Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: jM/QaR/Rybz4/r+gsKA1hyS8fScVCbTg2SRngcG9UMk=
Subject key identifier: A5:8B:83:91:DF:3A:31:9E:6B:D1:7B:49:05:05:A7:40:09:33:AD:71
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01A18299ED0F4E3B31B46F5A7B6F01DE3F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 13:01:28 +0000
Manifest this update: Wed 28 Oct 2026 13:01:28 +0000
Manifest next update: Thu 29 Oct 2026 13:01:28 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: bQ/n4/9zZxN0yEOGAoLLGsBpb+JvmJZY740qmR9rdys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:ed:0f:4e:3b:31:b4:6f:5a:7b:6f:01:de:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Oct 28 13:01:28 2026 GMT
Not After : Oct 29 13:01:28 2026 GMT
Subject: CN=a58b8391df3a319e6bd17b490505a7400933ad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:67:ff:f1:3f:14:d5:e3:4c:62:22:1f:f9:
30:7d:a9:0c:70:d4:dd:e5:b9:9c:f0:9e:8c:bc:43:
f4:8c:c8:85:b2:c1:2f:ba:cc:c6:9b:a4:90:84:f3:
24:08:12:4b:2d:8c:54:37:d6:91:69:dd:14:e4:8c:
a1:31:51:cf:e8:6f:39:ab:7e:4d:1d:a2:bd:4f:71:
61:5d:b1:e0:46:2d:e3:94:2c:a6:c2:bf:1f:7b:de:
57:ef:b2:8d:10:d9:a7:ca:aa:08:37:31:5b:18:aa:
1c:b5:bc:7f:23:9d:45:ba:ae:77:2c:28:7a:5f:7b:
de:03:da:91:7c:2d:7c:23:7c:ad:3f:0e:73:88:f1:
f5:58:31:2a:c6:b5:30:98:20:50:17:d7:e0:b2:48:
89:e4:59:1b:b4:d7:3d:1c:73:ef:53:09:15:1e:2e:
d7:19:6e:a0:00:45:b9:8c:3b:38:cf:ad:d9:25:90:
a7:7c:96:19:8f:15:f4:1f:00:7e:c2:e8:86:d9:05:
64:20:e3:f8:e1:9b:ae:13:a3:23:1b:01:88:1f:8c:
06:e2:d3:9e:4d:f8:99:b8:4c:b2:86:c9:e4:19:f5:
d8:de:b6:5f:59:19:40:e6:80:4d:f4:b4:32:7b:ba:
23:2c:46:56:dc:45:f3:03:b4:96:7f:0c:6f:d1:e0:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:83:91:DF:3A:31:9E:6B:D1:7B:49:05:05:A7:40:09:33:AD:71
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:35:5f:9b:0f:58:bc:b1:df:e4:51:87:75:c0:89:49:5f:78:
3a:8a:e8:d5:83:71:b7:56:14:db:26:2f:3a:53:67:51:f1:27:
00:1e:83:10:92:cc:97:f5:2e:82:8e:59:09:59:24:56:1c:c0:
3b:ee:7d:1e:92:75:9b:e1:6f:9e:db:16:0b:c0:c6:5a:19:97:
13:74:c9:b5:d9:86:e0:48:35:f4:e8:4d:98:f1:d2:73:c7:fa:
f2:e1:af:b3:29:57:d6:10:35:95:87:e1:24:a5:e2:33:2f:cd:
37:2d:b9:c3:8a:cb:9c:df:8d:d2:95:17:c2:20:4a:f6:a9:c7:
da:dc:c5:02:d7:48:26:da:80:8a:71:d8:4f:a9:23:81:d5:f5:
d0:e3:f1:f6:48:71:26:07:dd:ee:6d:46:9f:f0:24:3d:b6:86:
0d:a1:31:56:55:a3:78:d8:31:28:9d:56:fc:87:ca:6c:c0:97:
6b:01:64:97:44:b3:ac:cb:ee:da:bb:f4:da:dd:cd:a4:89:9e:
1b:ab:64:78:c5:5d:fc:25:81:fa:79:7e:89:69:db:13:a4:1e:
33:49:75:18:ef:0d:1a:13:c8:d6:f9:be:3f:23:90:a4:23:b5:
58:c3:ea:ab:78:13:52:fe:2f:fd:0c:c8:7c:32:19:58:56:b1:
2d:3d:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:54 2026 by rpki-client