Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: TiY70H3f9MGmpz2iHoDvFw4l1JpxvkZI8eY6OxXJJvQ=
Subject key identifier: 63:B8:13:9C:FE:26:3A:0C:7A:FA:D5:30:A7:F5:76:0C:E6:F8:28:3B
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 01A0C17B1884C66E2842DC7710E4DF9F4CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 19BD
Signing time: Mon 21 Sep 2026 01:01:04 +0000
Manifest this update: Mon 21 Sep 2026 01:01:04 +0000
Manifest next update: Tue 22 Sep 2026 01:01:04 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: tmKFoeaA4xWJcf+npSNn0tRCB9TqxdlXJZQhAvrAXls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:18:84:c6:6e:28:42:dc:77:10:e4:df:9f:4c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Sep 21 01:01:04 2026 GMT
Not After : Sep 22 01:01:04 2026 GMT
Subject: CN=63b8139cfe263a0c7afad530a7f5760ce6f8283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:32:b6:f3:bb:7d:37:34:98:ef:03:56:d0:
1d:27:db:11:22:19:d9:ee:e3:65:0e:b6:a2:77:35:
95:6d:8b:94:32:c8:4c:cf:15:b9:fa:86:5c:5e:ea:
a9:5f:bc:29:a1:ab:a2:b7:50:18:5f:c8:f4:49:55:
3d:73:63:65:b2:df:a3:80:0a:cc:34:d3:a5:8c:ab:
9b:5b:3b:69:d5:40:a2:19:dc:be:8d:18:68:6f:40:
a4:ad:b7:7b:a3:2d:5f:f2:6e:43:7c:57:0a:e2:d6:
73:43:29:e1:c9:3c:cd:ad:76:3a:2e:de:fc:bb:bc:
0d:6b:8b:f7:63:90:b2:56:c0:d6:47:c1:7a:24:45:
d0:43:86:d8:31:f9:7f:e6:bf:78:34:0a:92:6d:98:
d3:71:bd:4f:16:08:cc:9d:50:20:94:1c:ba:b3:e6:
84:0d:1f:9e:de:4f:b3:1d:75:e5:8c:c1:81:d5:17:
29:5f:bd:a4:8e:6f:86:ac:10:7f:28:d8:01:3b:9c:
63:f2:b2:fa:d7:f3:83:cd:13:8d:6b:11:ce:cf:c7:
8b:cb:7b:55:b0:49:3d:1b:19:e3:cd:f1:78:15:fb:
9e:a8:b8:a5:7a:6a:ab:7a:7b:1c:52:81:7b:33:06:
5b:f9:45:ad:37:52:40:ce:0a:92:8e:e9:61:db:db:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:13:9C:FE:26:3A:0C:7A:FA:D5:30:A7:F5:76:0C:E6:F8:28:3B
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:44:9b:42:74:6c:ba:85:e0:84:31:88:4d:5f:67:df:42:
4b:a8:a2:4a:06:da:43:01:08:e6:cc:4e:a6:2d:95:0b:b5:4f:
5d:24:f9:a1:e4:d3:68:51:23:f0:c2:ea:85:2d:2d:1d:51:0e:
0b:3d:55:1d:33:6e:5f:f0:b3:58:ae:40:b1:11:6e:f4:a8:14:
ab:dd:13:56:c4:b1:db:9f:c4:81:b9:66:3b:0c:b5:01:68:9d:
16:b5:b7:27:e4:35:d4:04:30:ef:b0:7d:3d:a3:c7:c5:22:58:
51:b8:6a:46:6d:a3:86:aa:81:46:89:43:9e:20:97:02:a4:d6:
55:f3:96:27:2c:a6:4b:5b:8e:af:b6:f6:de:eb:4b:d4:41:a4:
a4:14:69:25:c0:a7:85:ef:f8:ab:11:80:96:4f:ad:41:7b:99:
26:01:bd:fb:72:61:c4:5f:d4:0f:eb:50:2c:37:0e:91:4c:dc:
1b:b8:40:01:71:11:0c:ea:93:ab:4f:79:96:3d:79:37:93:e5:
f0:43:76:5f:c3:6d:40:63:96:c2:01:b2:a4:44:a5:48:a2:68:
a9:f6:cf:c3:ea:f2:41:3f:94:7a:1a:27:78:38:4a:0c:61:0c:
19:2d:87:cb:d6:e3:22:71:98:9e:9f:51:2f:f5:54:e3:85:e1:
e9:44:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:16:18 2026 by rpki-client