Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: JVT23XGsYSGbt9wwKuqkpm58UHQyUCbQ9roeDZJqd/o=
Subject key identifier: 3D:3C:A4:5D:F7:7E:36:46:5C:50:FC:2E:73:EF:FC:A6:C7:E5:ED:7E
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019CAB6BE7E99C361935B428854090CFB1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 0DDC
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: XS/jRQbVfsvZ8H4zqAJt+L3yWJdoBMc1SvLIVHTWRVU=)
2: eTeZJkz6TZKR9fBABuCYkveSXH4.roa (hash: IXje/wOsdswfN7bHHCSup3yOBkGIBAgKtGMcyKtHLG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e7:e9:9c:36:19:35:b4:28:85:40:90:cf:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=3d3ca45df77e36465c50fc2e73effca6c7e5ed7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:e2:79:89:bb:cc:89:c1:1e:55:a9:5c:7d:
ea:6a:4b:6d:76:a5:00:c4:c3:98:2f:e6:47:78:12:
de:8f:70:d4:5e:b7:d4:da:f3:00:33:8c:43:b7:25:
5e:01:7d:c1:07:89:bb:1b:d9:7f:08:82:35:d0:86:
f1:e3:54:a8:e7:aa:b5:3a:15:b2:45:4a:14:55:31:
2c:74:2d:f1:e5:05:ea:56:b9:d7:b5:e2:1f:98:14:
5f:a5:a0:a4:a7:24:79:78:f9:87:e3:8b:fd:f8:76:
14:23:52:56:8f:89:4b:3e:6b:be:10:de:2b:48:0d:
3d:aa:47:0d:9c:4f:22:5a:99:4a:33:9d:13:9c:88:
a1:19:f8:ff:69:83:19:d2:5c:eb:e6:ef:8d:8d:ac:
94:c8:fa:23:17:93:9b:e4:36:86:c8:9f:7f:e4:57:
9e:5c:ca:e4:51:e5:16:6e:6e:ce:08:79:94:aa:35:
af:47:a8:f7:6a:a5:e9:01:f4:fe:b8:5c:c8:bd:96:
8d:94:da:3b:b0:cd:9c:e5:69:38:6e:ed:d2:93:9d:
ff:6c:bd:38:9a:ad:54:c8:ac:07:f6:17:96:85:8f:
9c:9b:54:86:2d:14:2f:e3:f3:fa:21:64:f6:9c:e8:
d4:5c:87:cc:60:14:ed:97:a7:63:a9:c3:9f:18:b9:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:A4:5D:F7:7E:36:46:5C:50:FC:2E:73:EF:FC:A6:C7:E5:ED:7E
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:04:19:a7:35:c4:3a:73:d7:11:25:53:16:05:fa:ac:7b:
fb:21:c9:1d:9d:32:23:2d:42:a3:7c:c1:d8:13:30:ec:3e:ef:
3c:ac:8e:f2:05:af:86:0b:67:58:b1:3e:d6:59:61:50:e1:17:
aa:a7:c1:dc:50:0e:2c:94:56:1c:b3:42:2a:7b:92:80:21:44:
80:5f:9d:4b:1a:b9:7c:29:34:2c:c9:ff:05:e5:77:1a:3d:26:
95:82:42:cb:6f:86:38:ca:39:ff:e2:57:2d:30:0b:74:52:f3:
42:fe:84:f9:d1:ff:f5:7e:12:b8:f0:6a:49:19:49:4d:19:c6:
56:0e:ef:98:5b:94:e3:be:82:e0:5c:f9:07:5c:14:61:6e:63:
f7:7f:a9:c8:12:f8:cb:b3:83:16:01:82:fc:a3:53:b1:30:23:
2c:2b:92:e5:14:e0:92:6f:6e:36:3a:bc:46:6d:ae:20:ec:09:
37:f8:c9:1a:75:96:a9:e2:79:f7:92:62:0f:09:0f:18:63:46:
30:2e:3c:48:d5:c0:59:9e:aa:5e:59:c2:a5:19:22:8a:ae:0f:
06:5a:8c:8c:c6:81:64:89:1a:b9:71:2e:4a:46:66:30:6f:c7:
b0:88:18:b1:47:61:71:8d:88:2a:01:47:e8:aa:67:4f:d0:13:
a7:c3:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:34 2026 by rpki-client