Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: YDtwBDM4KWzBm3B+4otiE1Id/BWDb8AtI2WfdfhytTo=
Subject key identifier: BC:14:0E:09:1A:16:CD:52:F9:CF:ED:10:0D:33:86:D0:1B:90:13:CA
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019D25F0FE882C8DC2A68CF059D6E2A91276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 10F4
Signing time: Wed 25 Mar 2026 17:00:43 +0000
Manifest this update: Wed 25 Mar 2026 17:00:43 +0000
Manifest next update: Thu 26 Mar 2026 17:00:43 +0000
Files and hashes: 1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: bzEIXQF7c5mJ48wv9rAAs5GbJvDnTDaLHbs/OcMqhaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fe:88:2c:8d:c2:a6:8c:f0:59:d6:e2:a9:12:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Mar 25 17:00:43 2026 GMT
Not After : Mar 26 17:00:43 2026 GMT
Subject: CN=bc140e091a16cd52f9cfed100d3386d01b9013ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:c7:6d:4c:84:19:8d:bc:98:fa:6f:c6:99:
e1:bf:19:ef:84:3f:9d:28:9d:bc:2a:3b:59:b8:79:
00:e0:14:bf:d2:52:2b:9a:42:6e:1d:3d:78:f6:22:
c0:ee:f7:a6:0f:b0:dd:e4:ab:34:f5:58:5d:c9:14:
13:2d:81:fd:95:62:6e:3d:80:90:14:5b:ef:41:83:
4d:15:d6:e2:5e:da:f4:0c:a1:0b:31:d9:6f:ed:3d:
58:d7:6f:b7:61:12:99:5f:cc:c5:70:44:a1:b3:58:
df:99:7b:bf:94:76:71:d4:6a:ed:4d:39:2f:59:bc:
aa:2c:23:66:ae:e1:6a:35:62:e2:ac:84:26:72:d2:
0b:0f:f6:81:6e:51:41:ee:1f:01:29:0f:93:91:1b:
1d:b5:52:ad:a8:7c:ac:91:d1:70:21:82:7b:28:19:
91:df:56:42:c5:4d:1b:04:f0:2b:ae:4b:11:fa:43:
c1:2c:40:ca:c8:00:57:03:2f:91:05:cb:b6:8d:09:
1c:98:83:db:54:b6:9d:cb:30:12:95:ef:c2:7a:1f:
77:84:19:27:cd:74:9c:82:ef:37:4d:53:85:75:24:
39:65:b8:ad:7f:a7:c0:75:3c:9f:61:28:87:3e:4d:
e9:4f:43:bb:33:bc:0e:a9:3a:59:21:73:27:1c:ca:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:0E:09:1A:16:CD:52:F9:CF:ED:10:0D:33:86:D0:1B:90:13:CA
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6a:fc:69:eb:1b:5a:47:d9:6e:da:7e:25:98:90:fe:f6:af:
3a:ce:35:62:bf:36:5b:4b:27:a2:fc:1a:03:eb:77:0a:c3:74:
2e:c2:3e:a2:ee:45:7a:fa:91:28:ff:2a:c0:56:6e:36:f1:ec:
d0:64:0b:6b:16:42:df:18:99:0e:f9:34:a9:30:26:78:bd:4a:
67:5c:5b:6d:3b:74:62:4d:95:5f:87:0f:98:23:44:38:82:6a:
0c:d9:85:58:eb:0f:b8:18:cf:1a:ca:23:74:29:33:08:a8:b9:
4d:81:a1:20:a9:7d:b7:1d:ce:27:1c:f1:0d:ea:fe:65:57:73:
a0:b3:9b:02:f6:e9:38:30:83:89:37:11:84:96:76:26:35:24:
c2:99:77:15:ee:92:d4:06:5a:1f:2c:43:c0:1c:36:f4:ce:ea:
31:7b:d7:e8:df:1c:93:7d:2a:5d:6e:69:68:c0:ce:81:28:62:
a8:e7:a3:3a:10:cd:60:05:8c:74:83:ef:57:eb:fe:8f:01:a5:
bb:ef:49:df:cf:7c:86:17:7b:07:4f:b2:41:9a:4d:2b:60:56:
60:10:80:8c:b6:76:30:0c:98:c6:1a:67:54:84:46:fa:91:40:
11:06:17:48:d7:35:91:d9:c5:cc:32:26:a2:da:87:ae:a1:f6:
25:17:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:12 2026 by rpki-client