8=
Subject key identifier: 92:C3:31:83:2B:5E:8F:22:63:58:37:39:59:55:D7:99:83:02:3E:0E
Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a
Certificate serial: 019D98F431EF7F63F1410ADAAEDB72FCD7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
Manifest number: 119A
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: DBi41SI2H7XkfN59Dys6BCURkzztSEP5BER6lkmK1Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:31:ef:7f:63:f1:41:0a:da:ae:db:72:fc:d7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=92c331832b5e8f22635837395955d79983023e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:9c:73:e1:ff:cd:5f:66:6b:98:10:77:bd:
0f:9f:00:8f:36:a0:48:09:bf:7c:45:e8:bb:25:7c:
1f:09:42:92:74:cf:84:9b:8e:b3:e3:8d:ad:54:cf:
8c:87:20:f4:9d:e9:0a:2c:c8:de:70:ab:ff:17:79:
e8:d6:db:51:8e:08:97:b0:8b:2f:8f:eb:07:1f:81:
b0:68:04:61:c6:81:5b:ec:25:df:ce:1b:61:d0:5a:
95:0f:bf:00:71:80:ab:a8:50:eb:69:17:6f:a2:7b:
54:cd:d7:4c:b2:a7:91:82:fa:8f:b8:07:c8:1e:1f:
1b:2a:74:c7:e0:a8:f6:bb:a9:2a:54:97:86:7f:be:
2d:6a:7d:f0:7b:2b:9a:24:0b:e5:4b:04:bf:a8:dd:
c9:68:fc:de:9d:e8:19:ef:24:19:88:6b:4c:7c:09:
d2:db:4c:af:34:a5:2b:33:e4:fd:dd:5d:2d:bf:f6:
68:e2:ee:e1:a0:8b:9b:32:24:d3:c5:61:55:a4:d9:
2b:22:14:7b:cf:66:49:6a:7b:82:41:9c:74:8f:44:
bb:c9:77:8c:a1:7d:54:cd:10:bf:fe:84:64:a8:04:
9c:6e:82:92:07:91:7e:d8:a2:02:60:3f:68:4e:88:
d9:16:ab:b7:0b:50:b7:02:f2:e2:c1:22:42:df:86:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:31:83:2B:5E:8F:22:63:58:37:39:59:55:D7:99:83:02:3E:0E
X509v3 Authority Key Identifier:
keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:34:7c:b7:f1:f3:19:d1:f0:5a:ba:d3:ad:07:69:ec:a0:1e:
d5:19:94:d7:18:a3:37:e8:d9:79:18:9c:82:69:26:7d:7f:b2:
b5:d1:9d:f8:a6:31:24:ed:71:3d:77:75:96:1f:dc:5f:8a:72:
a5:e6:f5:8b:6d:37:5f:6c:dc:76:42:48:e8:dc:c7:7b:e9:0a:
09:42:8e:c4:d7:6f:58:b6:97:a1:4a:cb:25:33:94:57:32:a7:
92:f9:46:f8:46:03:1e:b1:5d:47:22:5e:95:61:f2:b5:4e:38:
7b:fd:2d:be:84:eb:ff:ce:61:fd:1a:d3:36:e5:ff:53:16:56:
df:9a:45:1e:09:bc:ad:ea:68:33:9d:43:d5:a6:90:ff:55:87:
59:de:8b:08:c9:19:00:17:d5:54:75:b4:d0:82:36:de:b7:94:
af:0b:6e:cf:50:40:75:e9:05:6f:17:eb:b0:e2:af:50:0b:46:
e4:09:ec:eb:11:e5:be:85:22:cc:29:bc:19:34:3f:23:28:47:
3f:26:3a:57:5a:68:3f:6f:a4:aa:0f:6a:06:23:e8:be:a6:b4:
1f:d9:5d:93:f3:52:98:4a:67:d2:28:22:94:b2:12:34:60:76:
5b:a7:6a:90:e7:a6:ef:55:66:bc:c6:d9:e8:c8:a7:80:9b:41:
fa:89:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:11 2026 by rpki-client