Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: Z+gMVKn2Nzk3WO8DGfnSy3f8uV1SDa1SC90CRneH+Wc=
Subject key identifier: 60:32:5F:7B:4C:FC:94:77:D8:FE:B7:F2:D8:52:BF:06:D5:4C:0C:D5
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019FAAF62FD0EAFEBE6BB8DA13077FD387E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 1242
Signing time: Tue 28 Jul 2026 23:01:28 +0000
Manifest this update: Tue 28 Jul 2026 23:01:28 +0000
Manifest next update: Wed 29 Jul 2026 23:01:28 +0000
Files and hashes: 1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: 4SRtnXREumxkV+i+r4grTnergyAY2/zGcRJTyqb/jRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2f:d0:ea:fe:be:6b:b8:da:13:07:7f:d3:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Jul 28 23:01:28 2026 GMT
Not After : Jul 29 23:01:28 2026 GMT
Subject: CN=60325f7b4cfc9477d8feb7f2d852bf06d54c0cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:d8:9a:17:c8:66:7c:96:c1:1e:8f:4f:da:
02:40:c4:ba:d0:e0:17:38:2a:c4:02:4e:55:ef:32:
f1:56:d6:c3:62:c8:82:c7:ee:fd:ae:cb:ad:18:38:
1a:c1:87:ff:36:93:9b:83:1e:63:01:2c:9e:52:11:
b2:20:1b:09:f2:bc:ce:a7:25:19:38:8d:0e:e4:b7:
5e:aa:c6:67:34:fd:9a:a4:31:4b:ae:4c:ae:68:67:
da:83:97:4b:86:a4:3c:d6:7b:fa:e5:f4:73:b7:0d:
c4:bf:1e:6d:c1:46:8a:4e:b8:b8:af:ee:d2:53:34:
06:50:5c:61:76:4c:e6:bd:84:68:dd:ae:f0:c8:48:
4a:6d:b2:30:ef:60:21:0e:92:0d:b5:76:01:fb:2c:
03:eb:29:62:74:0f:c3:68:90:11:5f:d7:53:15:4c:
9b:bf:be:30:a9:d9:34:7f:63:7b:ed:a3:81:70:40:
62:0c:2e:8b:23:ff:89:c7:76:a5:77:51:0a:62:40:
0d:46:3a:df:6a:48:d9:fe:7b:2d:60:57:0e:63:5d:
f7:37:5c:de:67:5b:1e:4e:6e:87:34:db:b2:91:8d:
3e:83:5c:7c:cc:80:c5:e0:3c:05:ce:58:31:91:99:
ee:ef:d7:a3:7a:90:d7:d6:40:31:2c:87:8a:1d:81:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:32:5F:7B:4C:FC:94:77:D8:FE:B7:F2:D8:52:BF:06:D5:4C:0C:D5
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1e:7d:79:c3:a9:e1:18:7c:54:8c:08:c2:1a:de:43:a8:cd:
4b:30:51:38:6d:92:04:2c:5e:9b:55:5a:a4:e3:7f:bf:bd:b1:
92:a1:4b:57:fe:5e:38:14:32:90:7a:b0:94:53:ba:9a:b6:d7:
8a:29:16:9c:4a:bf:bc:e4:37:c6:60:b2:c6:66:08:2b:a4:51:
18:ec:76:db:dd:f3:e7:34:58:58:d3:34:6b:ae:3c:87:e1:b1:
a9:9e:9d:d4:48:4f:59:57:fc:ad:ea:c5:b1:e5:b8:9f:59:ec:
65:d4:3f:9a:98:fe:26:e8:9f:19:30:3e:16:4a:23:e3:c3:4f:
58:b6:53:64:49:dc:3b:92:85:84:c5:1b:fd:a1:34:82:7c:f7:
aa:9e:97:e1:9f:3f:62:a5:ab:eb:00:de:45:d7:54:9f:72:6a:
36:1f:c0:0f:23:98:8e:63:c4:96:88:2c:0b:af:84:cb:12:a0:
73:a2:bf:94:8e:39:c6:7e:8a:be:22:35:17:f0:7e:8e:de:50:
e4:35:da:71:73:a8:32:ee:ba:96:39:33:fe:49:42:34:a0:08:
a2:7a:3a:7c:74:ce:10:a2:82:73:ec:e6:cb:0a:a7:ff:80:18:
7b:a0:07:cb:ea:ea:9b:5f:0b:d1:f5:9f:ac:be:9f:77:d5:40:
df:fb:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:36 2026 by rpki-client