Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: JQn6ndDqXGt4RQc112YLzEwh5PCgAgpWx8U9amBv+ew=
Subject key identifier: 2B:1B:23:A1:39:EA:C7:D3:F5:BE:D1:77:F7:F4:63:5D:04:F1:BE:3B
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 01A0CEFF6D47C25CB7715E15D1A790D874CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 19C4
Signing time: Wed 23 Sep 2026 16:00:41 +0000
Manifest this update: Wed 23 Sep 2026 16:00:41 +0000
Manifest next update: Thu 24 Sep 2026 16:00:41 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: S9LxdZ2VdeF2c92x2oChBEKKP8a0bRYRI6Sxa6AC2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:6d:47:c2:5c:b7:71:5e:15:d1:a7:90:d8:74:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Sep 23 16:00:41 2026 GMT
Not After : Sep 24 16:00:41 2026 GMT
Subject: CN=2b1b23a139eac7d3f5bed177f7f4635d04f1be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:99:b9:4c:15:fd:60:a0:96:c0:71:88:51:
9c:50:c1:21:5d:78:07:bf:4e:d3:5a:40:00:af:d5:
43:b3:6b:fd:ea:4b:fb:af:88:d5:1f:b9:c6:26:4c:
2d:50:33:72:1c:41:7a:e0:7f:91:87:01:81:6b:36:
03:6a:df:18:e4:47:b7:83:8f:dc:bf:cf:7f:e9:83:
71:d0:3a:58:ea:a4:bc:5d:80:63:6a:36:a2:b6:68:
14:f7:56:8d:a2:c8:42:f0:ba:dc:9d:da:ad:f7:06:
88:ad:0f:1e:0b:a7:b6:d6:46:bf:fc:f6:52:b6:21:
a5:83:33:20:43:a6:34:32:13:6e:98:92:16:6a:97:
cc:53:47:5b:2d:59:83:b0:b5:ad:2e:d2:56:bb:0b:
17:e6:fb:0f:75:3a:a5:f7:49:80:87:c5:6b:cc:f5:
c2:d6:f0:7d:ff:54:3b:06:7c:21:59:82:8e:0d:fc:
6f:80:56:89:b3:2f:7c:9d:9c:61:6c:fc:8e:da:4e:
9b:e0:f6:53:42:ba:57:8e:c3:70:c6:ed:24:e8:60:
c0:fc:bd:24:84:dc:3a:a4:23:56:e6:ff:00:bd:28:
85:c2:d2:48:35:f9:6e:ee:a2:ff:8a:9b:d7:0e:5d:
09:d3:07:f6:dc:6e:c5:92:87:32:92:e8:23:26:fd:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:23:A1:39:EA:C7:D3:F5:BE:D1:77:F7:F4:63:5D:04:F1:BE:3B
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9f:a7:27:e4:4d:31:61:08:53:00:c7:d0:34:87:d2:b0:dd:
12:08:bf:1b:db:1e:65:e9:88:9b:7b:24:18:95:0f:65:16:fe:
fd:09:20:27:c0:71:56:de:1f:e6:17:a0:b3:de:4f:6d:0b:e9:
d1:cd:15:95:c7:12:7a:1b:3a:f5:75:08:20:ca:6a:f1:32:0a:
a6:5b:2b:11:4a:90:c2:32:5c:1f:bf:8f:41:0a:32:4c:99:d9:
48:5f:a6:23:93:e2:fb:39:33:68:a5:c3:b5:da:df:55:8c:aa:
fd:dd:a2:10:51:51:f7:b9:61:2c:e4:89:c4:fd:f0:d3:af:86:
5b:1d:18:08:c7:7e:ee:c5:dd:bc:23:50:d3:09:88:e4:48:28:
2f:20:ec:9c:14:b0:aa:56:d4:0d:36:e1:22:4d:cb:04:52:2a:
5a:12:60:f6:b2:b6:47:ca:0c:6a:2a:ac:89:a8:e3:a3:25:84:
5a:3e:7d:94:bc:d2:5f:cb:41:f7:fb:9f:ab:09:27:96:a8:04:
4e:18:d6:29:df:ca:94:f8:2d:1e:e7:62:d6:2b:2e:57:1e:d5:
b7:ce:02:39:b0:27:41:ab:67:68:aa:e1:f3:4b:92:38:da:a1:
98:ce:1f:33:cf:92:16:92:25:6b:87:cc:13:95:43:c4:75:1f:
fa:94:6e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/21Hwly3cV4V0aeQ2HTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjYwOTIzMTYwMDQxWhcNMjYwOTI0MTYwMDQxWjAzMTEwLwYDVQQD
EygyYjFiMjNhMTM5ZWFjN2QzZjViZWQxNzdmN2Y0NjM1ZDA0ZjFiZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTWZuUwV/WCglsBxiFGcUMEhXXgH
v07TWkAAr9VDs2v96kv7r4jVH7nGJkwtUDNyHEF64H+RhwGBazYDat8Y5Ee3g4/c
v89/6YNx0DpY6qS8XYBjajaitmgU91aNoshC8Lrcndqt9waIrQ8eC6e21ka//PZS
tiGlgzMgQ6Y0MhNumJIWapfMU0dbLVmDsLWtLtJWuwsX5vsPdTql90mAh8VrzPXC
1vB9/1Q7BnwhWYKODfxvgFaJsy98nZxhbPyO2k6b4PZTQrpXjsNwxu0k6GDA/L0k
hNw6pCNW5v8AvSiFwtJINflu7qL/ipvXDl0J0wf23G7FkocykugjJv1PqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsbI6E56sfT9b7Rd/f0Y10E8b47MB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ+nJ+RN
MWEIUwDH0DSH0rDdEgi/G9seZemIm3skGJUPZRb+/QkgJ8BxVt4f5hegs95PbQvp
0c0VlccSehs69XUIIMpq8TIKplsrEUqQwjJcH7+PQQoyTJnZSF+mI5Pi+zkzaKXD
tdrfVYyq/d2iEFFR97lhLOSJxP3w06+GWx0YCMd+7sXdvCNQ0wmI5EgoLyDsnBSw
qlbUDTbhIk3LBFIqWhJg9rK2R8oMaiqsiajjoyWEWj59lLzSX8tB9/ufqwknlqgE
ThjWKd/KlPgtHudi1isuVx7Vt84CObAnQatnaKrh80uSONqhmM4fM8+SFpIla4fM
E5VDxHUf+pRuEw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:21:08 2026 by rpki-client