Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: LtC+KylT8af23jxcgfotVLu65kQWb61uPDAIAZCUFKU=
Subject key identifier: 8C:B2:34:39:D6:53:A0:C8:58:C0:DD:09:D9:C6:06:FB:D3:8B:A7:4A
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019D27728432E2131DF5A1358DD7F08B7ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (hash: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc=)
2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: F+fxdsG7BNONFGFoOi37UkOkHK97ckw+Wrh1Y3/ti9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:84:32:e2:13:1d:f5:a1:35:8d:d7:f0:8b:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=8cb23439d653a0c858c0dd09d9c606fbd38ba74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:f9:3b:16:04:db:f2:9a:a2:de:60:5d:08:
d4:da:c5:36:c8:41:6f:e5:d6:d2:d6:fb:b5:e6:f1:
8b:31:11:90:5a:c5:4b:ed:ca:23:07:1e:19:8c:55:
dc:58:7a:81:08:2a:9b:13:c8:6f:7a:87:70:20:9c:
36:57:89:eb:94:23:43:2a:e7:85:0c:bd:36:5c:c6:
bf:d6:fc:82:4d:c6:46:7d:41:75:77:1b:7c:c3:02:
b3:57:8e:af:62:48:4d:82:df:2d:a8:17:55:34:78:
bc:82:01:8d:b8:e0:9d:59:f8:7f:ee:7b:b7:c2:64:
a9:35:b2:1d:3e:40:ce:12:40:05:29:6b:c1:20:f2:
28:7b:af:42:89:a7:d2:24:bf:be:e1:46:38:84:f0:
de:4b:e1:1a:ef:68:e6:88:c3:e4:63:18:c4:bb:1d:
8e:7d:ed:f0:54:81:a5:71:e8:7f:9e:cc:d3:b1:5b:
ec:b6:5e:ad:ae:d2:db:6b:dc:bf:e4:a9:0b:42:e0:
bb:55:cc:ce:e7:37:fc:3b:ab:d5:4b:b3:34:21:f7:
3d:10:16:15:c6:c7:e5:a3:86:34:19:52:4a:04:96:
4c:23:fa:44:2f:41:bd:e1:7e:13:90:f2:e8:c9:8a:
c6:ec:ba:9c:59:7e:f6:af:29:6b:c7:ab:43:44:6c:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:34:39:D6:53:A0:C8:58:C0:DD:09:D9:C6:06:FB:D3:8B:A7:4A
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5f:7f:d7:ce:b0:21:f6:e7:1e:1c:b6:d4:0d:92:d2:58:20:
ed:d5:1b:9d:96:05:7f:92:e2:56:08:3c:12:d8:53:39:db:22:
f4:1d:ea:0b:3d:a9:30:b8:e4:b0:fc:f5:32:64:03:c8:d1:0a:
a6:e2:a9:e0:71:77:19:98:fe:ef:e7:e6:85:45:1e:28:28:18:
be:34:af:ac:34:7e:c5:75:ff:a8:44:41:cb:d1:85:53:c2:66:
9b:d0:0a:3f:e3:e9:50:8c:05:42:02:d2:8a:71:79:1a:e4:53:
f0:fe:09:b6:c7:91:e0:59:a3:c1:e1:a0:62:a8:85:e7:89:c2:
ef:b4:86:ee:53:2b:b4:f9:e6:df:d3:cb:cf:21:53:c4:56:3d:
19:86:28:1e:68:0e:bf:b8:be:33:a6:86:54:07:d8:82:cd:4a:
9b:ae:cd:f8:be:eb:4e:6b:f9:48:5d:25:1e:25:43:49:db:03:
bf:cb:cc:71:fe:c2:23:3d:24:96:8d:7e:8f:84:ef:2f:3c:40:
ad:db:b5:0c:65:b6:86:8a:7c:41:59:16:fb:ed:dd:36:70:16:
5f:d8:03:84:1d:04:6f:93:b6:4f:a6:8b:e4:bd:f3:3f:be:f9:
b9:31:e8:c0:ab:d9:84:cc:3b:01:dc:f7:6f:a4:ca:de:6c:82:
b5:d3:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:02 2026 by rpki-client