Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: RJRQAX/6P3H7Gn6RMUHRTAQ4zo3kThwp8tm4s+hq6sQ=
Subject key identifier: 06:F1:09:7E:12:78:AA:7F:17:77:19:FE:E6:AE:5E:0F:49:5A:26:DD
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 019F9DDE63691E5A98D5851425DFA8496367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 10:00:24 +0000
Manifest this update: Sun 26 Jul 2026 10:00:24 +0000
Manifest next update: Mon 27 Jul 2026 10:00:24 +0000
Files and hashes: 1: MDdZOJb0E3TFPj7XF2CCzHswkBY.roa (hash: qkb6YrvzO3fcijDqtNe43esYVemBSIEEnj/KhUhyLjQ=)
2: QAF_d8JSOaJa5ePcJEuhIcWijDg.roa (hash: TdbbkOA72vcnj4Xcj7+YbTdpoWTInlYqPn8xkPfG47c=)
3: RoinRaWTzSOzFuYIvM_EaHf1q3Q.roa (hash: 0yHzdojFXFdEdeghY1VpjvzgZycjwd+UfaprSX41Gxo=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: R1rW1lWzbXLr+Ap13k7XmvGiek7bfAd63m4k34RmxsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:de:63:69:1e:5a:98:d5:85:14:25:df:a8:49:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Jul 26 10:00:24 2026 GMT
Not After : Jul 27 10:00:24 2026 GMT
Subject: CN=06f1097e1278aa7f177719fee6ae5e0f495a26dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:bb:6e:f0:42:88:60:76:ec:60:98:41:8e:
5f:2f:9b:dc:cb:f7:0e:cf:f6:2f:3f:76:41:35:62:
81:7e:33:45:2a:76:b9:88:c5:9d:2b:c0:cd:78:fa:
18:ce:f8:cc:c4:b8:78:4e:dd:0a:b2:2f:5e:a1:7f:
51:da:26:41:f6:e1:63:59:11:09:38:d7:66:2c:6e:
a5:b0:ea:71:43:53:8e:ae:7e:fd:7d:a7:fe:1d:20:
4e:2b:b9:8e:32:4d:07:cd:f5:31:f5:31:a3:b5:8d:
87:e9:b3:f8:f2:65:69:bb:69:b7:ca:1c:ab:72:b7:
a6:75:4e:0d:28:a3:9f:2b:bb:be:5e:01:c2:91:5f:
cc:38:6d:e0:59:8c:5c:ab:f2:d6:93:03:3a:fd:74:
7e:de:b3:32:ad:7c:4a:f2:f8:73:f8:30:43:91:0c:
01:dd:e3:a3:64:9d:ca:00:58:f1:ad:6e:16:ff:d4:
ca:25:50:45:17:60:2d:d8:47:c5:39:22:fc:2a:fa:
4b:ce:81:d2:99:56:62:fe:38:a9:4b:33:0b:35:30:
97:3e:7f:a5:7e:58:16:58:10:43:fe:58:ce:97:4c:
f6:8a:32:9e:f7:a4:86:41:06:6a:3d:62:6e:50:46:
f0:58:00:f0:19:3a:83:76:09:b2:cf:d1:d5:81:77:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:09:7E:12:78:AA:7F:17:77:19:FE:E6:AE:5E:0F:49:5A:26:DD
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:2a:70:74:6d:75:02:a3:52:6b:c1:37:58:06:c2:8c:02:
30:b3:73:51:e7:06:f6:2b:fe:7c:45:73:bf:77:39:a8:8c:29:
50:8c:e6:58:36:92:88:45:15:4a:12:cb:22:74:51:fe:a4:92:
15:8b:23:36:cd:0b:c2:ed:75:34:17:42:cc:ca:88:2c:b2:36:
cd:72:d7:31:54:7e:cc:8d:b7:77:a9:ef:ae:5a:e0:84:8b:77:
76:0a:3d:b2:1b:70:e8:c9:da:17:f8:92:cd:d9:0c:fa:7a:2a:
2f:c0:e7:03:e1:55:a6:0e:82:aa:62:8f:96:89:d3:22:3e:23:
55:0f:63:2f:79:a0:ba:57:d0:f1:81:80:b7:32:eb:a5:35:b0:
e8:8f:b4:c0:c0:7e:7c:88:76:0f:aa:d0:c4:5b:7d:ee:fb:dc:
a5:32:35:94:3c:81:29:4f:37:27:43:c5:63:e2:c9:94:82:39:
0a:55:87:36:ec:ff:1a:c2:7d:9d:75:da:f9:e3:d4:72:ac:7b:
98:a6:9f:46:69:0c:13:dd:c9:99:2e:50:0e:8b:41:5c:9b:1f:
9b:da:95:80:6f:97:e6:92:90:72:3a:d5:ea:f0:c5:35:43:89:
68:fb:64:b5:32:93:45:3e:67:58:dc:48:8e:b2:76:44:b1:4c:
11:f8:eb:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+d3mNpHlqY1YUUJd+oSWNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTY4ZDA2MmEwYzJlNjE2NmE4MjYyYzRkNzI5OGQ3NmRl
ZGQwNGYwHhcNMjYwNzI2MTAwMDI0WhcNMjYwNzI3MTAwMDI0WjAzMTEwLwYDVQQD
EygwNmYxMDk3ZTEyNzhhYTdmMTc3NzE5ZmVlNmFlNWUwZjQ5NWEyNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljC7bvBCiGB27GCYQY5fL5vcy/cO
z/YvP3ZBNWKBfjNFKna5iMWdK8DNePoYzvjMxLh4Tt0Ksi9eoX9R2iZB9uFjWREJ
ONdmLG6lsOpxQ1OOrn79faf+HSBOK7mOMk0HzfUx9TGjtY2H6bP48mVpu2m3yhyr
cremdU4NKKOfK7u+XgHCkV/MOG3gWYxcq/LWkwM6/XR+3rMyrXxK8vhz+DBDkQwB
3eOjZJ3KAFjxrW4W/9TKJVBFF2At2EfFOSL8KvpLzoHSmVZi/jipSzMLNTCXPn+l
flgWWBBD/ljOl0z2ijKe96SGQQZqPWJuUEbwWADwGTqDdgmyz9HVgXcySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbxCX4SeKp/F3cZ/uauXg9JWibdMB8GA1UdIwQY
MBaAFLEWjQYqDC5hZqgmLE1ymNdt7dBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMt
OTY1YTM0MTgwMTM2LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMtOTY1YTM0MTgwMTM2
LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMYqcHRt
dQKjUmvBN1gGwowCMLNzUecG9iv+fEVzv3c5qIwpUIzmWDaSiEUVShLLInRR/qSS
FYsjNs0Lwu11NBdCzMqILLI2zXLXMVR+zI23d6nvrlrghIt3dgo9shtw6MnaF/iS
zdkM+noqL8DnA+FVpg6CqmKPlonTIj4jVQ9jL3mgulfQ8YGAtzLrpTWw6I+0wMB+
fIh2D6rQxFt97vvcpTI1lDyBKU83J0PFY+LJlII5ClWHNuz/GsJ9nXXa+ePUcqx7
mKafRmkME93JmS5QDotBXJsfm9qVgG+X5pKQcjrV6vDFNUOJaPtktTKTRT5nWNxI
jrJ2RLFMEfjrOA==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:41 2026 by rpki-client