Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: mNkwQTTw635Y7nQ4x2RtlUHx52pDM7JWd282fLyRxPE=
Subject key identifier: D0:5F:69:C8:30:9C:7E:99:F2:07:D4:40:D4:9E:13:8E:55:A1:B4:25
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019F90C7BD48D9EF0B03265167128DCC5B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:36 +0000
Manifest this update: Thu 23 Jul 2026 21:00:36 +0000
Manifest next update: Fri 24 Jul 2026 21:00:36 +0000
Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: 5b3xhTha53/snfCZfuAgwmNS0hmmDK+Wn6FJ5C7NYrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:bd:48:d9:ef:0b:03:26:51:67:12:8d:cc:5b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jul 23 21:00:36 2026 GMT
Not After : Jul 24 21:00:36 2026 GMT
Subject: CN=d05f69c8309c7e99f207d440d49e138e55a1b425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:21:a5:b2:12:00:c6:c5:59:a2:02:48:8b:
e7:d1:34:2b:86:d0:47:6b:4a:a5:e3:7a:c1:dc:8a:
c3:0c:36:8d:4d:16:fa:35:a1:43:96:69:57:eb:33:
e0:64:9e:f7:8e:af:0c:f5:69:68:dc:46:36:41:5a:
e1:a8:8a:a9:c3:61:d1:1e:6f:f6:3a:32:0f:42:ad:
08:ce:e4:23:4b:f2:03:11:b1:a3:f8:c5:df:38:6f:
dd:6d:d4:4d:38:27:cb:87:1f:7c:95:30:0a:a3:16:
69:7d:9e:b5:9d:4b:ea:38:c9:b1:a4:34:79:b1:45:
28:65:0a:81:2b:22:a1:d7:1d:08:a6:7f:66:8e:a7:
e7:fc:ba:f3:f7:8b:21:f2:94:07:39:64:9b:07:77:
81:0a:53:8a:e0:da:38:3f:49:0e:51:a2:8d:25:d7:
d0:9c:ab:47:b2:ce:6f:ad:c8:91:db:4e:fa:4b:cd:
fe:fc:92:86:01:8e:5f:0a:95:a2:0f:3e:86:9b:d5:
e3:7c:83:cb:c0:76:4e:f4:ab:6c:d4:f5:20:9e:51:
e7:7f:a6:79:87:2f:f9:97:cc:83:c1:95:ac:f6:10:
85:c2:1c:59:77:85:17:b8:65:bc:7b:00:fe:90:56:
0b:4b:40:a7:41:96:bd:e6:37:91:32:77:43:50:b0:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5F:69:C8:30:9C:7E:99:F2:07:D4:40:D4:9E:13:8E:55:A1:B4:25
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ed:29:81:25:b7:5f:95:c6:4a:a7:e8:d2:58:b4:96:57:cd:
95:9c:80:6d:bd:17:60:83:3b:bb:6c:6c:1a:11:5c:49:bb:ea:
7d:d5:ba:0a:03:ed:18:ec:ce:41:95:79:51:00:00:5a:41:18:
53:ad:62:85:8d:b3:57:16:29:84:ac:a8:c5:21:96:57:b7:1a:
bc:a9:1a:39:47:f9:e6:26:57:6e:c4:5f:68:85:cf:f6:41:eb:
ae:ec:cf:0e:77:ed:c7:67:96:e9:36:a7:c4:81:f6:1e:62:f7:
17:2e:8f:5b:5a:e3:50:0c:25:d1:d8:af:92:8b:65:92:b9:0a:
0b:08:9a:23:7e:58:37:6e:b8:83:89:71:06:46:65:5b:01:88:
bf:22:34:ae:e9:dd:3f:ea:3b:58:f6:5f:45:e2:5e:80:e6:5b:
74:09:ec:12:b8:8a:f3:77:c1:8a:98:7a:40:0e:df:89:63:80:
55:69:83:b2:2f:e7:90:e2:db:21:86:ac:84:0d:db:d0:5b:6d:
e6:72:9c:a7:de:be:74:cb:5e:7a:e2:8b:17:95:57:d0:b8:aa:
fd:03:74:d5:d9:33:16:80:ec:ea:b0:fd:b7:98:fa:21:6d:c5:
e4:d6:f1:87:e1:e1:ef:ce:d3:cc:da:b0:f7:1f:c1:65:c7:40:
09:44:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:58 2026 by rpki-client