Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: aaQoLPvEotQcsLkST7+Jgq+a1HJ4VocC37rbMWHEC3c=
Subject key identifier: 94:36:FE:9D:A9:33:17:0B:8C:35:68:23:3F:D9:3F:0F:6D:6F:EB:02
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 01A18C41274CB1148227348D89105922EE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 1A26
Signing time: Fri 30 Oct 2026 10:00:42 +0000
Manifest this update: Fri 30 Oct 2026 10:00:42 +0000
Manifest next update: Sat 31 Oct 2026 10:00:42 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 4nETJazwf3h3c8am2D5ExipvHQ5n/YRZjnDc3IoNDAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:27:4c:b1:14:82:27:34:8d:89:10:59:22:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Oct 30 10:00:42 2026 GMT
Not After : Oct 31 10:00:42 2026 GMT
Subject: CN=9436fe9da933170b8c3568233fd93f0f6d6feb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:06:8c:a9:ca:13:89:6c:a0:ed:11:57:f6:
28:2c:c8:f8:2b:88:45:d1:98:a9:32:8d:03:9a:46:
81:0f:36:d9:de:3b:7e:3c:ce:37:a1:44:1d:11:11:
9c:e4:c1:ed:26:2a:01:ff:72:dd:49:47:0b:69:35:
b4:a2:6d:72:74:11:f8:3c:11:69:53:d8:70:8b:99:
89:8f:a9:48:cb:fd:85:86:92:06:e6:16:34:58:67:
b9:3f:0c:22:d3:81:bf:9f:48:41:81:5a:5c:8f:22:
a1:36:5f:4e:ad:f7:cd:c8:b7:e4:23:79:6f:60:a7:
ff:b5:93:56:3d:43:1a:77:14:9a:2d:44:4a:76:11:
bc:2e:39:12:5f:19:8f:c2:d0:61:24:29:4e:12:3f:
37:4a:1a:ea:1c:55:ca:ae:fe:88:48:ac:22:87:a0:
0f:2d:c7:55:85:f7:5d:3d:53:9a:5b:9a:c6:59:e2:
d2:a9:21:02:e5:a2:3a:35:2e:f3:8d:fe:b7:ea:07:
d8:9a:9b:b8:d7:0a:89:cb:c6:54:50:d0:4a:6a:0c:
e2:a8:ea:57:3f:eb:d7:e7:f7:9e:41:a3:a1:8f:8e:
ff:3b:7b:24:9a:df:6c:c2:6d:ce:16:ee:64:f6:1a:
e7:26:bf:0b:a9:62:a3:fb:a8:43:02:8a:9e:64:24:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:FE:9D:A9:33:17:0B:8C:35:68:23:3F:D9:3F:0F:6D:6F:EB:02
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d6:fb:c9:a5:b2:0a:e7:e6:09:fc:c6:45:23:c3:f1:3b:da:
a2:98:17:58:d0:08:a8:e5:68:bb:57:d1:03:1f:f1:21:27:65:
44:2d:b7:ea:6c:2d:91:f5:ca:a3:b2:ea:56:b7:ba:05:5d:af:
ae:5e:9e:a6:a8:ef:07:e1:c6:91:64:d1:91:c0:75:fd:2e:f4:
23:a3:ce:14:37:4a:53:ae:11:16:2d:85:67:87:d0:86:02:16:
75:31:92:56:2a:0d:fd:c8:d1:33:92:25:92:b6:ae:1a:fd:40:
2e:95:ff:8d:30:68:44:00:80:5a:8f:e7:f0:e4:ed:50:04:c5:
cf:12:ec:d5:9a:ab:51:89:c2:33:41:27:f3:a6:f8:3c:94:a4:
15:a6:42:30:7e:b7:1a:46:08:da:2f:9a:08:a6:a8:5f:a8:ce:
62:9d:54:09:65:64:91:aa:81:6d:f1:a2:33:85:08:42:e6:b3:
27:1c:ba:21:97:be:d1:8b:a3:45:16:fa:a0:ae:f3:f2:59:4b:
64:aa:d3:15:82:fb:9c:7b:a3:96:65:4a:46:63:5f:51:69:78:
e1:39:7b:25:03:0c:6d:b7:0f:f7:23:e9:c4:87:23:32:c4:f8:
3e:e8:a6:07:ac:bf:a3:99:2c:06:ce:e6:76:a0:7d:09:a4:ce:
04:f0:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:27 2026 by rpki-client