Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: nEmey02/k2By0K1xQ7MkaHSWe1Z7b+zh50XFM50O7AA=
Subject key identifier: AD:4F:FC:7D:FF:49:B9:A1:35:43:B3:A9:A1:D2:12:19:AA:27:2D:A9
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019E9C2A21BA5BC18FAE01862419D0C0C89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 194E
Signing time: Sat 06 Jun 2026 09:01:07 +0000
Manifest this update: Sat 06 Jun 2026 09:01:07 +0000
Manifest next update: Sun 07 Jun 2026 09:01:07 +0000
Files and hashes: 1: 0VOBOxkv5wZ0sAOKI8Ud9lfPDC0.roa (hash: 7BKXAfE9w39NgXynjAiXVWbOelCBomhtnn6Jh7KJSqc=)
2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: QHGiRm/m503j3+3dNoYeAPLlLNThN1B7qpT4th4c4LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:2a:21:ba:5b:c1:8f:ae:01:86:24:19:d0:c0:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Jun 6 09:01:07 2026 GMT
Not After : Jun 7 09:01:07 2026 GMT
Subject: CN=ad4ffc7dff49b9a13543b3a9a1d21219aa272da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:4d:b2:c6:a1:41:7e:66:af:79:ff:88:86:
93:f2:44:c6:83:b1:cb:b1:aa:40:72:d2:fd:0f:ba:
94:ec:96:4f:61:c2:6d:f0:c2:c5:7b:fc:3f:09:95:
a7:0e:74:d6:94:5d:96:69:de:ab:72:d2:ac:eb:75:
eb:31:e1:7c:55:1b:dd:d4:04:60:08:33:dd:9c:f6:
f6:ce:d7:66:54:ea:a9:41:55:09:ee:09:92:7d:19:
4a:68:27:53:00:99:3d:45:54:48:20:c7:ec:14:53:
dd:45:c0:cf:89:27:82:a8:91:b4:80:e5:43:18:aa:
17:de:69:84:d9:11:a9:78:cd:a8:f5:76:99:15:dc:
20:d7:3d:66:dc:14:67:1e:8f:dd:0a:fe:0c:6e:a4:
2a:fc:a0:43:b7:68:04:11:da:10:e8:da:ea:2a:da:
68:02:1e:ab:1a:8e:9d:51:a9:f2:dc:b2:70:8e:fe:
b4:5a:72:d3:42:62:db:7a:13:49:45:e8:6e:80:1f:
6d:c7:fa:ce:57:33:cd:5d:4e:8b:10:79:89:f2:40:
3a:9e:07:9a:5c:be:64:a5:e2:0b:40:06:06:52:a0:
7b:87:02:af:9d:2b:57:d5:0c:7a:e5:be:b1:8c:8c:
bc:58:21:10:92:1c:e3:9f:b4:61:f5:fb:c6:3c:85:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:FC:7D:FF:49:B9:A1:35:43:B3:A9:A1:D2:12:19:AA:27:2D:A9
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:58:b5:8a:09:fd:78:6f:62:14:e4:24:53:ed:e4:1d:6b:3f:
7d:a6:20:62:d9:69:cb:df:48:63:72:36:b9:b9:98:f8:23:8d:
74:29:50:09:22:02:b4:91:26:05:ab:0c:89:67:70:82:9d:b8:
05:36:73:4f:d1:ee:d6:c1:21:35:31:78:cf:37:77:64:8e:c2:
ce:32:82:fd:14:d9:93:26:fd:df:61:50:f5:a4:c3:5f:96:b0:
73:45:67:75:41:3e:af:37:b8:5f:a5:a9:22:01:46:c3:79:13:
f3:a8:2b:c1:85:ea:3d:ea:1f:3c:d7:96:86:2f:c9:66:cc:94:
ec:d7:e9:89:d7:62:bc:6a:11:d1:2f:c0:ab:61:12:c1:9c:40:
8b:b5:6b:c7:67:df:d6:83:2d:ee:1f:34:20:c8:70:c1:e2:d6:
b3:5f:1b:70:be:a7:9d:7a:fb:f7:d9:b8:e6:af:ee:0d:f3:f4:
20:99:b4:bd:39:9c:4e:80:8a:51:6d:2b:3a:55:ad:75:a8:ef:
3a:51:68:5e:e4:92:e2:96:8e:79:55:89:af:b2:8a:b4:1a:28:
e8:87:9d:74:2b:9f:8b:14:26:15:fc:a3:01:b8:0c:27:d7:4f:
ef:54:51:c2:f5:9b:b1:d7:c4:26:7c:85:e1:52:1e:10:b4:26:
ad:2a:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:19:02 2026 by rpki-client