Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: 7rshEtVXmv0lqCN4Or4sg9ZRIIBqElWxI+lYXfAtBbs=
Subject key identifier: 9E:23:6A:2C:B5:E9:F8:AA:9C:91:9E:1B:B6:7A:B7:B4:59:EF:B5:99
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 01A0F41F0BE0B6C85F8003B240F92290371E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 1A7F
Signing time: Wed 30 Sep 2026 21:01:10 +0000
Manifest this update: Wed 30 Sep 2026 21:01:10 +0000
Manifest next update: Thu 01 Oct 2026 21:01:10 +0000
Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: p+OummLoZh6+nL9pm6sK/i1W5njl7Dj2gU5DfJgbcOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:1f:0b:e0:b6:c8:5f:80:03:b2:40:f9:22:90:37:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Sep 30 21:01:10 2026 GMT
Not After : Oct 1 21:01:10 2026 GMT
Subject: CN=9e236a2cb5e9f8aa9c919e1bb67ab7b459efb599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:2f:e2:ba:7d:52:01:bd:5b:55:54:90:48:
71:58:50:5d:9f:a8:3a:c3:78:a2:0e:21:cd:1a:35:
c8:db:ce:e4:46:69:4d:7d:45:d3:8c:27:42:13:8e:
ed:61:ff:2a:e0:8d:e0:87:54:9d:5d:6e:76:ba:33:
8a:a3:d6:21:b8:f8:4b:6c:a2:96:0c:91:fa:32:58:
b1:9c:ac:e4:21:9d:4f:53:16:5a:35:d3:46:3d:dc:
fa:3f:3c:52:f7:fe:9f:15:21:4d:79:73:88:ef:a9:
e0:1c:a6:b2:f5:90:84:dc:26:1f:e1:97:7c:35:90:
9f:3a:52:f2:80:d2:ff:7d:42:c3:2e:59:e8:d5:75:
dc:ef:2d:0e:99:0f:66:df:3b:8a:fb:b9:fe:93:8f:
dd:51:43:aa:a7:4c:2c:40:7a:eb:c5:be:6c:33:a0:
20:fb:39:8a:56:a6:ee:66:36:4f:36:4b:a1:68:f0:
fd:8c:b1:5c:03:bb:d0:b7:8b:95:d1:67:27:59:32:
94:a4:4e:e0:c3:35:7c:ba:97:ae:4c:04:34:8c:c1:
9b:40:82:bc:cf:86:34:66:c8:67:a6:00:7f:bf:22:
65:84:a4:e2:74:9e:6c:45:d1:be:86:d5:14:bc:c6:
c8:c4:cf:7c:cd:30:d7:b5:3d:bf:d1:ad:18:30:b2:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:6A:2C:B5:E9:F8:AA:9C:91:9E:1B:B6:7A:B7:B4:59:EF:B5:99
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1b:77:1a:6c:d1:93:ce:a6:46:c8:bf:34:23:a4:e8:78:b8:
a6:43:6c:a6:3b:3b:ce:57:14:45:d1:e5:ab:3a:94:1d:e0:da:
c1:8d:10:7e:b3:80:53:5a:ce:01:20:49:85:47:71:ec:15:89:
ae:20:2a:ab:8c:cb:7e:b0:2f:ef:81:33:2b:3c:3c:fa:a8:51:
4c:14:ec:46:a9:62:57:fe:9b:3e:8b:82:7f:4e:4e:d7:b5:81:
9c:ee:ce:7b:56:82:2d:3b:f5:bf:18:6f:97:85:43:87:b8:e6:
ee:74:67:17:45:c1:c4:eb:95:73:27:cc:77:ac:23:b8:d3:69:
70:f5:18:eb:78:82:34:59:13:53:65:fc:d1:60:93:a4:bb:9c:
12:3a:a1:39:8e:f8:79:f3:bd:6a:ca:d7:76:86:d3:25:5e:18:
39:0d:a8:2b:34:78:6a:98:af:fb:14:8e:96:bd:e2:80:94:f4:
e1:bb:f6:80:30:72:36:e9:a3:8d:59:c0:01:64:a2:35:71:7d:
0a:c7:a2:4f:64:c7:60:91:0a:df:6b:2d:f7:c9:e1:96:da:5a:
97:0a:1c:37:a2:90:5d:75:06:c1:ea:17:21:55:d4:a9:77:af:
1f:fe:30:83:2d:8b:9b:06:fb:c5:80:53:40:71:ad:ee:ec:ce:
5a:eb:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 03:44:24 2026 by rpki-client