Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: B0xsguRah81dDzCcxvhYU6ut5Skbzn0agn0ps6KfrSU=
Subject key identifier: CB:59:37:38:B0:82:F4:94:2A:95:AD:03:95:05:D3:EC:ED:40:48:2D
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01A0C5571AFB5767F14BB1A4241C49E98314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 19:00:15 +0000
Manifest this update: Mon 21 Sep 2026 19:00:15 +0000
Manifest next update: Tue 22 Sep 2026 19:00:15 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: 3CypNrOJsShzNkBrFuz+zP7t/rSifKTM1m6mw966iX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:1a:fb:57:67:f1:4b:b1:a4:24:1c:49:e9:83:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Sep 21 19:00:15 2026 GMT
Not After : Sep 22 19:00:15 2026 GMT
Subject: CN=cb593738b082f4942a95ad039505d3eced40482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:8d:c5:00:c5:8c:b6:05:cd:f0:2b:a8:00:
dd:a1:dc:af:46:f6:cb:b0:13:da:80:3c:0e:da:76:
07:61:3d:bc:b3:28:e0:80:2a:ac:7d:85:52:37:66:
88:3f:20:f2:f0:f9:b1:49:73:c5:c1:b7:e4:a5:73:
da:43:1e:5e:67:1a:79:49:05:7f:b8:29:11:0c:d7:
07:f5:94:8e:19:13:54:87:97:4e:c9:7a:b3:00:b4:
70:a8:f0:4f:73:88:89:87:8b:35:13:07:6d:cd:e2:
4b:db:2e:a8:7a:d7:76:b1:e0:72:d0:27:e3:52:d9:
f7:8d:34:5f:99:02:bf:42:d8:db:4e:0c:95:a4:3b:
1e:7b:1a:0c:d1:b9:88:f3:a7:03:57:6f:22:16:f2:
8c:99:ec:eb:07:c4:85:c1:2a:c2:ec:20:3e:55:17:
da:35:7a:a7:9e:3d:3c:9f:09:b5:27:68:d0:25:37:
92:cb:ce:a8:ee:bd:20:75:47:de:54:bc:09:3c:e5:
8b:50:0c:9e:96:26:1f:63:84:d8:d2:a0:9d:1e:ce:
19:c7:5f:3f:6c:83:bb:4a:5a:52:00:4b:60:22:e9:
87:bd:04:6c:d9:bf:de:d7:cb:5d:ae:9c:39:7c:dd:
b9:6c:ba:bb:ff:ad:71:ae:b8:a1:f7:da:8a:a6:93:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:37:38:B0:82:F4:94:2A:95:AD:03:95:05:D3:EC:ED:40:48:2D
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:74:58:9c:aa:0b:3a:80:aa:88:45:38:4f:40:3e:47:01:10:
36:9d:0d:e8:4d:f9:f1:d1:77:6a:ce:be:6b:40:6c:5e:bc:f3:
bd:6b:b8:8c:9a:72:aa:17:fb:7f:ae:54:5c:c0:ba:26:1e:7f:
bf:1b:d8:26:b0:34:59:f4:9b:d8:88:86:2f:bd:47:1d:a2:36:
fa:e8:28:81:80:c1:fb:c3:d8:5d:1f:dc:e3:f4:f1:5f:46:52:
a3:51:ec:0a:52:a2:f9:56:a6:86:8c:f5:6c:01:51:67:dd:fc:
67:59:77:d0:43:f0:cf:e0:d6:1c:1a:fa:0b:3f:36:bf:62:76:
dc:e0:ef:0b:0c:02:54:1d:50:d6:7e:94:82:98:bf:7d:82:70:
63:fc:81:e9:c5:81:91:52:78:e4:b9:88:50:42:15:b0:60:54:
aa:69:aa:53:97:ab:74:d0:80:43:82:e6:08:c5:16:b6:32:76:
35:de:e6:1a:3a:32:91:53:22:af:b9:0b:d8:30:9a:54:3c:20:
2d:1b:05:8d:0b:48:70:ca:71:b8:a6:90:bb:40:b5:d6:04:4b:
a7:78:43:48:c3:42:94:74:85:88:c7:4c:40:46:44:df:5d:9a:
8f:19:23:a9:4f:8c:02:7f:dc:1f:ab:8c:0a:d3:9c:e5:71:0b:
c2:bb:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:45:08 2026 by rpki-client