Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: oiLw8yA0QCKhK6HRNCO2nG1iozB3s12rx1cYWePjek4=
Subject key identifier: 8A:40:55:56:BF:2A:A7:E8:1D:38:4D:FD:7D:5B:F0:B7:28:14:37:C2
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019CC8D12EDB246A817EB4A0E13D8AEC282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 185C
Signing time: Sat 07 Mar 2026 15:01:18 +0000
Manifest this update: Sat 07 Mar 2026 15:01:18 +0000
Manifest next update: Sun 08 Mar 2026 15:01:18 +0000
Files and hashes: 1: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (hash: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc=)
2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: EEtlOTcSrlHdCsX/fneX0e7Su9iAkNivIKl9U4uHn4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:2e:db:24:6a:81:7e:b4:a0:e1:3d:8a:ec:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Mar 7 15:01:18 2026 GMT
Not After : Mar 8 15:01:18 2026 GMT
Subject: CN=8a405556bf2aa7e81d384dfd7d5bf0b7281437c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:7a:d5:21:54:51:13:46:b8:b4:8f:54:64:
1f:67:49:b8:24:e7:e6:08:01:17:10:4d:c7:88:78:
32:25:76:3e:3e:3f:a3:ad:1a:63:f9:39:f0:99:95:
dd:af:f7:87:5b:8d:b8:3f:18:10:ca:7f:16:41:7e:
0f:bc:6d:38:8c:37:46:29:96:3c:3a:bc:cc:f7:f5:
fe:34:ca:2f:62:1b:e0:34:30:40:34:51:d5:81:60:
c2:f7:e0:43:3a:ae:dd:64:57:ac:f2:51:4e:d0:5e:
12:0f:fd:d8:00:fb:f7:87:5c:56:15:c7:2d:ea:e9:
e1:54:56:97:09:be:e2:44:63:b9:4b:e4:af:eb:f9:
d8:64:8c:64:f3:2e:67:85:9e:9b:68:7e:dc:cf:ce:
59:5d:d7:b6:d3:4e:c8:1b:cf:05:71:56:cb:63:59:
e6:60:e4:ed:be:aa:8c:f5:64:4c:70:1e:3e:c7:3f:
b3:a1:08:16:30:b0:4e:a7:36:31:60:bd:51:e0:04:
fa:61:99:2a:29:6d:bb:52:71:92:1c:3c:84:68:1e:
e1:82:88:22:9d:fd:02:2a:f5:9b:af:1d:a3:66:25:
0a:09:a5:98:4a:1d:4b:1a:7e:5c:31:ab:25:57:20:
54:5c:30:70:64:18:c7:b8:8c:c7:90:a6:80:51:29:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:55:56:BF:2A:A7:E8:1D:38:4D:FD:7D:5B:F0:B7:28:14:37:C2
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:f0:29:a8:15:6c:aa:ed:c8:67:e3:94:68:70:b1:7b:3e:
10:df:2c:3b:13:5b:d4:20:65:fb:12:9f:25:67:09:82:b8:96:
27:94:69:75:7b:fb:24:77:68:08:03:d2:e2:0c:bb:5f:88:6f:
90:0e:51:53:1f:cf:30:b6:cd:f6:ae:67:c0:10:74:8b:bd:dd:
33:02:d4:47:2b:80:f7:27:e6:e6:66:9f:04:81:b4:85:8d:f9:
2f:95:89:f1:de:7e:06:eb:50:db:0b:9e:d1:2d:f8:e0:d7:e5:
a4:df:11:c3:f1:02:bf:9c:2f:5b:df:c8:b2:82:14:a1:86:0b:
12:08:c4:01:26:ff:da:1e:b9:24:3e:4e:c7:5e:e5:d5:c4:b7:
75:15:09:56:0a:ad:70:87:d2:47:e3:1c:00:44:f4:bc:cd:22:
f2:fd:fa:ed:e5:e9:4b:69:f9:49:0b:31:a4:c3:30:c8:87:8c:
48:c7:8c:2c:66:cd:97:77:46:2e:71:e9:74:8f:14:4a:67:4c:
4b:93:27:67:12:16:38:a9:34:ad:3e:23:99:fe:3d:e0:ae:a1:
30:5e:1d:36:b9:89:8e:b8:84:02:80:ef:de:48:9f:43:f4:c4:
17:a3:1a:13:11:98:f4:ab:8a:7f:e1:ce:f5:b9:f4:45:05:fb:
f5:df:07:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzI0S7bJGqBfrSg4T2K7CgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4
NWFmYzIwHhcNMjYwMzA3MTUwMTE4WhcNMjYwMzA4MTUwMTE4WjAzMTEwLwYDVQQD
Eyg4YTQwNTU1NmJmMmFhN2U4MWQzODRkZmQ3ZDViZjBiNzI4MTQzN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0961SFUURNGuLSPVGQfZ0m4JOfm
CAEXEE3HiHgyJXY+Pj+jrRpj+TnwmZXdr/eHW424PxgQyn8WQX4PvG04jDdGKZY8
OrzM9/X+NMovYhvgNDBANFHVgWDC9+BDOq7dZFes8lFO0F4SD/3YAPv3h1xWFcct
6unhVFaXCb7iRGO5S+Sv6/nYZIxk8y5nhZ6baH7cz85ZXde2007IG88FcVbLY1nm
YOTtvqqM9WRMcB4+xz+zoQgWMLBOpzYxYL1R4AT6YZkqKW27UnGSHDyEaB7hgogi
nf0CKvWbrx2jZiUKCaWYSh1LGn5cMaslVyBUXDBwZBjHuIzHkKaAUSmUOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpAVVa/KqfoHThN/X1b8LcoFDfCMB8GA1UdIwQY
MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt
NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl
LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVbwKagV
bKrtyGfjlGhwsXs+EN8sOxNb1CBl+xKfJWcJgriWJ5RpdXv7JHdoCAPS4gy7X4hv
kA5RUx/PMLbN9q5nwBB0i73dMwLURyuA9yfm5mafBIG0hY35L5WJ8d5+ButQ2wue
0S344NflpN8Rw/ECv5wvW9/IsoIUoYYLEgjEASb/2h65JD5Ox17l1cS3dRUJVgqt
cIfSR+McAET0vM0i8v367eXpS2n5SQsxpMMwyIeMSMeMLGbNl3dGLnHpdI8USmdM
S5MnZxIWOKk0rT4jmf494K6hMF4dNrmJjriEAoDv3kifQ/TEF6MaExGY9KuKf+HO
9bn0RQX79d8HgQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:14:33 2026 by rpki-client