Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: gZYg+VLq7ACe7gYmfp0wg0LVNYurHj/j9TP19XTdT0Y=
Subject key identifier: 94:37:D4:CA:AF:EA:F6:1A:6D:6C:D2:BB:8F:9F:6A:06:9A:09:46:7D
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01A11673FADFE448E991E1204A58F3FEB1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 13:01:01 +0000
Manifest this update: Wed 07 Oct 2026 13:01:01 +0000
Manifest next update: Thu 08 Oct 2026 13:01:01 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: W4HQCwp8BZOlUzBw9Tp9XcWGlczxtU5hQ4ZUnGikgHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:73:fa:df:e4:48:e9:91:e1:20:4a:58:f3:fe:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Oct 7 13:01:01 2026 GMT
Not After : Oct 8 13:01:01 2026 GMT
Subject: CN=9437d4caafeaf61a6d6cd2bb8f9f6a069a09467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:75:7c:14:b5:7a:23:ee:1b:a0:a4:e6:1f:
5e:af:72:60:e9:86:80:00:9e:1e:e4:52:e4:30:b6:
f4:73:aa:da:88:60:b0:4d:7a:b1:9d:06:dd:44:bb:
90:c0:c1:85:16:5d:42:b9:f6:26:52:dd:24:fb:da:
0a:25:75:7a:ca:56:1b:55:fd:24:83:bc:1c:27:98:
dd:43:69:6e:30:54:e1:78:da:6e:6f:12:19:5d:2c:
d6:20:27:01:f8:4b:64:5c:f3:e5:5c:60:c5:11:d3:
6e:28:ab:fe:d3:b0:f6:ca:94:e8:97:68:4f:61:67:
ab:1e:83:9a:48:0e:20:57:df:6e:de:26:d1:6f:10:
09:db:5d:6f:53:88:70:98:78:39:bb:4f:47:44:8b:
0b:3e:ed:e2:87:13:70:5e:df:79:0d:e6:69:52:ba:
08:6b:b5:cc:20:a3:c2:b1:83:a4:91:47:4a:8d:76:
b2:18:44:c2:fd:f8:cf:6a:c1:e1:98:60:a0:ee:fb:
47:74:ba:5d:97:64:a0:a1:7a:d3:b6:9a:46:0d:2e:
34:76:85:02:9c:ed:96:47:ec:6f:40:b9:ac:3f:33:
04:eb:0e:22:7e:1e:5b:64:49:39:0c:5e:37:58:2c:
2c:6d:7d:aa:6a:3c:31:1f:0f:46:e2:a1:f9:e2:14:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:37:D4:CA:AF:EA:F6:1A:6D:6C:D2:BB:8F:9F:6A:06:9A:09:46:7D
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a8:00:e7:5e:cc:e3:0b:2a:10:f8:76:3c:f9:06:c2:a7:6a:
8e:3e:0a:ff:ef:4c:f3:3b:21:80:8d:3b:2f:39:61:ee:42:5c:
58:df:9a:f4:c2:af:19:ec:bd:ca:d6:51:a9:4f:d2:91:d6:32:
d9:8e:fd:71:e0:98:75:cc:44:a0:ce:32:37:24:34:4a:ec:76:
83:ca:65:ce:ea:6a:24:19:22:a2:88:f3:a7:5e:77:a3:a8:d8:
43:14:ec:26:64:44:02:a0:ca:42:df:23:81:81:47:bc:87:74:
85:56:23:36:0c:f4:ed:8f:ee:b3:c5:d5:b3:f2:98:88:68:01:
98:a0:0a:a8:f4:05:d7:44:9b:12:93:43:cb:5b:57:c6:3e:4d:
3e:0d:c7:c0:de:d3:2d:6f:fb:50:a0:6b:75:e9:92:7d:20:8e:
c9:0a:2a:83:d9:89:f1:45:9d:90:2b:41:8f:f9:4c:28:b9:d3:
f6:e2:5b:f8:92:f0:22:47:fa:7b:f3:ad:dc:a0:16:71:41:56:
5e:16:4e:a4:6f:b3:b9:95:8a:78:3e:68:c7:28:70:63:34:12:
4d:33:5e:fa:e6:bc:fa:7c:20:b2:5b:a6:42:79:06:b4:92:cf:
6b:08:f6:7e:54:b5:78:6c:c0:9f:24:db:78:57:fc:0f:a6:7b:
00:d8:49:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEWc/rf5EjpkeEgSljz/rHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTY4ZDA2MmEwYzJlNjE2NmE4MjYyYzRkNzI5OGQ3NmRl
ZGQwNGYwHhcNMjYxMDA3MTMwMTAxWhcNMjYxMDA4MTMwMTAxWjAzMTEwLwYDVQQD
Eyg5NDM3ZDRjYWFmZWFmNjFhNmQ2Y2QyYmI4ZjlmNmEwNjlhMDk0NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3N1fBS1eiPuG6Ck5h9er3Jg6YaA
AJ4e5FLkMLb0c6raiGCwTXqxnQbdRLuQwMGFFl1CufYmUt0k+9oKJXV6ylYbVf0k
g7wcJ5jdQ2luMFTheNpubxIZXSzWICcB+EtkXPPlXGDFEdNuKKv+07D2ypTol2hP
YWerHoOaSA4gV99u3ibRbxAJ211vU4hwmHg5u09HRIsLPu3ihxNwXt95DeZpUroI
a7XMIKPCsYOkkUdKjXayGETC/fjPasHhmGCg7vtHdLpdl2SgoXrTtppGDS40doUC
nO2WR+xvQLmsPzME6w4ifh5bZEk5DF43WCwsbX2qajwxHw9G4qH54hRi/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ31Mqv6vYabWzSu4+fagaaCUZ9MB8GA1UdIwQY
MBaAFLEWjQYqDC5hZqgmLE1ymNdt7dBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMt
OTY1YTM0MTgwMTM2LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMtOTY1YTM0MTgwMTM2
LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6gA517M
4wsqEPh2PPkGwqdqjj4K/+9M8zshgI07Lzlh7kJcWN+a9MKvGey9ytZRqU/SkdYy
2Y79ceCYdcxEoM4yNyQ0Sux2g8plzupqJBkioojzp153o6jYQxTsJmREAqDKQt8j
gYFHvId0hVYjNgz07Y/us8XVs/KYiGgBmKAKqPQF10SbEpNDy1tXxj5NPg3HwN7T
LW/7UKBrdemSfSCOyQoqg9mJ8UWdkCtBj/lMKLnT9uJb+JLwIkf6e/Ot3KAWcUFW
XhZOpG+zuZWKeD5oxyhwYzQSTTNe+ua8+nwgslumQnkGtJLPawj2flS1eGzAnyTb
eFf8D6Z7ANhJBA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 17:24:28 2026 by rpki-client