Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: f4xcU823nKOORWwpyCMYp1TDGxxRenX7aDr+McK8w2s=
Subject key identifier: BC:A3:98:95:AE:56:3C:E5:8B:DE:FD:85:75:12:41:87:89:9D:26:B1
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 019D9A3DEE2E0257B473DF21A0A06635CD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: z+3zJdGTEeiGjMTlHBjdbxlWGX7lqbFx2gj4QIyMa3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ee:2e:02:57:b4:73:df:21:a0:a0:66:35:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=bca39895ae563ce58bdefd8575124187899d26b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:78:c2:58:d1:99:c5:8e:0a:a9:d7:8f:cd:
0d:89:f3:7e:a6:ad:f4:9c:11:cf:44:07:a3:b7:27:
91:5e:6d:35:6d:e8:df:06:55:c8:15:7e:7a:d0:51:
0f:76:48:21:c4:d5:18:3e:bf:ee:6a:af:89:03:0e:
9f:06:ff:0f:a0:ac:c6:8b:5f:d3:aa:40:eb:c8:3f:
38:66:91:c0:89:b3:e5:47:8b:04:d1:32:51:9b:9c:
87:78:a4:12:2b:ae:d6:61:6b:f0:a3:25:93:83:aa:
43:28:74:cd:fa:4e:b1:e0:55:02:4a:d7:28:91:53:
f8:df:c7:56:50:36:7b:f9:76:18:59:17:db:63:d4:
d1:c8:c9:5a:f3:5a:d0:a5:33:05:9a:af:b6:53:26:
5d:1b:a1:8d:06:c6:70:a6:7e:1a:70:2a:dd:4d:a7:
80:3d:fc:ea:8a:e4:26:91:04:fc:21:f0:6f:42:26:
65:69:83:ea:e3:8e:c7:a0:fa:0f:13:97:12:3c:36:
7b:0a:60:31:6b:53:6a:eb:0c:d2:ed:4c:cd:da:4a:
c1:eb:37:ae:a1:62:ae:30:06:e3:a8:07:53:b0:9a:
f7:52:b8:e9:75:61:20:1f:bc:9b:8f:76:1e:89:75:
54:e4:26:7a:96:08:ed:ec:10:92:d9:e9:11:5d:e8:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:98:95:AE:56:3C:E5:8B:DE:FD:85:75:12:41:87:89:9D:26:B1
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:44:82:11:1a:b2:b1:72:85:7f:f7:3c:3e:a7:5d:26:18:ce:
8d:af:dd:b0:b2:50:60:56:91:1d:5a:ec:0a:78:50:09:71:76:
f9:6e:32:d8:0e:c2:b0:2a:09:71:4b:60:ae:47:2a:10:43:61:
31:80:af:f9:16:a0:6b:fc:b3:10:d6:a1:f4:26:90:96:b6:c8:
bf:4c:d8:9d:1a:c6:b6:78:5a:4a:6e:fa:2f:d8:86:46:b9:d7:
68:14:72:ca:72:25:87:5e:b3:1f:74:b1:e2:eb:24:68:a0:97:
1d:d9:7e:63:48:a3:d8:12:8f:eb:c5:ef:56:1f:0c:59:57:6b:
c1:25:c8:98:fe:d8:2d:80:d4:5f:8a:c8:bd:bc:b1:14:f5:80:
9e:9a:38:f2:dd:85:6a:3c:73:49:77:fa:b8:bc:e4:09:50:f1:
75:ed:0d:3a:60:fb:2f:76:26:3d:3a:a4:0a:d6:5a:e5:2d:b0:
21:9e:d8:6f:76:71:d6:b3:89:6b:32:97:0e:48:cb:5c:1f:f2:
b6:23:40:55:ca:c9:d5:e9:0d:38:73:39:70:80:c6:8a:63:d6:
13:a9:c9:3d:37:d8:e9:a2:95:49:92:a6:51:a8:b1:e3:53:19:
17:d1:c8:98:eb:e7:83:89:f9:c6:96:d9:71:2c:05:ec:8c:f5:
3f:db:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:55 2026 by rpki-client