Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File: sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier: Slqn4nR1KajyW6Z1yvM1QvuNbCd7uWO7TAmQR6h0V3c=
Subject key identifier: 26:14:0C:BA:55:56:6C:15:A3:A4:9F:AB:15:A8:71:FD:B5:2D:EE:FA
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer: /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial: 01A0D94D4D6317F62B37097C184379407D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number: 0288
Signing time: Fri 25 Sep 2026 16:01:56 +0000
Manifest this update: Fri 25 Sep 2026 16:01:56 +0000
Manifest next update: Sat 26 Sep 2026 16:01:56 +0000
Files and hashes: 1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: GOYM9GQuRxqKLaszZiN7WTI0cQMSfkW9b8d0EHVOylo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:4d:63:17:f6:2b:37:09:7c:18:43:79:40:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Validity
Not Before: Sep 25 16:01:56 2026 GMT
Not After : Sep 26 16:01:56 2026 GMT
Subject: CN=26140cba55566c15a3a49fab15a871fdb52deefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:f3:4b:6c:1f:b7:d3:bd:d0:3a:51:5d:37:
8d:78:f2:92:43:21:2b:ef:09:b3:b9:f8:e3:47:d4:
0d:48:b1:b2:ab:79:b4:fc:ec:40:f4:ff:b1:ef:e4:
a5:56:a6:8e:96:64:24:27:69:a2:56:5b:33:ed:81:
d6:df:45:ab:89:c0:70:54:5b:51:18:65:d6:b2:0a:
36:51:de:06:61:41:67:3a:d4:1c:3f:46:d4:39:23:
4b:01:6f:5e:cf:d4:e3:f5:e4:d2:a2:92:f1:fd:fa:
75:27:33:a8:66:d4:c0:36:15:5a:99:22:30:4b:07:
73:aa:c6:37:50:15:f4:f3:54:af:3a:5d:49:b2:ac:
03:1f:3f:16:94:f1:f1:7e:bf:39:f6:7c:15:3b:45:
23:6b:a2:24:90:a3:ed:b2:b7:cf:b1:1d:fe:d1:21:
71:af:ae:78:6d:d2:22:7b:e1:e5:6a:5f:1d:15:67:
35:13:54:1d:35:7b:ab:e8:72:56:0c:08:b6:45:5b:
bd:05:17:46:22:ed:d2:12:fd:19:8b:e3:33:94:9d:
13:e6:cf:60:7a:cb:85:cc:53:b9:aa:b2:f0:ec:c2:
cc:fb:ab:37:b0:51:10:4d:bc:87:8c:68:79:7e:6d:
4d:c3:79:00:62:a4:12:2e:39:00:e4:ca:18:82:e6:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:0C:BA:55:56:6C:15:A3:A4:9F:AB:15:A8:71:FD:B5:2D:EE:FA
X509v3 Authority Key Identifier:
keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:0b:36:de:e5:ae:3b:d3:e7:e1:8e:ad:e9:89:60:62:fd:
94:cb:d1:70:d8:a4:51:5f:23:bf:5a:23:1e:48:22:8c:bd:28:
46:b2:d7:fe:7b:b1:3d:4a:36:44:bb:3d:f3:8c:84:99:1a:83:
08:da:7e:5e:e5:f1:16:27:21:40:85:93:00:87:bd:6a:a2:fe:
ae:d2:ac:b3:e8:61:96:71:f4:44:47:9b:17:bb:ab:c3:f3:72:
85:2b:4e:df:44:e2:52:a7:f0:69:6f:35:c3:98:d0:a4:48:4f:
31:cb:5e:4e:aa:02:8d:61:c7:92:30:11:17:ac:5e:ab:ff:10:
f1:73:2a:0c:7e:bf:8d:7c:b4:b6:48:6e:58:94:f0:5b:d1:9e:
7c:ed:e1:db:11:73:48:6f:cb:0f:b8:c4:83:8c:9a:05:9e:60:
bb:60:14:11:b5:e8:49:89:52:ab:2a:1f:f9:1c:22:8f:7a:cd:
cb:43:0a:ca:d5:1e:1f:97:69:dc:1f:a7:70:7f:0c:c8:1f:a3:
43:eb:46:4f:64:db:14:2f:83:7f:a6:53:56:40:62:a6:66:88:
ab:f7:b2:9c:c9:9e:b4:be:62:60:34:99:c7:a2:d1:dd:6f:82:
83:ba:aa:dc:f6:20:5c:4b:2e:d3:9a:e2:b1:9c:3c:02:aa:39:
77:83:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:22:47 2026 by rpki-client