Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: WR11mf64aRM0YFj3FettQF7acz+uvDz9luHnjbYpfy8=
Subject key identifier: D7:22:4B:67:7F:3C:2F:BE:25:D0:BD:AB:0F:69:5E:B8:85:F0:2D:B1
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019CACB57D393AC4C29A01C7CA0110EA50E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 07AE
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: 4LvgqQnRm-5wgkIxb2YREs-b2RY.roa (hash: OXbW7JLQRI/gw7tyjauy/Oxf9k522sPNsWVSUNOr3ok=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: FTBq5QVIJ0sD/G6WNEisK0fTDMQk0O5evT3eFuo96zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7d:39:3a:c4:c2:9a:01:c7:ca:01:10:ea:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=d7224b677f3c2fbe25d0bdab0f695eb885f02db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:bd:1e:95:86:64:12:48:26:1a:1e:7b:bd:
c6:f5:0a:47:5f:a0:b2:66:dc:52:7f:a1:b8:78:34:
0e:1e:74:38:1d:da:51:59:2f:93:f9:f7:41:37:0a:
40:e0:b2:3c:3a:77:1f:c3:08:74:01:78:55:64:1f:
f2:30:25:84:ef:1d:e8:59:d6:43:1f:f5:d0:c0:03:
0f:a2:27:95:2b:59:29:1f:32:be:4d:28:c3:31:3a:
80:b2:19:93:93:b9:14:72:6c:d8:5c:1d:05:e6:d1:
3e:d3:5b:2a:9a:af:82:17:7f:36:8f:e5:3b:9e:fb:
00:1c:e7:70:86:62:22:b0:9d:0d:45:6b:6f:db:75:
be:f8:33:27:98:25:0e:15:71:b2:ed:30:a8:5a:07:
32:d5:c1:b0:dc:ed:65:99:3f:75:8c:8d:ee:48:a9:
5a:e4:1e:4f:80:64:df:03:14:cf:a5:19:70:2d:ea:
2c:76:f3:c4:20:6d:d8:2b:67:ed:0f:5a:bf:77:b0:
6f:14:d9:a2:2a:cf:0b:aa:08:cb:70:3a:2b:45:b1:
24:e6:e1:3a:eb:18:90:af:6f:49:3c:b0:ec:e8:2b:
c9:f9:18:a5:25:7e:20:12:fc:b6:48:a7:f1:7a:d0:
63:39:6b:e3:a2:8a:4a:ae:5b:ef:39:f7:67:7d:40:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:4B:67:7F:3C:2F:BE:25:D0:BD:AB:0F:69:5E:B8:85:F0:2D:B1
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:77:24:fe:ff:14:95:81:16:d0:6d:1a:a4:cd:48:bc:2b:a5:
e3:9c:32:83:72:5a:4c:ec:ed:ff:50:48:88:7a:cb:9a:72:37:
30:08:b2:2e:e9:0f:e0:9d:b0:44:4f:0e:f1:2b:7a:ce:bf:44:
4f:92:76:c3:ca:b5:fb:94:94:47:55:c6:45:7e:87:c2:db:3d:
64:df:bb:43:41:30:77:a3:78:5a:23:c6:fe:51:19:f5:c2:9c:
92:a3:ee:86:f6:33:3f:61:b7:26:11:ab:2b:02:7d:f0:67:7c:
63:af:6d:3f:4f:65:03:11:b9:f6:d4:1b:03:93:38:52:af:70:
d4:24:6d:76:62:b0:fa:fe:44:42:97:16:9e:13:45:f1:de:d9:
f6:c8:b4:3b:76:32:78:d7:3f:0f:e2:4f:a4:97:83:b3:b3:ab:
ae:01:c3:e0:80:21:26:00:b0:f9:09:75:ac:3d:74:b6:b6:0f:
55:69:30:96:1c:4c:16:4c:e1:3d:98:4a:3d:0e:fe:b5:df:21:
18:db:2b:45:18:66:6e:f2:f2:11:9e:7e:6e:24:d8:e7:f2:e0:
31:cf:86:7e:97:72:3d:be:bf:b5:18:d3:a8:3c:e8:84:59:1e:
a0:50:8f:01:16:ea:b3:bc:5f:98:0c:b9:c2:53:86:59:86:57:
6b:51:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:26 2026 by rpki-client