Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File: sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier: nmCMY20aRiMr9Uf3T9TzFWP4dcI5PjRd71YsrCF0gUE=
Subject key identifier: D6:E0:4F:11:B9:2F:0D:4E:57:12:FC:0A:DD:1A:F1:82:EF:C5:E2:B3
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer: /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial: 019F92EDE8F74D8203C9A54798170DF7AD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number: 01DF
Signing time: Fri 24 Jul 2026 07:01:32 +0000
Manifest this update: Fri 24 Jul 2026 07:01:32 +0000
Manifest next update: Sat 25 Jul 2026 07:01:32 +0000
Files and hashes: 1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: BLrlv483KKxhfheWtG4p4EhDUQnu5PdYbJ0NKr8lQyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e8:f7:4d:82:03:c9:a5:47:98:17:0d:f7:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Validity
Not Before: Jul 24 07:01:32 2026 GMT
Not After : Jul 25 07:01:32 2026 GMT
Subject: CN=d6e04f11b92f0d4e5712fc0add1af182efc5e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:50:02:e8:4d:ad:5b:73:26:ba:e2:24:a8:
10:b9:83:ad:6a:2b:c5:10:71:5d:c9:a3:87:ac:e2:
9d:bd:16:fc:9b:29:02:a7:45:7b:ad:88:58:c2:36:
34:ea:30:05:33:06:15:62:11:80:39:83:e6:2c:98:
0e:f9:12:73:4d:07:b1:94:8d:e4:de:f1:db:73:7a:
b2:53:05:65:0e:13:e7:af:31:c6:d8:63:c0:1d:cf:
77:8b:ab:a8:8f:a1:31:34:c5:cb:05:ea:c8:66:ab:
1f:aa:1d:8a:32:11:2d:11:ad:f7:bc:af:14:ec:56:
51:49:6e:03:cd:39:12:b2:73:87:df:8d:45:6b:e4:
8d:9f:2a:9c:0c:dd:35:d0:57:f2:3f:dc:0c:0a:83:
fe:f2:9f:e7:ab:cf:67:9a:b5:9e:51:34:97:ae:d5:
6b:7f:63:5d:4b:e6:31:04:11:18:6c:1c:24:b2:72:
b5:a3:5b:5f:db:76:20:23:57:f7:fd:5d:aa:a8:d8:
cc:34:e4:08:c2:6b:8d:a2:7d:46:00:59:81:04:3d:
a2:04:00:53:7c:c1:a3:e1:a0:bd:d4:34:a2:ac:ae:
47:b1:a0:25:a7:71:b9:08:d0:f0:04:20:9b:9d:7e:
4b:9f:2a:e9:f1:82:ae:b0:ac:c0:43:b4:21:a8:4f:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:4F:11:B9:2F:0D:4E:57:12:FC:0A:DD:1A:F1:82:EF:C5:E2:B3
X509v3 Authority Key Identifier:
keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7a:71:f1:8c:8a:61:b3:c5:5d:89:9b:2c:c0:2b:08:40:32:
df:9e:aa:f8:da:78:fe:d3:c9:cb:08:e1:28:2f:49:64:5c:d6:
02:7a:af:fe:9c:e8:42:0e:34:f2:03:cb:e4:7a:12:7e:0f:46:
f3:37:48:f1:d9:ec:94:5b:a6:de:20:0e:f8:ea:d5:45:00:c4:
f3:07:5f:47:71:9e:78:38:fd:e7:22:1d:2a:cf:ff:3b:9e:b9:
b3:6e:13:a2:00:0f:b1:a6:12:61:40:ba:3b:e2:97:41:28:3b:
4a:a9:fe:fd:1f:b3:54:ff:58:40:f0:9a:96:38:70:11:94:4f:
20:81:65:35:92:01:63:95:5c:89:84:7b:7c:28:e4:89:cf:03:
4e:83:19:f1:0d:6e:eb:7b:d6:09:53:da:8c:5d:d0:2c:99:c1:
da:d8:a7:22:96:6e:8d:5d:0c:4e:b4:c6:76:19:df:a8:e8:de:
51:00:34:ab:ae:a1:84:15:70:7e:f8:b7:5c:75:b0:33:ce:36:
76:dd:63:42:0d:76:fd:43:1f:5d:3f:8f:8e:d2:2c:5b:e6:75:
65:c4:c2:c6:63:18:ac:d2:03:dc:db:9e:cc:83:b3:43:1b:cb:
93:48:0e:f5:38:b3:95:92:90:4b:ae:92:1d:52:07:7c:3f:08:
03:4f:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:33 2026 by rpki-client