Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: eZH7hFnWFoblN3ZX3977GuyVVAyfr9K/pLl4rQzGCNo=
Subject key identifier: 28:25:AD:51:95:AC:11:A7:DB:70:B1:08:5A:46:6E:6B:FF:18:E0:62
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019D26CD330C4C1B0A3DDE03B85534B56707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:15 +0000
Manifest this update: Wed 25 Mar 2026 21:01:15 +0000
Manifest next update: Thu 26 Mar 2026 21:01:15 +0000
Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: ldXI0u3xFvQZzHLQ8zvMGv14dqz72OYx6fmK/HmBgq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:33:0c:4c:1b:0a:3d:de:03:b8:55:34:b5:67:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Mar 25 21:01:15 2026 GMT
Not After : Mar 26 21:01:15 2026 GMT
Subject: CN=2825ad5195ac11a7db70b1085a466e6bff18e062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:43:15:d8:25:70:af:4b:ed:82:7c:8c:9d:
b5:e5:b1:15:08:93:a8:4b:26:cb:76:1b:1e:4a:6d:
5d:6d:81:23:d3:78:f7:ba:5a:74:9a:df:fa:27:45:
e7:69:1f:86:52:1f:4c:b3:80:7d:b8:f2:eb:3c:b0:
db:ff:4d:b1:93:5d:ea:a7:ad:d4:a0:23:68:12:c5:
ee:87:07:04:d2:68:f0:26:b5:d1:44:77:60:85:4d:
89:de:c4:6d:0c:49:93:4b:89:4c:a5:d3:bc:25:2c:
7b:f7:b8:59:9a:29:0d:aa:73:d1:3e:6c:56:96:9f:
38:16:b0:75:dc:6e:bf:5c:66:23:e1:5a:b3:c4:2f:
fa:4c:41:10:e6:40:23:7e:20:30:af:d8:e2:06:ce:
03:ef:f8:b3:77:f0:95:4d:de:75:90:9a:75:75:95:
d0:86:7e:15:c9:ec:fd:a3:71:ce:82:06:cc:f8:a3:
6a:49:ac:74:88:b8:e4:cb:02:cc:66:cb:1b:90:ff:
51:a9:6b:3c:6b:87:57:29:23:7d:a7:96:02:3d:cc:
73:9e:60:6b:10:cf:69:67:3b:aa:a8:34:c4:b3:03:
cf:c3:06:60:4d:31:47:90:7e:8d:47:07:89:78:33:
8d:bb:bc:83:c1:9d:9a:fb:6b:13:7d:c5:71:63:78:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:AD:51:95:AC:11:A7:DB:70:B1:08:5A:46:6E:6B:FF:18:E0:62
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:05:ff:27:ff:46:eb:cd:96:58:8f:95:07:20:66:26:00:73:
8b:f2:9c:bf:3e:d6:4a:82:47:9a:72:3c:7d:f2:ec:8b:bc:a1:
81:fc:85:b4:c2:27:94:72:d2:10:bd:66:d3:bf:b6:50:f9:68:
a6:10:d7:97:d9:cf:3e:16:54:a2:12:a6:f4:23:b6:20:bf:b8:
1f:d1:8c:e1:b0:7b:65:ab:72:bc:59:18:cd:71:82:72:c8:e7:
43:7f:a8:0e:56:79:9f:88:08:d0:01:22:de:ce:30:a4:cd:f2:
b7:76:78:ec:2d:9d:4e:ce:8b:40:6a:6a:6a:36:3d:48:84:9f:
d2:99:2d:21:9f:90:c1:e1:75:f6:96:4c:b8:f4:81:08:b7:74:
6c:4d:28:2f:0f:ff:c9:20:77:42:60:da:79:b6:3b:8b:57:b8:
31:23:fb:71:21:72:34:da:06:eb:34:99:c7:fa:b4:c9:87:37:
1b:f7:f2:62:3b:67:58:40:6a:b7:58:6c:fa:5b:f5:53:36:43:
63:09:21:34:53:00:5f:12:7e:48:9c:d8:e7:67:88:31:5a:ff:
f4:50:f2:88:c7:62:36:06:b6:88:9c:1c:71:c0:87:54:2f:91:
31:32:6b:f9:1a:e8:9a:22:e5:a7:a9:21:f4:84:34:70:0f:b9:
67:c0:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:24 2026 by rpki-client