Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: BBJcbDj6lMrXuz7p0QNm54G1m/lIgbayvVH7bmlKp5I=
Subject key identifier: F3:71:29:6F:3D:B9:C1:8F:76:E0:37:B1:01:70:43:31:1C:6A:26:C7
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019EB80F0801874410E42584A8D4B7DABBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 18AF
Signing time: Thu 11 Jun 2026 19:00:53 +0000
Manifest this update: Thu 11 Jun 2026 19:00:53 +0000
Manifest next update: Fri 12 Jun 2026 19:00:53 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: jKriGGYOy/6p7EiaTGGTKdhdSaV/hdR/jYyKitWpv48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:08:01:87:44:10:e4:25:84:a8:d4:b7:da:bb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Jun 11 19:00:53 2026 GMT
Not After : Jun 12 19:00:53 2026 GMT
Subject: CN=f371296f3db9c18f76e037b1017043311c6a26c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:c3:08:2a:f1:4d:e5:29:ca:01:65:59:3f:
4a:5f:14:bc:0c:96:68:58:45:41:ee:9c:20:44:a2:
e7:3d:b6:6c:e3:fd:db:bb:5a:51:71:d1:8f:78:69:
e9:ba:de:6c:d0:1a:77:7b:b9:bb:14:af:c3:4b:2f:
19:05:f7:a6:f3:8c:d6:be:e2:44:15:89:d7:08:d2:
ae:5e:2f:1c:62:7b:e3:52:55:70:8b:bb:2b:89:6f:
de:73:41:9b:b5:30:f7:2f:89:ff:cc:1e:b6:cb:2e:
f0:2e:6c:ff:b4:4b:d7:5a:51:94:d1:30:66:d8:e8:
05:70:f4:c5:d7:e1:4b:4e:21:c7:e8:4f:ab:79:ea:
e2:70:ae:73:a0:9f:f6:2a:79:a5:ef:a7:fa:53:70:
cc:60:68:db:12:27:e5:41:4f:b0:00:ff:e7:59:83:
91:6f:00:0c:d4:99:e7:18:c6:ac:74:df:83:69:4c:
86:9c:06:b5:75:0a:60:65:23:1d:c0:63:0e:9d:de:
db:73:76:10:90:3c:47:59:22:ac:99:2f:8e:93:05:
ea:47:ba:eb:ec:6f:a6:41:96:4f:68:11:ca:e4:79:
5f:29:3e:d2:58:3e:e0:6f:37:12:2b:3e:61:d2:7d:
27:83:84:70:2a:55:f3:a7:f0:03:19:a1:6b:ab:49:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:29:6F:3D:B9:C1:8F:76:E0:37:B1:01:70:43:31:1C:6A:26:C7
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:3a:e7:83:05:ac:ac:ab:13:ee:cc:4e:ea:61:db:9a:99:
59:c1:2a:35:70:77:f0:ae:22:95:bc:8d:27:3d:ed:ee:ce:64:
77:66:80:f0:60:c4:65:e9:00:dd:e2:b3:b8:ee:3c:fc:0f:f4:
87:f9:a4:10:17:d2:b5:d5:8f:a7:fc:9d:9a:d7:6f:b5:f7:77:
af:a9:63:03:ed:e7:28:35:a2:c8:00:e5:f8:5e:95:70:4b:ff:
b9:ca:d3:53:7d:29:4a:80:14:e8:68:86:1d:e7:24:cc:b7:9b:
b9:88:1d:c7:fc:f1:f4:0a:74:b8:f4:c5:05:eb:53:7a:58:34:
45:c1:8c:67:28:e4:72:a9:8e:a5:7d:80:40:4c:dc:2f:03:9c:
7c:a3:76:47:f3:71:d0:a0:3c:f4:2d:63:73:cb:e6:ce:d2:83:
cc:69:60:11:c7:00:47:49:14:a6:83:08:8f:a1:df:df:df:38:
2b:c8:a5:da:2d:96:24:18:c6:9c:08:83:87:54:3a:80:fd:04:
08:83:db:13:f1:77:f3:25:82:58:89:70:28:99:b9:9c:d0:95:
1f:5a:19:72:0f:a7:69:b2:9b:4f:b5:ce:a2:5a:1f:b6:01:48:
f3:02:81:24:79:97:23:e4:e1:23:c7:ae:90:b8:27:97:d3:22:
e6:3e:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:01 2026 by rpki-client