Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: kMDp8OxgK/jdmbOFP4bFFo3S992FVbswA2oAj/DvPZs=
Subject key identifier: 41:FD:FC:6A:74:08:E5:F5:0E:4D:9E:C9:19:D8:1B:8D:C1:11:8E:69
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01A178F18D3A95E08C3594CD74889C7F2DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 16:00:58 +0000
Manifest this update: Mon 26 Oct 2026 16:00:58 +0000
Manifest next update: Tue 27 Oct 2026 16:00:58 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: svCuOrED7SBKTDmKYaIgRvul0DHSco74YlD2WX7NpGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:8d:3a:95:e0:8c:35:94:cd:74:88:9c:7f:2d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Oct 26 16:00:58 2026 GMT
Not After : Oct 27 16:00:58 2026 GMT
Subject: CN=41fdfc6a7408e5f50e4d9ec919d81b8dc1118e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:98:e0:61:52:c2:00:18:38:5f:a1:c9:42:
2c:c0:d2:06:79:54:41:ca:31:93:79:8d:52:f7:85:
4d:f4:34:6d:19:02:e2:47:77:43:39:87:2b:32:0f:
56:65:e4:05:a0:4b:26:62:da:37:36:41:43:b9:9b:
fe:0c:63:6d:52:b6:65:86:38:5c:fe:40:f5:33:f5:
7a:33:56:4a:67:75:9e:63:2b:d3:a3:b6:b5:88:07:
93:86:8e:bc:b5:47:57:a5:ef:75:3e:d4:e8:6c:27:
36:b2:4a:79:d5:b8:b9:9d:99:93:e1:c8:bf:15:e7:
5f:a8:39:75:59:08:a4:97:a0:11:0f:16:6d:c5:3d:
cc:f2:da:b9:f0:a4:a9:36:7f:0d:50:fd:ab:38:5b:
e5:21:04:65:5b:a5:17:9e:3e:df:e7:b0:95:6a:b2:
86:2c:88:e4:a1:db:a0:02:07:c1:fa:2a:6d:9a:b1:
69:1e:19:e0:90:42:13:97:89:4a:04:5e:2f:21:5e:
c7:32:b6:dd:e9:18:d5:43:c8:ba:64:4e:86:08:49:
c5:a9:fc:c2:54:57:4d:a4:19:7e:4d:9f:f3:ba:14:
85:75:5b:8a:01:06:55:74:06:85:32:e4:30:9a:0b:
01:37:cf:c1:99:12:14:2a:8c:1a:a7:16:72:eb:18:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:FC:6A:74:08:E5:F5:0E:4D:9E:C9:19:D8:1B:8D:C1:11:8E:69
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e7:f2:fa:62:b0:39:ec:bd:12:f8:fa:30:91:ec:30:87:71:
d1:1d:d5:85:57:b4:ff:42:97:d2:93:fb:7f:b3:90:57:78:cf:
7d:b1:0d:04:bb:22:ab:47:de:05:b9:fe:51:34:7f:65:4b:b4:
cd:04:94:ff:85:61:bd:4a:fa:36:4e:b6:fa:db:b7:e6:41:5c:
c1:f3:30:30:da:e7:88:0a:97:10:49:24:18:11:99:90:28:05:
01:42:10:ed:d1:cd:d3:b1:50:34:70:c1:56:0b:6a:30:fe:20:
ea:2f:42:f5:6c:c5:ec:a5:27:a5:aa:b7:05:b0:84:e2:00:4e:
f5:b1:8f:33:4e:b1:a5:19:58:ad:ba:f3:05:3b:e8:3a:48:27:
53:0e:fd:d6:2c:eb:f6:2b:cc:88:68:1e:2c:58:ae:34:53:76:
4a:cd:3b:0b:de:ff:5b:6a:70:60:3d:68:e6:42:03:32:88:9c:
8b:67:99:65:c9:f4:9d:ec:7a:1d:cd:2d:52:d5:f3:f9:9a:07:
da:1a:a3:56:00:5a:4d:81:65:27:c5:21:a3:46:a6:92:80:da:
71:53:4c:3c:50:ee:ed:a6:47:8e:9b:be:06:d5:24:5f:e6:ef:
aa:b5:ae:00:79:46:41:55:2a:6b:95:72:99:6a:54:f6:80:85:
ec:de:bd:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48Y06leCMNZTNdIicfy2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTY4ZDA2MmEwYzJlNjE2NmE4MjYyYzRkNzI5OGQ3NmRl
ZGQwNGYwHhcNMjYxMDI2MTYwMDU4WhcNMjYxMDI3MTYwMDU4WjAzMTEwLwYDVQQD
Eyg0MWZkZmM2YTc0MDhlNWY1MGU0ZDllYzkxOWQ4MWI4ZGMxMTE4ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCY4GFSwgAYOF+hyUIswNIGeVRB
yjGTeY1S94VN9DRtGQLiR3dDOYcrMg9WZeQFoEsmYto3NkFDuZv+DGNtUrZlhjhc
/kD1M/V6M1ZKZ3WeYyvTo7a1iAeTho68tUdXpe91PtTobCc2skp51bi5nZmT4ci/
FedfqDl1WQikl6ARDxZtxT3M8tq58KSpNn8NUP2rOFvlIQRlW6UXnj7f57CVarKG
LIjkodugAgfB+iptmrFpHhngkEITl4lKBF4vIV7HMrbd6RjVQ8i6ZE6GCEnFqfzC
VFdNpBl+TZ/zuhSFdVuKAQZVdAaFMuQwmgsBN8/BmRIUKowapxZy6xiRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH9/Gp0COX1Dk2eyRnYG43BEY5pMB8GA1UdIwQY
MBaAFLEWjQYqDC5hZqgmLE1ymNdt7dBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMt
OTY1YTM0MTgwMTM2LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMtOTY1YTM0MTgwMTM2
LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOfy+mKw
Oey9Evj6MJHsMIdx0R3VhVe0/0KX0pP7f7OQV3jPfbENBLsiq0feBbn+UTR/ZUu0
zQSU/4VhvUr6Nk62+tu35kFcwfMwMNrniAqXEEkkGBGZkCgFAUIQ7dHN07FQNHDB
VgtqMP4g6i9C9WzF7KUnpaq3BbCE4gBO9bGPM06xpRlYrbrzBTvoOkgnUw791izr
9ivMiGgeLFiuNFN2Ss07C97/W2pwYD1o5kIDMoici2eZZcn0nex6Hc0tUtXz+ZoH
2hqjVgBaTYFlJ8Uho0amkoDacVNMPFDu7aZHjpu+BtUkX+bvqrWuAHlGQVUqa5Vy
mWpU9oCF7N69Kw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:09:15 2026 by rpki-client