Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
File: sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft (raw, json)
Hash identifier: UUlAahY1TWhqIFSn4y6kHtte393LhnLmvjyvy4C1g20=
Subject key identifier: 6A:BC:23:FB:A4:8E:84:67:64:7F:FD:22:CF:6E:5B:67:98:FC:41:D3
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 019DA3417870F7CA5AB8F7F98890691AD24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
Manifest number: 1438
Signing time: Sun 19 Apr 2026 01:01:10 +0000
Manifest this update: Sun 19 Apr 2026 01:01:10 +0000
Manifest next update: Mon 20 Apr 2026 01:01:10 +0000
Files and hashes: 1: cTa4k-r506Jm5F65mksggvloVDA.roa (hash: VUs6amyf7QVphS7d5atiRKNg/52+c1LBxHY+3So5haI=)
2: sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl (hash: +1iClTtAWJhUmaKRqcU2EoCT/D0zqJSbom/Mf4SEuwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:78:70:f7:ca:5a:b8:f7:f9:88:90:69:1a:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Apr 19 01:01:10 2026 GMT
Not After : Apr 20 01:01:10 2026 GMT
Subject: CN=6abc23fba48e8467647ffd22cf6e5b6798fc41d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:0f:31:65:ce:3b:5a:8a:2f:00:2c:53:6c:
bf:bf:99:af:5d:d5:1b:75:c0:61:c1:8f:44:45:43:
c3:10:5a:78:6d:ae:92:61:2a:8e:b3:c5:11:a4:9f:
61:5a:b3:f4:bc:94:73:40:25:02:b6:27:e0:56:e3:
40:35:d4:22:be:54:6d:c1:f6:58:70:23:7a:7b:74:
2c:7f:c1:83:0f:5e:3d:00:41:c8:52:31:be:fc:8b:
c3:d2:09:78:94:9f:31:61:a5:0f:73:95:24:0d:a2:
68:cd:02:95:a6:c9:60:eb:00:54:a7:53:8b:f7:45:
7a:45:b8:94:e2:d7:16:d2:5f:2c:47:8f:14:34:42:
b1:f3:8c:3e:48:86:0a:80:a0:21:32:7b:68:fd:1d:
b8:47:ba:44:22:0f:fc:0c:94:29:bf:6c:d3:e0:b0:
00:52:c8:6e:ef:fd:6a:66:a6:4f:d8:ec:12:e9:f3:
ae:5c:d8:a0:06:cc:37:8d:e2:22:d1:e1:7f:02:75:
53:60:12:da:cf:06:be:9f:dd:c2:b9:28:b2:ac:1d:
bd:da:ed:d1:ac:f3:49:30:56:77:d0:d9:04:bd:ee:
c0:c3:da:d0:2f:19:5d:a8:44:59:54:4b:4b:c7:02:
03:8c:d3:4d:73:29:8d:09:da:33:3e:e5:46:68:94:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BC:23:FB:A4:8E:84:67:64:7F:FD:22:CF:6E:5B:67:98:FC:41:D3
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:71:29:28:b0:6c:7d:0b:f6:41:e4:6c:15:6d:9a:79:32:
f8:c2:79:a4:7e:89:e1:1b:14:37:7a:0a:10:e0:9c:db:61:e7:
48:9f:e7:a9:48:c0:aa:13:e4:70:96:f0:05:d2:2d:42:59:67:
34:2d:36:8e:31:f2:b6:7d:40:71:9c:5d:ea:e3:72:5c:ca:9d:
40:8b:9a:cc:df:80:a4:5c:58:3a:f7:7a:06:ed:14:97:05:f9:
d5:19:81:88:67:1f:a7:b7:a8:ec:f1:85:8a:37:16:76:b9:d0:
2c:29:b2:e8:b7:a9:8d:bc:4d:1e:3a:c4:ed:ac:52:fd:77:a5:
d2:9d:c9:d5:d1:05:8c:2c:fd:10:01:79:19:0b:24:b4:82:4f:
26:04:b4:bb:e6:6a:4f:a1:b6:df:4a:fe:ca:f1:82:ce:03:14:
5b:4e:3c:55:d7:ec:42:34:0a:91:1b:d5:9f:93:90:e2:38:8e:
20:06:c4:64:75:3f:cd:56:93:97:25:ea:ea:f7:fb:8f:bc:12:
5c:0e:2b:a9:d9:6c:04:1c:26:85:32:59:a7:f5:86:be:08:da:
6d:01:58:88:55:87:b4:79:68:55:a7:ec:92:77:a7:a1:59:68:
2c:69:ac:65:2b:e2:1a:3b:c4:23:4a:c0:e2:31:7b:30:d7:92:
af:cf:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:10 2026 by rpki-client