Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: D8n5DA0Xm2kmTqwxkhJXuKzqpcsRor242ETwV6sMvg8=
Subject key identifier: 75:DE:02:65:CF:C4:C7:9D:37:91:B3:96:FA:B6:F2:98:19:2B:BE:CE
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019D99629D2BEFF8E34BD7AB8149FD1F025D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 03:01:09 +0000
Manifest this update: Fri 17 Apr 2026 03:01:09 +0000
Manifest next update: Sat 18 Apr 2026 03:01:09 +0000
Files and hashes: 1: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (hash: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc=)
2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: BdihwDHs7NSZSECYDeDkDnnnzUFTSfOCPUtJETyIgpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9d:2b:ef:f8:e3:4b:d7:ab:81:49:fd:1f:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Apr 17 03:01:09 2026 GMT
Not After : Apr 18 03:01:09 2026 GMT
Subject: CN=75de0265cfc4c79d3791b396fab6f298192bbece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:a6:f1:71:e2:56:a2:a4:58:66:98:d1:2e:
b9:85:f0:68:2c:8c:e1:3d:43:17:31:1a:77:33:3f:
78:7e:a7:95:11:53:ec:94:3e:fc:56:3b:a0:21:1c:
4e:94:34:82:a8:2e:ff:77:99:c7:17:3b:fe:d9:d3:
13:01:db:d5:c7:24:b8:0a:4b:ae:a7:e6:a7:86:49:
51:1c:ee:9c:8d:39:a5:45:da:f2:77:f1:4c:11:31:
86:26:a2:1e:6b:6d:0f:e1:4f:92:12:7e:e6:bb:ac:
8e:b3:fb:8e:41:79:c5:e6:89:2a:ec:06:15:4a:16:
02:9c:27:62:21:f2:7f:02:8c:6a:ad:b9:4f:8a:0e:
5e:99:3c:27:7b:d9:62:e7:c1:23:fa:ac:5e:54:94:
51:6e:8a:84:59:e3:72:8d:a6:fa:9b:8c:5a:c3:05:
80:d6:f8:64:94:ab:d9:bf:fe:75:0c:11:d3:10:67:
79:83:e8:8f:c8:a3:d7:97:10:b8:5e:a8:c7:c4:9a:
16:88:f2:70:9e:03:d9:ab:a5:10:59:b8:8d:52:38:
bf:9c:5c:b3:97:49:eb:b2:26:e3:d1:21:ce:6e:7c:
6f:7e:42:00:eb:a7:13:fd:cb:3a:1d:18:15:62:8d:
71:78:a5:d1:08:2b:e9:42:25:c2:f3:0c:50:a1:3d:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:02:65:CF:C4:C7:9D:37:91:B3:96:FA:B6:F2:98:19:2B:BE:CE
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:55:30:a1:d3:c0:66:b0:31:c5:87:0b:8c:e5:1d:82:b6:4d:
db:8e:e4:cf:19:cb:b1:b7:90:bb:b3:5c:d9:4e:ff:88:e7:aa:
60:a1:52:51:32:e4:b1:f7:bc:a1:a6:29:5b:20:f5:cf:b5:2b:
f5:18:7e:ae:20:ff:e7:0d:31:dd:2e:4e:38:10:59:50:4d:ca:
ba:60:52:48:d8:11:2c:04:d0:ca:c9:bf:9e:52:6c:53:5c:41:
73:b5:45:18:9b:ec:e1:51:45:4a:2d:1d:08:08:37:25:00:53:
6a:4b:01:6c:5a:90:38:9a:53:c3:fd:67:78:c1:7f:2d:a1:12:
14:97:22:30:91:18:99:e1:e4:e9:22:e0:8a:ab:40:40:ab:a0:
a9:cc:82:db:17:a8:d6:f2:8a:6e:65:b9:5e:d3:90:9d:29:2d:
e5:94:f0:db:4e:15:4d:75:12:fb:0e:a9:07:e1:20:27:21:9f:
30:f2:eb:0c:b6:9c:8f:23:88:1f:63:1b:1f:f7:5c:aa:6c:ab:
63:53:4a:d4:35:b8:55:58:bc:6f:37:cb:30:aa:51:64:99:9b:
53:ca:b8:0e:2f:72:d5:b8:77:e4:f0:e4:51:c4:ee:29:40:62:
86:fa:9d:75:f6:f3:13:1b:ec:46:3d:e6:b2:04:de:5d:93:1c:
5b:b7:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:55 2026 by rpki-client