Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: 2cjDVRjErT4BsU3zIyz2aQtFqxeAwX/lTiY+s6ozzv4=
Subject key identifier: 88:50:9C:9A:54:DE:77:9B:2D:DA:55:A6:1B:90:7A:3B:13:FB:17:B2
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 019D9A74D35968673BD58B192FDC05E58472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:00:40 +0000
Manifest this update: Fri 17 Apr 2026 08:00:40 +0000
Manifest next update: Sat 18 Apr 2026 08:00:40 +0000
Files and hashes: 1: LyH072gfUMGAgt_4wmd5jVPgEkk.roa (hash: hULmRNFiKgC2IUf4UTD/aN/EAbJh9VEEauv42jZuyn0=)
2: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: R3VQLcgY5dNNESdO2Cg6cjdw/hSGljnYi+e7FiqUh5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d3:59:68:67:3b:d5:8b:19:2f:dc:05:e5:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Apr 17 08:00:40 2026 GMT
Not After : Apr 18 08:00:40 2026 GMT
Subject: CN=88509c9a54de779b2dda55a61b907a3b13fb17b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:8d:44:2a:a4:06:30:e0:05:a8:40:ae:05:
30:5c:41:43:89:ae:14:e9:5e:37:7b:50:02:67:ba:
5f:11:28:5b:79:7e:a5:94:d5:98:e1:f3:46:d6:a0:
cb:8f:9c:82:57:ea:2f:e0:f6:fa:88:8e:a5:7b:87:
6d:92:7b:c0:d4:34:f0:da:16:04:9d:04:1e:d2:c6:
92:3e:71:3f:dd:3e:9c:0e:29:68:ec:f1:e8:4b:a1:
64:67:92:25:71:f1:ff:b5:72:23:bf:22:26:e8:27:
f2:88:89:da:a8:bd:6f:68:9e:fc:32:67:bd:d6:f3:
31:4c:1a:ba:a3:35:a7:6a:1d:7d:ce:b5:4a:8b:59:
f0:c8:10:7d:63:7e:e2:17:59:f0:67:ec:ed:d6:5f:
23:36:db:92:25:27:24:b5:87:06:7d:1d:0c:6b:68:
04:50:e7:9e:d8:d9:27:9e:bc:ae:7a:cd:39:2d:20:
a7:8a:8e:7a:63:e0:30:b0:ea:11:ad:8a:9e:a1:f3:
59:97:05:63:e6:3c:04:bf:9a:c9:03:e4:ec:8f:86:
ba:95:48:f5:ee:1d:56:e0:e2:c0:67:75:88:79:7d:
d1:fa:d8:1f:ac:f7:87:a2:56:19:05:12:60:9c:17:
b0:b1:f2:1f:9c:c7:d9:a7:f9:99:21:5f:ec:ed:97:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:9C:9A:54:DE:77:9B:2D:DA:55:A6:1B:90:7A:3B:13:FB:17:B2
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:44:07:71:9c:4c:57:c5:ad:7b:e8:04:dc:68:8c:44:9f:
11:15:24:49:1a:dc:02:a1:ff:81:98:7d:1a:be:07:82:5b:62:
61:37:5d:c0:db:d7:7a:62:75:1c:f2:61:f6:fb:da:b4:3c:1d:
17:63:14:dd:99:a4:8d:f2:2c:6b:8e:ad:75:ec:4f:4b:da:f3:
2e:fd:f4:cf:15:78:0f:e1:41:5b:40:63:ed:9d:d6:bc:a7:64:
7e:89:6a:53:a8:42:8c:3d:26:48:6f:5c:9e:ff:18:e5:dd:b3:
89:15:ff:b7:f3:7a:f5:88:bf:d4:19:33:6e:15:05:e9:20:96:
ec:82:80:58:df:4b:78:a5:25:83:a5:99:b8:6f:0d:da:c7:d5:
c9:b0:f7:32:29:a9:fa:d3:3b:77:1c:e3:07:b1:e5:af:d3:5c:
98:af:87:7d:3f:ea:04:c8:68:b1:70:fd:cd:18:0a:d9:57:f8:
1c:8c:59:84:2f:d5:71:80:e3:0d:fc:28:6a:35:fe:8b:a7:f3:
4f:8b:5c:05:25:e6:9c:6f:8a:e6:b8:59:31:33:72:98:53:9c:
2c:74:8a:4d:00:ba:0c:de:77:60:a5:6a:27:54:74:d6:bc:8a:
91:f3:00:0e:e7:f4:df:26:08:37:b3:0a:e7:ac:c0:2a:79:b8:
c7:db:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:57 2026 by rpki-client