Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File: sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier: pQEFkWAPtAnY51Li9KuvmpFFKV03rzTXgIYQFfvUqEs=
Subject key identifier: D0:96:1A:33:2D:71:C7:6F:A1:64:29:AB:D6:54:7A:64:D8:7A:C0:1A
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer: /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial: 01A105B7E402933D02D7ABCE4E6571476CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number: 029F
Signing time: Sun 04 Oct 2026 07:01:39 +0000
Manifest this update: Sun 04 Oct 2026 07:01:39 +0000
Manifest next update: Mon 05 Oct 2026 07:01:39 +0000
Files and hashes: 1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: Md+FUwAk4NNaRFchJHeNdJAbbl2thcrj/iysQOJ1PMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:e4:02:93:3d:02:d7:ab:ce:4e:65:71:47:6c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Validity
Not Before: Oct 4 07:01:39 2026 GMT
Not After : Oct 5 07:01:39 2026 GMT
Subject: CN=d0961a332d71c76fa16429abd6547a64d87ac01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:86:f3:1d:03:1a:8b:ef:22:c8:9a:56:c5:
a9:c5:71:6b:9a:0d:17:25:14:28:d7:cb:1d:0a:18:
8b:9f:56:22:b3:2b:5b:ff:d5:f5:c8:c2:e6:95:73:
08:b5:9e:a2:c1:38:89:39:7e:35:5e:31:d5:4a:1b:
69:95:ab:30:1a:3b:8a:e4:8c:2a:61:c4:d3:0d:b5:
13:44:e0:00:ea:e8:f1:9e:fe:e7:f0:c6:62:f6:dd:
cc:e2:7c:e6:68:70:19:bb:43:0e:5b:35:65:2c:50:
88:f1:dc:83:c8:f1:cd:b0:9a:a1:dc:f6:b2:7c:1b:
19:3d:45:9d:20:59:38:79:50:ec:09:bc:f1:80:24:
72:ff:9d:e9:77:e4:6c:08:4b:56:8b:1f:27:84:9e:
53:71:d9:05:91:b6:bc:83:65:2a:e5:98:28:a2:b2:
59:a4:bf:fe:95:1f:38:82:88:b6:4d:14:63:26:e6:
6f:77:6c:5c:2d:7d:e9:8c:19:4c:6a:27:6e:c4:19:
ac:03:fc:6b:1e:02:f6:b0:de:76:d3:f9:c6:3e:d6:
6a:d1:59:41:2c:4f:b2:9c:01:72:21:bc:3a:82:7a:
17:63:74:ee:88:ff:c2:cd:0a:5a:2c:eb:06:ad:94:
76:c2:e2:47:d5:c2:da:46:fd:dd:02:70:e2:21:c8:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:96:1A:33:2D:71:C7:6F:A1:64:29:AB:D6:54:7A:64:D8:7A:C0:1A
X509v3 Authority Key Identifier:
keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:c9:e6:94:7c:69:19:99:7f:0a:56:c3:57:ae:79:91:01:
72:60:05:7f:4f:92:b1:8c:bf:8f:47:67:ea:f4:27:82:e2:30:
53:90:b6:c8:30:a8:02:bb:be:a3:de:df:6e:94:62:44:fa:49:
3b:3b:23:6c:f4:13:5a:4f:7e:8a:c3:0a:96:c7:5e:a7:75:53:
41:ba:c3:09:b7:f6:5e:27:37:dd:75:4b:38:e0:cb:52:69:e7:
5c:33:86:57:b1:d5:0c:37:9f:67:2b:b4:60:23:c3:eb:4d:c1:
34:22:ca:9c:02:34:6b:ca:cb:26:c6:4b:df:f5:38:77:bf:81:
64:51:b4:97:9b:86:1c:3d:06:35:62:df:5a:6f:73:b9:0e:08:
c5:d2:d7:89:f9:7e:9d:09:02:d4:9f:14:4e:46:22:d5:3c:16:
18:17:f8:fd:c7:45:fb:d7:a5:3a:1d:c8:90:eb:ce:26:72:5d:
80:2a:a6:7b:05:ee:e4:6a:d3:e4:ad:3e:2f:76:32:2f:21:a9:
5a:f4:26:e0:51:90:2e:11:9b:03:d6:84:3f:03:cc:a8:01:39:
e7:f0:9e:df:6f:00:82:31:b1:f4:2c:39:80:2f:d1:5d:8c:28:
27:e8:c5:ed:54:1a:5f:c3:ae:6a:5c:1e:5c:ae:96:17:c5:32:
f2:13:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:06:28 2026 by rpki-client