Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: o2MYiJn2+Lk1C2NR6Cjrsw1X67ECc3vCDGMi4sQx6T8=
Subject key identifier: 42:47:E3:B8:3B:AB:93:14:BE:14:5D:80:AE:D8:57:2A:41:0F:1C:7D
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019EC0DACBD02EA1594B1F5C5674F35768FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 12:00:24 +0000
Manifest this update: Sat 13 Jun 2026 12:00:24 +0000
Manifest next update: Sun 14 Jun 2026 12:00:24 +0000
Files and hashes: 1: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (hash: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc=)
2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: yh1c8Fwmibln5v8pjQEhn42h2KAogEXmDQkwRojK2bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:cb:d0:2e:a1:59:4b:1f:5c:56:74:f3:57:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Jun 13 12:00:24 2026 GMT
Not After : Jun 14 12:00:24 2026 GMT
Subject: CN=4247e3b83bab9314be145d80aed8572a410f1c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:43:0c:df:82:f7:5b:11:9f:46:2f:d4:24:
48:f1:21:7f:63:b8:f4:dd:eb:2c:d5:6b:44:6a:09:
d7:8f:a8:aa:15:4e:6b:da:ad:a2:41:c3:89:87:38:
d3:5b:0f:50:4c:fe:32:07:23:3d:e3:7e:ca:e4:d8:
42:a8:4c:5c:e1:6a:b4:68:aa:a9:b1:d5:c5:61:d4:
ff:7e:89:46:4b:a9:86:3a:0f:5d:6a:1b:d6:ad:b9:
27:e5:f3:a0:4a:bd:2c:a5:2f:5f:25:ec:d3:87:d6:
40:c6:b4:84:7a:dd:32:64:37:7d:cd:fd:20:47:43:
fa:bd:93:3b:4a:e9:4a:09:2c:b9:83:0c:85:f3:e5:
9b:0a:00:ce:d3:65:15:91:3e:67:15:9c:58:88:ee:
7e:ea:32:37:a5:84:c7:4e:34:c7:cf:9a:d0:df:6f:
67:90:e9:5e:19:d8:39:04:aa:fa:72:54:a7:0a:f7:
50:bc:20:29:38:ca:56:c7:26:39:3c:71:8a:36:19:
c0:11:bd:43:b9:9a:41:bc:bb:5c:d0:78:06:06:ad:
27:cf:0a:66:ae:52:03:41:56:22:31:ad:38:63:26:
58:90:65:9b:24:90:d8:4a:ba:86:91:fd:6e:a7:d1:
70:d2:fc:b2:ec:d0:f1:d0:f3:78:66:d7:cd:12:4a:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:E3:B8:3B:AB:93:14:BE:14:5D:80:AE:D8:57:2A:41:0F:1C:7D
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7b:95:97:04:74:06:43:67:90:a3:28:52:bc:13:45:3d:82:
f8:99:d4:6f:bc:f6:23:6c:f9:5a:fe:eb:48:4e:6d:ab:fa:3d:
64:ff:4c:fc:49:45:bd:62:c8:34:ff:e7:93:2a:8f:74:90:cc:
ee:2e:70:75:dc:f2:b3:72:95:76:40:85:8a:f3:a4:33:98:52:
02:61:9a:38:71:25:c6:18:b2:fb:8a:01:2a:d7:47:37:2a:c4:
9d:e5:80:2d:c5:5f:e6:23:65:23:a2:51:93:71:47:10:7e:29:
78:ef:aa:c2:70:1e:f3:8e:38:e9:50:2e:0b:34:c6:1c:52:b3:
a1:26:f9:7b:d1:bc:0b:53:75:ef:ab:19:4b:99:e6:51:26:18:
cd:98:5b:5b:ae:64:51:83:f1:29:e5:08:97:f6:0b:05:4a:f3:
0c:a9:02:5d:f2:c5:74:46:c1:2e:18:9f:69:77:05:8d:91:44:
69:1d:40:17:7d:80:ba:33:ff:50:71:2f:44:06:12:df:ea:03:
50:cc:e1:ee:06:a4:a6:86:c0:11:64:80:77:2a:df:ab:53:da:
ae:d9:d6:aa:74:f1:c4:f2:29:64:bd:9e:d0:8e:96:a8:0f:de:
6c:19:41:56:09:f1:4c:f6:b9:2c:6d:4c:ff:00:cc:62:52:54:
6b:a3:3d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2svQLqFZSx9cVnTzV2j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4
NWFmYzIwHhcNMjYwNjEzMTIwMDI0WhcNMjYwNjE0MTIwMDI0WjAzMTEwLwYDVQQD
Eyg0MjQ3ZTNiODNiYWI5MzE0YmUxNDVkODBhZWQ4NTcyYTQxMGYxYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2hDDN+C91sRn0Yv1CRI8SF/Y7j0
3ess1WtEagnXj6iqFU5r2q2iQcOJhzjTWw9QTP4yByM9437K5NhCqExc4Wq0aKqp
sdXFYdT/folGS6mGOg9dahvWrbkn5fOgSr0spS9fJezTh9ZAxrSEet0yZDd9zf0g
R0P6vZM7SulKCSy5gwyF8+WbCgDO02UVkT5nFZxYiO5+6jI3pYTHTjTHz5rQ329n
kOleGdg5BKr6clSnCvdQvCApOMpWxyY5PHGKNhnAEb1DuZpBvLtc0HgGBq0nzwpm
rlIDQVYiMa04YyZYkGWbJJDYSrqGkf1up9Fw0vyy7NDx0PN4ZtfNEkpDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJH47g7q5MUvhRdgK7YVypBDxx9MB8GA1UdIwQY
MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt
NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl
LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3uVlwR0
BkNnkKMoUrwTRT2C+JnUb7z2I2z5Wv7rSE5tq/o9ZP9M/ElFvWLINP/nkyqPdJDM
7i5wddzys3KVdkCFivOkM5hSAmGaOHElxhiy+4oBKtdHNyrEneWALcVf5iNlI6JR
k3FHEH4peO+qwnAe84446VAuCzTGHFKzoSb5e9G8C1N176sZS5nmUSYYzZhbW65k
UYPxKeUIl/YLBUrzDKkCXfLFdEbBLhifaXcFjZFEaR1AF32AujP/UHEvRAYS3+oD
UMzh7gakpobAEWSAdyrfq1PartnWqnTxxPIpZL2e0I6WqA/ebBlBVgnxTPa5LG1M
/wDMYlJUa6M9yQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:22 2026 by rpki-client