Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
File: sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft (raw, json)
Hash identifier: m5Z2o0Cz8FvUYEtCh811IlhZW0U1BSW9bcI0lmqTEDA=
Subject key identifier: 99:7F:D4:66:C4:BE:10:0F:5C:FC:52:CD:A4:86:5E:DA:4A:34:27:04
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 019CAA21D68064FE68B77A59D2498D760355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
Manifest number: 13B7
Signing time: Sun 01 Mar 2026 16:01:10 +0000
Manifest this update: Sun 01 Mar 2026 16:01:10 +0000
Manifest next update: Mon 02 Mar 2026 16:01:10 +0000
Files and hashes: 1: cTa4k-r506Jm5F65mksggvloVDA.roa (hash: VUs6amyf7QVphS7d5atiRKNg/52+c1LBxHY+3So5haI=)
2: sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl (hash: I/HOVVG29zr1FdyMOOKlHAPs2MtKcS9MXqvo04e8taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d6:80:64:fe:68:b7:7a:59:d2:49:8d:76:03:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Mar 1 16:01:10 2026 GMT
Not After : Mar 2 16:01:10 2026 GMT
Subject: CN=997fd466c4be100f5cfc52cda4865eda4a342704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:d3:fa:46:ad:2a:c0:61:09:a9:7e:08:6e:
f9:90:ca:37:ce:59:db:ec:99:4e:eb:55:34:73:50:
02:d0:f1:d8:a4:33:12:a9:28:3d:92:41:e0:88:33:
44:9a:cd:10:a7:1c:dc:4c:13:2c:e0:4b:a2:69:2d:
c5:38:5b:60:42:81:4a:15:07:e4:7d:30:d4:02:4a:
28:1f:c2:f6:52:06:63:2a:53:e2:1f:bc:11:4a:9e:
20:f7:b1:bc:96:6c:60:a7:9f:fe:4f:32:15:17:e7:
b3:b5:d2:93:ce:18:09:14:93:9b:bb:a3:f5:2c:39:
fc:5a:7e:56:3c:c1:b5:25:43:b0:5a:74:70:df:d0:
c8:37:32:05:33:18:0e:e8:a1:eb:a8:c1:5a:ee:3c:
5c:da:dd:fe:71:34:35:d5:07:68:94:51:07:4a:d4:
2c:70:eb:12:b0:33:90:c4:78:7f:b1:5f:d7:0f:35:
40:cb:ae:93:32:15:ae:4f:2f:e7:ef:e9:d5:e9:34:
9f:21:2d:92:db:e4:a2:3c:fb:ce:61:03:35:f4:bb:
b4:fc:85:48:b5:2e:49:19:d4:a9:b2:34:e2:96:df:
43:fa:7c:b5:ce:f1:31:a8:bc:f6:5b:b8:63:38:c1:
6e:bd:ce:78:e6:63:fd:e1:7f:7c:f7:4a:0d:f3:e7:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7F:D4:66:C4:BE:10:0F:5C:FC:52:CD:A4:86:5E:DA:4A:34:27:04
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:47:6c:73:05:3d:e3:1b:d6:9d:33:5c:f2:93:42:28:92:7b:
ca:cb:d7:20:44:07:95:62:30:15:3d:e8:6c:fc:9b:ae:ad:14:
8f:05:ef:16:df:19:7d:ea:5e:a6:9c:80:6d:90:95:85:a0:44:
c1:56:93:cc:f6:ac:5d:ae:df:7a:db:9e:77:77:bc:8d:37:1c:
fd:5f:21:fd:d8:62:9e:67:22:56:97:03:69:b6:55:86:b5:62:
7a:19:19:ce:d9:53:44:e3:58:45:91:a6:a9:ae:82:8a:87:e1:
72:b3:0c:52:a8:7e:91:72:5c:23:f4:d5:05:09:56:78:59:12:
9c:2c:42:9a:e7:d6:94:96:07:ba:8c:91:83:c4:d7:57:fd:02:
e6:2f:7e:4b:e6:2b:20:a8:0f:3f:b6:62:47:37:4d:8a:a0:16:
c4:56:ff:4a:4e:a5:e1:65:bd:6a:3c:27:b3:23:ea:0a:f8:37:
83:2e:75:1a:70:09:25:11:13:9f:97:62:fd:00:f9:5a:e0:f3:
bf:a6:62:44:86:15:e9:4f:f1:c5:e2:a6:43:c5:b7:1e:d9:33:
b8:83:45:37:e3:fb:76:45:ad:ca:c4:25:b6:08:a7:ba:49:36:
56:f3:2a:02:fd:c1:38:d8:0a:af:86:18:b3:06:2f:2e:bd:d3:
51:a3:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:32 2026 by rpki-client