Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: 5nipdHCAgNAaZaYftdyzuKi0YjbTRQnUojO2zZ1wgn0=
Subject key identifier: 2B:B0:C0:D2:A2:A0:54:F8:8C:98:52:EB:AE:2E:05:9D:32:46:CC:C9
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01A0C933EA2FC982BE0032A57BE73DDA3741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 13:00:17 +0000
Manifest this update: Tue 22 Sep 2026 13:00:17 +0000
Manifest next update: Wed 23 Sep 2026 13:00:17 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: GodpMDlNQAC6e804hzF51FuMu0D/6kKfEQ4IymMmiuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:ea:2f:c9:82:be:00:32:a5:7b:e7:3d:da:37:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Sep 22 13:00:17 2026 GMT
Not After : Sep 23 13:00:17 2026 GMT
Subject: CN=2bb0c0d2a2a054f88c9852ebae2e059d3246ccc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:6b:50:ad:9d:e1:d2:cf:e0:a3:b9:61:e3:
10:04:b5:b7:12:d3:ea:11:36:36:6b:b6:9b:1c:83:
55:f8:be:d3:a2:83:7b:96:82:e6:50:4b:df:8b:1e:
6d:e5:b7:c2:cd:c2:ce:c9:50:b7:f1:f7:a6:81:0c:
02:3e:19:d2:6f:16:7e:fc:b4:a0:2d:ed:60:91:62:
c6:1e:6b:ae:83:42:93:09:37:f9:02:76:80:51:57:
39:81:14:3e:12:85:de:a7:4e:16:fc:55:d0:95:53:
b9:27:b4:b9:1c:07:f5:21:70:16:4c:e6:df:5d:51:
ba:e5:9a:c1:94:f6:97:66:2d:bf:0a:93:82:d0:6a:
fe:0b:5d:bc:8c:83:6a:d8:77:38:07:2f:28:14:ff:
87:03:6a:b4:b5:25:4b:9f:1b:3e:65:4f:ff:43:3a:
e6:04:0c:51:af:fe:73:80:b2:fd:a5:2b:d8:59:01:
b6:76:45:91:06:34:ff:09:7d:80:f6:ab:50:4e:a9:
d0:a0:06:9e:7c:92:d3:65:f6:3b:cf:4c:5d:3f:a8:
c1:f5:fb:d9:c3:09:a6:6f:db:15:f1:b6:33:9b:d4:
cf:ee:42:91:86:28:4a:01:d6:76:39:4f:48:c2:7e:
27:33:45:e9:61:da:2a:70:4e:5a:e4:9c:63:5b:f2:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B0:C0:D2:A2:A0:54:F8:8C:98:52:EB:AE:2E:05:9D:32:46:CC:C9
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ee:04:98:b4:92:d2:78:30:87:4e:52:15:03:15:23:63:cd:
89:37:f7:95:d5:0e:78:a2:5c:f0:b4:a0:6b:1a:af:b3:1b:ef:
8b:a7:1b:20:a6:01:58:26:33:0c:2e:93:86:9b:32:ef:75:3b:
43:3f:bc:35:01:4f:62:eb:8b:69:95:6f:37:fa:62:75:7d:29:
e4:a9:c9:af:77:42:2a:5a:ab:9b:37:f5:ab:8b:e9:e5:70:20:
79:82:02:df:40:53:69:e1:ca:b0:4a:3b:c2:d6:9f:82:5c:cf:
a2:b0:67:c1:58:00:e0:39:5d:6c:3b:69:32:91:f3:2d:00:9b:
11:7a:9c:46:5d:a7:ed:b3:16:5b:a8:02:6e:1d:7d:07:a7:68:
9d:a8:be:a6:81:9c:72:ce:6a:92:c1:42:cd:34:b1:81:8e:15:
4c:40:01:0f:9a:d9:36:d3:0d:f2:56:79:0b:64:c5:a6:f2:4f:
8b:49:44:9a:9f:c7:09:50:1c:d5:dc:3c:d6:0c:e7:b3:0f:e2:
03:32:63:17:60:99:bf:65:16:b7:98:19:57:a0:4b:f8:a7:a5:
41:55:4d:39:98:83:06:74:44:f9:81:07:57:b3:32:34:48:82:
03:b4:c1:65:4f:c4:3a:e7:0b:43:1f:47:96:88:0c:df:3d:74:
3c:15:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:32:34 2026 by rpki-client