Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: BcaSIZXkVkKyOiOA9YBZnjGrYfKpUgtj2zoI3fIFefI=
Subject key identifier: 34:09:2A:D0:14:99:08:7F:06:20:3B:B2:C8:0A:4F:80:52:D1:8C:24
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019E1D902297B44A878B49BF3459C3FFCDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 185F
Signing time: Tue 12 May 2026 19:00:45 +0000
Manifest this update: Tue 12 May 2026 19:00:45 +0000
Manifest next update: Wed 13 May 2026 19:00:45 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: sj+m1V1KF34ugikU+4DHW7zNHbbteBgFJ/9gNXzDbOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:22:97:b4:4a:87:8b:49:bf:34:59:c3:ff:cd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: May 12 19:00:45 2026 GMT
Not After : May 13 19:00:45 2026 GMT
Subject: CN=34092ad01499087f06203bb2c80a4f8052d18c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:a3:65:79:c9:35:92:da:c7:b2:3e:87:06:
50:cc:f3:ff:96:a3:f5:b9:f9:c7:55:2b:b8:74:af:
7c:0d:3b:d5:d8:99:83:0b:61:7c:45:f7:3f:a0:ca:
17:be:35:96:84:e2:56:4c:c9:c8:69:10:eb:b4:0e:
22:7a:3b:00:b3:35:4d:a8:38:c9:6f:1b:be:b2:fc:
df:b1:b9:ae:89:83:2d:5f:c1:f1:c3:ac:17:25:28:
43:c9:b7:34:82:dd:fc:cb:13:61:0c:79:89:20:ad:
c5:81:fa:e7:23:90:47:70:d3:69:69:72:f7:47:79:
27:f7:80:6b:41:89:40:43:41:95:10:f6:37:01:5d:
1b:44:2c:3a:2e:b7:40:29:a1:df:6c:16:62:91:3c:
fc:36:71:16:0b:ed:02:d3:d6:e5:cb:23:cb:f2:9f:
42:f8:5f:b6:bd:7d:af:fe:84:63:71:d2:df:ed:5e:
3d:85:73:fe:2f:d9:4a:da:4c:76:d7:33:22:fd:d4:
5c:30:e7:87:2f:5c:25:a0:dd:cc:a5:e5:07:6b:cf:
5d:8b:42:b4:93:51:e5:81:14:c1:df:f8:a7:65:c1:
ca:b9:88:b8:77:db:03:c3:7b:85:8d:20:e6:6a:3b:
16:50:2b:a2:a6:0a:fe:97:f2:ef:4f:d1:03:c7:f9:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:2A:D0:14:99:08:7F:06:20:3B:B2:C8:0A:4F:80:52:D1:8C:24
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c5:ca:ac:31:47:d9:18:f1:af:cb:cb:cd:53:18:74:33:6e:
7e:9f:92:88:af:27:ad:a4:40:ca:e0:8f:77:e7:4f:f7:65:37:
df:14:ef:35:df:6a:bd:34:22:e1:6a:36:14:c0:9a:48:06:1e:
2a:2b:00:d2:f6:58:ba:cb:2e:48:2b:9a:05:19:95:1c:a7:79:
66:87:53:4a:68:9a:7d:b8:09:1d:56:1c:35:65:9f:b3:08:05:
81:28:35:3f:ee:65:af:23:ae:f4:9a:56:af:f7:81:6d:d7:64:
cf:6c:0e:b2:4c:b5:a5:25:8d:6d:a4:32:ea:11:9e:49:29:57:
83:93:f3:c0:c5:5f:75:e1:bc:30:9d:8a:cb:08:24:62:a2:a9:
5f:cb:d4:9b:81:e5:3a:4b:f1:58:9d:51:c6:ab:ca:ec:fc:da:
fc:cc:de:d5:c0:93:b2:43:f0:77:f0:c2:59:4a:c1:29:72:5f:
9b:ad:10:ab:58:e4:5c:e3:28:52:7c:e1:66:c4:ee:9f:f4:fc:
41:65:0d:66:56:c7:2b:a7:45:6e:00:16:47:e0:c4:6a:5e:a8:
e4:c7:6f:de:69:05:56:0c:60:e6:77:31:c2:57:9d:3a:68:51:
2b:bd:7d:24:d3:13:f5:8f:cf:15:e4:d0:1c:5e:3c:0e:f1:22:
ad:ea:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:12 2026 by rpki-client