Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: 5brUZzddJzOAFifqX6HECYWrJk5iBXoXDloAparEydg=
Subject key identifier: 2B:BA:A8:96:EB:32:92:E9:48:C3:B9:EB:D7:7D:ED:81:A2:A6:09:75
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 019CACB58D7C0E59EFC1B3ABD0478119B497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:01:45 +0000
Manifest this update: Mon 02 Mar 2026 04:01:45 +0000
Manifest next update: Tue 03 Mar 2026 04:01:45 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: 04Asd7/toLN+oVvKjkU0+XmSf3QyB6XoBcF5ZAn7dBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:8d:7c:0e:59:ef:c1:b3:ab:d0:47:81:19:b4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Mar 2 04:01:45 2026 GMT
Not After : Mar 3 04:01:45 2026 GMT
Subject: CN=2bbaa896eb3292e948c3b9ebd77ded81a2a60975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:5f:c2:a8:3e:be:fc:a4:3a:c6:be:ec:4f:
76:6c:ec:6e:06:d9:cb:3e:c8:65:c6:45:bc:1c:c8:
ef:7e:3e:e1:66:37:e9:2f:0b:9e:26:e4:d0:14:ab:
cc:29:35:6c:67:95:5e:ee:ab:a1:d2:8e:93:3f:e0:
03:d0:e5:46:06:79:12:22:61:d5:33:b8:45:6c:36:
d2:c3:5f:1a:ba:80:8d:28:55:f1:19:62:4b:d2:35:
ce:e8:ae:46:39:5c:a2:47:6f:be:84:1e:cb:66:85:
b2:73:e0:21:58:89:35:56:97:a2:e0:0a:5d:6d:3a:
dc:5d:32:bc:10:28:b3:b5:ce:52:42:ab:f7:ef:19:
9a:47:ec:fd:5d:97:e9:50:e3:8e:52:1e:56:4d:59:
ee:84:3f:24:9a:52:45:6f:0e:b8:71:72:a3:cd:b0:
9a:a2:8c:5a:d6:27:26:fc:8c:c1:68:5f:bd:99:71:
45:72:a5:19:51:58:1c:fc:2a:7a:6f:82:39:47:66:
b8:b3:14:16:00:c9:a9:31:da:e5:fa:5d:8b:cb:87:
8a:06:a9:84:13:49:7a:a7:96:51:40:e7:40:4b:6e:
3b:91:97:03:f7:27:9b:43:3e:53:b9:37:ca:4f:c5:
32:ac:d8:a1:19:be:24:70:00:90:ef:2a:56:7a:70:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:A8:96:EB:32:92:E9:48:C3:B9:EB:D7:7D:ED:81:A2:A6:09:75
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0f:2d:e0:70:b9:26:00:ba:9a:45:2e:17:9c:20:4a:40:0b:
68:1e:bc:f0:ae:df:c7:ee:54:90:66:f1:dc:70:85:b5:5f:e8:
a6:fa:81:b1:c3:d4:c0:a5:3c:b8:90:e4:62:9f:c7:8c:0a:41:
51:26:11:e5:bf:90:44:60:0f:2c:a3:c8:7b:10:16:80:9d:3b:
40:cc:28:dd:e9:9e:e9:0f:34:a4:3d:d5:ba:99:ed:08:79:29:
f9:38:b3:30:84:70:52:8e:85:b8:d9:84:56:68:2b:11:22:fc:
53:45:e7:4c:23:00:0e:9f:14:1b:09:e8:c8:75:f5:dc:ac:ed:
3a:ac:77:9e:42:dd:ba:19:4f:ab:49:ab:3c:36:cb:90:1d:a4:
11:c0:0e:d3:1d:af:d3:d1:2e:93:da:c0:cd:6f:8e:d2:40:6a:
d9:33:a3:16:fc:97:e8:84:b8:8f:09:d4:46:b5:b0:61:99:a6:
8b:88:6e:9a:28:bc:65:39:7f:ec:ce:bb:d6:08:87:54:a1:df:
78:74:96:7e:d5:13:d7:64:5c:17:30:1b:58:48:60:4e:26:80:
cb:f1:52:2e:33:60:20:19:33:be:60:49:fe:2d:8c:e7:c7:02:
ab:ab:d2:6e:de:84:03:1f:02:65:c2:db:71:dd:47:e1:a1:0f:
df:8e:a6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystY18DlnvwbOr0EeBGbSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTY4ZDA2MmEwYzJlNjE2NmE4MjYyYzRkNzI5OGQ3NmRl
ZGQwNGYwHhcNMjYwMzAyMDQwMTQ1WhcNMjYwMzAzMDQwMTQ1WjAzMTEwLwYDVQQD
EygyYmJhYTg5NmViMzI5MmU5NDhjM2I5ZWJkNzdkZWQ4MWEyYTYwOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg5fwqg+vvykOsa+7E92bOxuBtnL
PshlxkW8HMjvfj7hZjfpLwueJuTQFKvMKTVsZ5Ve7quh0o6TP+AD0OVGBnkSImHV
M7hFbDbSw18auoCNKFXxGWJL0jXO6K5GOVyiR2++hB7LZoWyc+AhWIk1Vpei4Apd
bTrcXTK8ECiztc5SQqv37xmaR+z9XZfpUOOOUh5WTVnuhD8kmlJFbw64cXKjzbCa
ooxa1icm/IzBaF+9mXFFcqUZUVgc/Cp6b4I5R2a4sxQWAMmpMdrl+l2Ly4eKBqmE
E0l6p5ZRQOdAS247kZcD9yebQz5TuTfKT8UyrNihGb4kcACQ7ypWenBGyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu6qJbrMpLpSMO569d97YGipgl1MB8GA1UdIwQY
MBaAFLEWjQYqDC5hZqgmLE1ymNdt7dBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMt
OTY1YTM0MTgwMTM2LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMtOTY1YTM0MTgwMTM2
LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ8t4HC5
JgC6mkUuF5wgSkALaB688K7fx+5UkGbx3HCFtV/opvqBscPUwKU8uJDkYp/HjApB
USYR5b+QRGAPLKPIexAWgJ07QMwo3eme6Q80pD3VupntCHkp+TizMIRwUo6FuNmE
VmgrESL8U0XnTCMADp8UGwnoyHX13KztOqx3nkLduhlPq0mrPDbLkB2kEcAO0x2v
09Euk9rAzW+O0kBq2TOjFvyX6IS4jwnURrWwYZmmi4humii8ZTl/7M671giHVKHf
eHSWftUT12RcFzAbWEhgTiaAy/FSLjNgIBkzvmBJ/i2M58cCq6vSbt6EAx8CZcLb
cd1H4aEP346mRA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:40 2026 by rpki-client