Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: TQt2UxxoOJn8aY5h96fqELjWeRDLx7yTjC3dn0itPvg=
Subject key identifier: 63:34:62:8C:22:66:E3:F1:BF:DA:6E:17:22:D3:91:D0:24:E3:0B:09
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019EB9FDB5A3EA23916178CF8E24317E47B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 18B0
Signing time: Fri 12 Jun 2026 04:01:12 +0000
Manifest this update: Fri 12 Jun 2026 04:01:12 +0000
Manifest next update: Sat 13 Jun 2026 04:01:12 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 2tlFPt5MmTigbuIy79UBqVUoizH+Fp9ZO6T3F6eV9d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:b5:a3:ea:23:91:61:78:cf:8e:24:31:7e:47:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Jun 12 04:01:12 2026 GMT
Not After : Jun 13 04:01:12 2026 GMT
Subject: CN=6334628c2266e3f1bfda6e1722d391d024e30b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:11:61:d0:f6:eb:f3:97:e5:9c:04:58:3c:
01:ba:cc:c7:d9:ff:ac:0c:b8:53:86:fa:3d:16:d2:
4f:cf:c6:48:68:b2:8f:34:ff:99:fb:f4:bf:cb:bf:
e6:9f:9d:5b:2a:b5:9c:c7:18:90:64:cc:08:16:03:
c4:ad:00:d3:69:d4:27:51:54:94:44:c8:d2:59:12:
49:4e:d2:3e:a2:bc:0c:7d:e2:df:5d:1a:fc:14:2d:
33:c2:fb:d0:f6:c6:81:50:62:ce:ec:f6:a4:5f:45:
07:a7:d9:64:1e:a6:76:f7:15:61:d9:85:4d:d0:f8:
9d:97:4b:54:80:5e:3b:28:bf:c5:01:cb:24:fe:50:
e4:d8:93:c6:83:4f:89:78:bd:3e:ad:66:8d:1a:04:
1e:64:f0:e0:e1:6d:c6:34:33:9a:b3:b1:46:32:fb:
00:2a:0b:bb:17:43:63:a5:44:d7:00:3c:34:f2:f0:
2d:31:9d:a3:fd:00:b1:34:5a:37:1b:b8:30:00:9e:
43:87:25:15:44:84:da:0e:8b:3e:8a:3c:54:6f:b4:
ab:18:7d:f2:37:fc:79:f3:33:41:1a:15:0f:36:f0:
a6:8f:a3:8a:e6:90:da:89:f2:39:79:1c:29:43:3f:
fd:6c:24:e6:2c:30:4f:c7:d3:2e:f4:6b:04:b2:75:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:62:8C:22:66:E3:F1:BF:DA:6E:17:22:D3:91:D0:24:E3:0B:09
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e3:bf:7e:31:83:cd:05:5c:57:12:b9:03:df:2f:12:87:68:
c5:0f:d0:4c:f0:cb:6d:73:33:18:fe:b3:4e:2f:1e:dc:66:4f:
87:52:ad:e1:b3:c7:86:bc:0c:07:27:e0:70:24:77:35:ba:5e:
dc:22:41:22:5b:c4:f1:70:66:ea:42:4a:60:ac:13:fe:62:8b:
04:56:ee:56:62:40:7e:e1:be:94:2e:75:27:1c:6e:4d:69:f5:
4a:09:42:2a:53:4a:5a:66:8f:7b:f5:c0:70:e7:e8:9c:8b:29:
db:c0:d5:60:19:39:a4:52:ce:0e:5b:a7:6b:27:39:fa:2f:58:
63:91:6b:65:6d:6b:48:c3:51:f2:cb:06:d0:30:40:9d:d8:83:
4c:55:7b:4e:92:22:4a:54:99:4f:98:aa:ec:84:82:c0:41:2f:
ec:9c:0d:f7:12:82:ec:6c:a1:c7:28:f2:0b:6b:25:ed:ef:d4:
45:db:67:2c:b8:e2:ea:1e:8f:16:c7:61:34:60:7e:cb:b7:59:
bb:a5:f7:2e:63:70:5a:47:ad:0c:4f:dc:e2:e1:3f:7e:c0:51:
17:d6:86:88:0a:cb:c7:59:ca:9d:14:6d:ef:e6:95:de:f6:92:
6d:57:26:31:cc:da:ba:bd:cc:87:24:31:c6:bc:9d:44:36:6d:
36:b0:8f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/bWj6iORYXjPjiQxfke1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjYwNjEyMDQwMTEyWhcNMjYwNjEzMDQwMTEyWjAzMTEwLwYDVQQD
Eyg2MzM0NjI4YzIyNjZlM2YxYmZkYTZlMTcyMmQzOTFkMDI0ZTMwYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6sRYdD26/OX5ZwEWDwBuszH2f+s
DLhThvo9FtJPz8ZIaLKPNP+Z+/S/y7/mn51bKrWcxxiQZMwIFgPErQDTadQnUVSU
RMjSWRJJTtI+orwMfeLfXRr8FC0zwvvQ9saBUGLO7PakX0UHp9lkHqZ29xVh2YVN
0Pidl0tUgF47KL/FAcsk/lDk2JPGg0+JeL0+rWaNGgQeZPDg4W3GNDOas7FGMvsA
Kgu7F0NjpUTXADw08vAtMZ2j/QCxNFo3G7gwAJ5DhyUVRITaDos+ijxUb7SrGH3y
N/x58zNBGhUPNvCmj6OK5pDaifI5eRwpQz/9bCTmLDBPx9Mu9GsEsnV5jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM0YowiZuPxv9puFyLTkdAk4wsJMB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOO/fjGD
zQVcVxK5A98vEodoxQ/QTPDLbXMzGP6zTi8e3GZPh1Kt4bPHhrwMByfgcCR3Nbpe
3CJBIlvE8XBm6kJKYKwT/mKLBFbuVmJAfuG+lC51JxxuTWn1SglCKlNKWmaPe/XA
cOfonIsp28DVYBk5pFLODlunayc5+i9YY5FrZW1rSMNR8ssG0DBAndiDTFV7TpIi
SlSZT5iq7ISCwEEv7JwN9xKC7GyhxyjyC2sl7e/URdtnLLji6h6PFsdhNGB+y7dZ
u6X3LmNwWketDE/c4uE/fsBRF9aGiArLx1nKnRRt7+aV3vaSbVcmMczaur3MhyQx
xrydRDZtNrCPAw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:43:50 2026 by rpki-client