Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File: sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier: Ul1glpbDjfZvDgCLQuiOg/zcUuMubxfG+w10s/1g/80=
Subject key identifier: D3:EB:C2:B0:AA:E6:DC:E5:80:15:E5:EA:7F:0C:44:6C:05:26:E5:A7
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer: /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial: 019EAD1E0D9294520E7127749D3B963BFC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number: 0168
Signing time: Tue 09 Jun 2026 16:01:28 +0000
Manifest this update: Tue 09 Jun 2026 16:01:28 +0000
Manifest next update: Wed 10 Jun 2026 16:01:28 +0000
Files and hashes: 1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: pLmvHtzlak/nsMzS9Km2da6IwBqr55g5SMz1YODZkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 11:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:1e:0d:92:94:52:0e:71:27:74:9d:3b:96:3b:fc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Validity
Not Before: Jun 9 16:01:28 2026 GMT
Not After : Jun 10 16:01:28 2026 GMT
Subject: CN=d3ebc2b0aae6dce58015e5ea7f0c446c0526e5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:29:be:b5:0c:0c:e9:10:ce:3b:22:19:de:
4f:21:5a:75:94:20:27:21:96:c1:00:aa:cc:6b:4b:
7a:1d:5b:3f:4a:80:83:9b:14:7d:c3:07:be:52:28:
dd:3a:07:40:71:0d:c9:07:7d:4c:a1:c2:25:a6:41:
55:6d:c2:b2:b2:c1:79:f6:46:58:06:ac:2a:4c:78:
3d:72:35:16:09:c0:1a:05:a4:fe:48:28:0d:11:61:
c7:7f:d7:76:9d:f9:1f:e9:74:43:26:6e:d2:e7:0c:
bd:4e:69:dc:1e:9d:04:e6:16:95:3c:33:e0:69:28:
cd:f3:7b:0b:a5:f1:16:c0:39:fb:ea:e8:3a:49:11:
fa:fc:8c:6f:80:c5:b2:0e:21:7a:bc:92:49:3a:16:
02:6e:b5:8d:e6:d8:1e:1f:14:df:69:a5:1d:34:1c:
d7:8e:4c:5c:1c:0b:6b:da:46:5e:fb:be:3a:dd:af:
f3:c7:f9:70:7c:e2:fe:d0:b4:e7:2c:dc:20:5b:1a:
70:4c:47:fc:52:cc:74:dd:3e:7d:10:11:4b:18:88:
bb:08:65:ee:88:40:11:84:70:ef:a4:3e:41:53:f9:
26:88:7c:c7:c6:d3:15:fb:de:70:cd:c9:25:94:be:
7d:84:ee:bf:39:78:8a:fb:c1:3b:36:bb:ca:e7:a9:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:C2:B0:AA:E6:DC:E5:80:15:E5:EA:7F:0C:44:6C:05:26:E5:A7
X509v3 Authority Key Identifier:
keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:36:f3:6c:27:4c:5b:54:05:68:5d:47:91:1f:9d:f0:21:
bc:a1:39:14:a7:ad:65:a6:35:e2:af:1f:14:f4:9a:a8:41:f3:
11:45:b5:cb:a6:ce:de:3a:8c:e9:3b:5f:cb:e1:82:73:9d:39:
cd:e2:88:7a:43:8c:3a:ad:86:f9:57:70:20:8a:b6:38:28:69:
93:a7:54:b8:8c:44:1f:6f:9c:a9:aa:3a:12:71:f5:74:60:e1:
f8:ee:ae:c2:f6:cf:50:2b:c9:9a:c9:17:3e:c9:35:42:dc:79:
38:11:45:9f:ed:85:8c:2c:df:73:f6:01:c9:15:cc:d9:3f:b0:
29:a8:2a:9b:e0:df:c8:4e:d8:d3:1d:3a:eb:24:dd:25:22:bf:
ea:ef:8e:23:78:81:a7:08:88:8f:47:67:88:0e:f6:8d:8c:cd:
7d:9b:d2:1d:40:e3:99:13:be:75:d8:68:4d:e3:51:b1:95:6e:
39:d4:6c:6e:46:d4:d4:b5:e3:20:66:91:b4:e0:f8:f8:8f:0b:
fd:5d:e3:c6:70:a0:37:be:f2:96:7e:b8:f9:79:86:5a:2e:77:
1c:e1:91:09:ca:07:a5:27:3e:0a:c6:6e:ff:d6:f1:91:a1:ed:
14:29:ae:80:87:69:c8:eb:f4:2d:f6:8e:6c:d4:9f:bb:96:44:
c6:8c:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 21:07:05 2026 by rpki-client