Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: MZYp4P7TkjQhTS60y8rPavtwH/9soPetKznV2uORAR8=
Subject key identifier: 74:DF:30:12:1D:C6:79:87:4A:98:92:89:B7:9F:33:18:F3:E1:55:CC
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019CAC468EDEC3DA98E04362B526C8CE302F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 10B5
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: 9UJi5hHXLZga3r5L8a60Qzumf+Pe3KxyH+P/Af2cKTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8e:de:c3:da:98:e0:43:62:b5:26:c8:ce:30:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=74df30121dc679874a989289b79f3318f3e155cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:0b:71:08:43:fe:97:c7:5c:b3:46:1b:ae:
77:62:44:b2:8a:5b:0b:54:26:cc:26:f0:5c:c6:de:
02:27:47:60:fb:d3:1d:69:8b:da:69:73:b3:ef:7a:
1b:32:54:27:d4:15:ed:b4:bb:e8:34:2a:29:e8:68:
bd:36:57:a2:06:31:e2:1f:7e:0d:45:54:22:18:a5:
4a:07:a1:b1:cc:7d:53:26:d0:4c:e3:02:8c:a9:ed:
50:10:ba:07:a5:ba:ad:6d:3e:04:f5:53:17:a9:cf:
dc:f0:62:53:00:e5:6f:27:5c:3c:59:c1:e5:82:98:
5d:fe:86:22:39:90:56:fa:90:04:05:1c:9b:69:7b:
fd:d7:ba:fd:e1:ca:4a:05:c2:10:e3:b1:a8:2c:b1:
28:1d:ff:04:40:7d:75:e4:df:af:7a:1c:2c:ce:d6:
7e:8d:f0:fa:84:05:03:02:30:8f:3e:38:b8:2e:19:
a3:11:9d:be:2c:c8:91:a8:5a:99:b9:98:f7:d8:0e:
26:01:96:4d:a7:72:a1:5b:b4:8a:99:36:25:ea:25:
7c:03:d9:af:41:26:0e:a5:ef:b7:ae:9f:fc:21:cd:
c8:79:ce:33:f8:e5:67:d7:c8:89:ae:d2:b5:56:3f:
4f:52:97:3b:f4:99:cd:1f:7f:a1:48:69:a3:bf:7f:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DF:30:12:1D:C6:79:87:4A:98:92:89:B7:9F:33:18:F3:E1:55:CC
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:c2:a3:25:58:cc:a6:7a:a6:30:93:52:64:ff:b6:77:6f:
7f:a9:94:64:28:0e:78:b4:2d:ca:fe:de:12:37:d0:f8:ef:9c:
de:2f:19:e2:1f:5f:6b:72:99:ed:54:cf:1e:4f:e2:0a:c6:69:
89:b3:2b:33:d1:4c:98:39:39:ac:6a:87:8e:1d:34:8e:10:3a:
4c:ec:9c:79:b4:f6:d1:63:4d:3c:c3:67:ea:9f:c1:ba:20:6b:
81:fb:f0:8e:36:cf:79:81:11:81:04:e0:93:ef:c5:fc:bd:28:
9b:0c:ea:96:d1:da:80:e3:27:e4:63:a2:8b:e3:53:98:f2:14:
3a:7b:a3:fb:ca:41:94:68:40:c6:90:27:c1:00:3c:30:e8:15:
8a:48:6a:68:ef:e6:3e:34:b4:d5:21:d2:47:1c:aa:5e:d8:4a:
96:1f:94:6d:73:84:5d:96:76:b4:13:b9:78:29:c1:5a:88:d6:
93:ad:a2:48:29:e2:1d:b6:16:0b:bf:c6:77:f4:d3:50:15:b2:
13:4f:02:c8:c1:a3:14:e4:a0:fa:45:77:d6:2a:36:8d:e8:9e:
8a:9a:15:39:a0:f5:23:1d:41:6d:81:e2:93:89:42:d6:50:a1:
d8:c2:94:61:1f:b0:b7:54:ae:2a:0b:30:40:3e:9f:69:34:2d:
4e:f0:85:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRo7ew9qY4ENitSbIzjAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjYwMzAyMDIwMDMxWhcNMjYwMzAzMDIwMDMxWjAzMTEwLwYDVQQD
Eyg3NGRmMzAxMjFkYzY3OTg3NGE5ODkyODliNzlmMzMxOGYzZTE1NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S0LcQhD/pfHXLNGG653YkSyilsL
VCbMJvBcxt4CJ0dg+9MdaYvaaXOz73obMlQn1BXttLvoNCop6Gi9NleiBjHiH34N
RVQiGKVKB6GxzH1TJtBM4wKMqe1QELoHpbqtbT4E9VMXqc/c8GJTAOVvJ1w8WcHl
gphd/oYiOZBW+pAEBRybaXv917r94cpKBcIQ47GoLLEoHf8EQH115N+vehwsztZ+
jfD6hAUDAjCPPji4LhmjEZ2+LMiRqFqZuZj32A4mAZZNp3KhW7SKmTYl6iV8A9mv
QSYOpe+3rp/8Ic3Iec4z+OVn18iJrtK1Vj9PUpc79JnNH3+hSGmjv39vIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTfMBIdxnmHSpiSibefMxjz4VXMMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqHCoyVY
zKZ6pjCTUmT/tndvf6mUZCgOeLQtyv7eEjfQ+O+c3i8Z4h9fa3KZ7VTPHk/iCsZp
ibMrM9FMmDk5rGqHjh00jhA6TOycebT20WNNPMNn6p/BuiBrgfvwjjbPeYERgQTg
k+/F/L0omwzqltHagOMn5GOii+NTmPIUOnuj+8pBlGhAxpAnwQA8MOgVikhqaO/m
PjS01SHSRxyqXthKlh+UbXOEXZZ2tBO5eCnBWojWk62iSCniHbYWC7/Gd/TTUBWy
E08CyMGjFOSg+kV31io2jeieipoVOaD1Ix1BbYHik4lC1lCh2MKUYR+wt1SuKgsw
QD6faTQtTvCFPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:45 2026 by rpki-client