Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: ON6NZLlDKWUTTv3AJp7FRXcf4C2/9M4hAu6Vk0JpEY4=
Subject key identifier: 6E:B2:4A:85:DE:86:54:B8:6E:83:8B:C4:1A:FE:CA:46:9E:0E:85:AA
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019D9AAC3C83D7EF24C281D76322A40C378B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: RuvicPRWRfrOzh9J2ImET3JAZf0YbTh19IiEVgZ4tt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3c:83:d7:ef:24:c2:81:d7:63:22:a4:0c:37:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=6eb24a85de8654b86e838bc41afeca469e0e85aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:a7:6f:c6:2d:66:9a:e1:31:a4:97:a2:54:
26:20:83:ee:ce:36:e9:54:aa:86:ac:3a:9e:96:dc:
98:7e:02:ed:16:ab:40:7a:2e:f1:7c:ff:58:98:14:
44:e2:13:68:5f:54:aa:fd:6d:36:2f:6a:2b:c2:91:
7d:44:f5:79:86:ae:73:fb:d4:d1:6d:c8:72:2d:5e:
2e:3c:af:33:83:39:c1:6c:65:87:98:61:a1:fa:65:
0c:fb:be:f0:d9:c6:88:c2:c1:5f:7b:fa:c8:d2:1a:
80:8c:ee:58:a4:85:da:3e:8d:82:f9:e1:92:df:38:
9a:0e:00:02:88:f2:44:09:26:22:d1:63:56:ae:b3:
4f:02:33:20:9e:90:4c:61:49:21:2e:e3:60:e6:bb:
67:a5:1d:9e:80:43:22:06:3a:8e:d3:c6:4e:88:55:
e2:1f:e9:68:b4:9a:fd:02:63:ec:f4:cb:04:8f:f6:
fd:0e:ed:a3:70:9b:a5:92:44:ea:57:d1:c8:c2:7a:
01:63:16:59:36:21:c9:45:78:f1:22:d7:e3:e1:84:
f1:fc:19:16:f2:74:f9:78:f8:01:08:fa:6d:da:ad:
3d:0e:87:58:81:31:aa:d3:a7:ab:2d:87:7f:fc:19:
10:ba:8c:5b:5a:2b:2f:d3:6d:43:47:e5:f4:89:ef:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B2:4A:85:DE:86:54:B8:6E:83:8B:C4:1A:FE:CA:46:9E:0E:85:AA
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3f:0e:e0:9c:8e:6a:d4:18:66:21:c8:d8:32:33:e3:df:74:
3a:20:40:6c:6f:64:2a:75:22:4e:7b:4c:ce:45:3c:69:00:59:
e4:4d:05:a8:09:f7:81:c9:7a:f9:5d:e2:25:e8:c5:64:45:b8:
91:55:7f:6b:96:89:8d:75:d0:d2:36:73:2a:5c:4f:cd:88:fb:
bd:4b:56:29:a2:8f:a8:29:c4:42:ef:be:66:b3:ce:52:7b:98:
0e:37:fc:9e:ca:8b:9e:d3:a0:26:57:39:b9:81:1e:74:0c:1a:
5a:fb:98:d3:57:2e:c0:1d:a6:ab:bb:93:0c:b3:8d:4d:3e:da:
f3:7c:66:13:e6:3e:29:f5:54:a9:2e:19:a7:1b:ba:da:5a:b7:
87:59:0c:00:7b:ef:4f:49:2c:1f:fd:f1:b0:de:3a:82:6b:08:
a3:4e:27:28:9c:6a:b0:15:0c:e9:2b:46:75:cd:6e:bd:ba:2d:
31:d6:3a:95:5b:b5:77:fa:1f:eb:97:38:74:3a:5e:2b:38:ac:
af:fb:a6:be:2c:89:4c:dd:ea:1d:16:7d:36:58:2f:2b:2d:f5:
ad:e5:55:33:98:ea:99:ae:f7:bc:6e:0d:50:a6:26:7f:78:36:
bc:76:ac:db:d1:75:a3:84:f4:93:79:56:36:76:56:06:9a:12:
d8:87:5a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arDyD1+8kwoHXYyKkDDeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4
YTU4NWUwHhcNMjYwNDE3MDkwMTEyWhcNMjYwNDE4MDkwMTEyWjAzMTEwLwYDVQQD
Eyg2ZWIyNGE4NWRlODY1NGI4NmU4MzhiYzQxYWZlY2E0NjllMGU4NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Oinb8YtZprhMaSXolQmIIPuzjbp
VKqGrDqeltyYfgLtFqtAei7xfP9YmBRE4hNoX1Sq/W02L2orwpF9RPV5hq5z+9TR
bchyLV4uPK8zgznBbGWHmGGh+mUM+77w2caIwsFfe/rI0hqAjO5YpIXaPo2C+eGS
3ziaDgACiPJECSYi0WNWrrNPAjMgnpBMYUkhLuNg5rtnpR2egEMiBjqO08ZOiFXi
H+lotJr9AmPs9MsEj/b9Du2jcJulkkTqV9HIwnoBYxZZNiHJRXjxItfj4YTx/BkW
8nT5ePgBCPpt2q09DodYgTGq06erLYd//BkQuoxbWisv021DR+X0ie/R1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6ySoXehlS4boOLxBr+ykaeDoWqMB8GA1UdIwQY
MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt
MTdmYjRmZmI5ZmFkLzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk
LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj8O4JyO
atQYZiHI2DIz4990OiBAbG9kKnUiTntMzkU8aQBZ5E0FqAn3gcl6+V3iJejFZEW4
kVV/a5aJjXXQ0jZzKlxPzYj7vUtWKaKPqCnEQu++ZrPOUnuYDjf8nsqLntOgJlc5
uYEedAwaWvuY01cuwB2mq7uTDLONTT7a83xmE+Y+KfVUqS4Zpxu62lq3h1kMAHvv
T0ksH/3xsN46gmsIo04nKJxqsBUM6StGdc1uvbotMdY6lVu1d/of65c4dDpeKzis
r/umviyJTN3qHRZ9NlgvKy31reVVM5jqma73vG4NUKYmf3g2vHas29F1o4T0k3lW
NnZWBpoS2Ida2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:56 2026 by rpki-client