Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File: sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier: Jpz8/3WqQ202J/Xq8IfyjaPq1MlgbppkeZIuPjTBngE=
Subject key identifier: 34:03:E6:42:5C:3B:96:B7:8C:09:0B:1C:A7:DB:29:6C:D4:99:A4:FC
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer: /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial: 019D386641FA01789B09D12FC8F3943E1460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: 5XRD+06yOv2mwAHvwiA7DqOY9qKc/bJ+UMLyloDRDlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:41:fa:01:78:9b:09:d1:2f:c8:f3:94:3e:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=3403e6425c3b96b78c090b1ca7db296cd499a4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:03:6b:02:eb:a7:a7:53:70:97:ea:13:69:
50:e6:74:24:3a:a4:98:d6:ee:89:d4:23:c1:ed:ca:
bb:4c:8a:b0:10:3b:66:fd:b4:2b:38:87:e3:b4:25:
37:00:3f:1b:39:ad:df:24:df:27:cc:17:7b:f8:bf:
09:aa:13:7d:c7:7e:ee:56:37:39:ea:f2:5b:17:a9:
e4:ce:01:0b:22:84:97:a5:b7:75:36:fc:41:0a:13:
56:ba:48:d0:60:b2:71:a3:86:e8:95:ca:73:e1:25:
3d:cb:46:c7:f1:07:65:88:59:b0:89:63:a0:df:09:
7a:3a:c0:4a:89:9d:82:13:c3:29:aa:6e:f2:05:64:
21:ef:67:58:22:4e:27:55:83:16:cd:45:89:57:de:
a8:89:89:ab:ed:59:20:3a:df:66:76:8d:c3:95:36:
77:fa:cf:90:d4:0d:f2:e1:c1:b6:75:1d:4e:62:5b:
00:b1:c4:a7:27:2d:3a:6f:80:65:32:53:f3:1b:aa:
e2:9e:d5:21:cd:6e:49:7c:0d:a9:17:21:14:7b:d0:
76:b6:94:a4:60:ed:7a:18:93:d1:6c:04:cc:9c:1d:
8e:1c:b8:9c:0a:2e:56:5a:6f:49:02:d0:6a:de:1d:
b9:6a:d6:5c:d2:53:76:de:74:9a:c9:4d:19:3e:46:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:E6:42:5C:3B:96:B7:8C:09:0B:1C:A7:DB:29:6C:D4:99:A4:FC
X509v3 Authority Key Identifier:
keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:83:79:d0:64:ae:18:51:aa:0d:f2:70:81:5c:ec:d5:60:
7e:8c:80:05:8e:f8:01:9c:ce:81:e8:5e:7d:4f:ff:f9:bc:df:
ba:bd:31:31:6e:43:72:e4:7f:53:70:15:c3:1c:d3:84:43:39:
f9:d8:5e:78:6c:a5:bd:09:99:8d:5d:2f:74:20:d4:c2:50:d3:
af:ef:fe:0b:38:ec:43:72:cb:23:30:d9:1f:ec:fa:56:81:ca:
ba:cc:27:5f:8b:91:d1:30:2c:86:e4:3d:d3:ae:82:62:96:05:
a6:18:49:57:77:fa:0f:4d:68:8b:a0:4b:9f:24:bb:7e:74:1b:
c8:b7:90:77:91:8b:24:fa:7b:6c:40:cb:e3:c8:b9:ca:f6:a4:
86:ea:4e:05:2d:1e:9e:d3:ca:0b:6b:43:7a:14:b7:1b:6a:15:
d6:ad:5a:cb:bd:d3:51:dd:61:ae:68:ce:cd:47:ad:66:8c:95:
21:59:11:3d:2a:68:d1:ce:bc:41:7d:8d:18:fe:7b:fb:0d:99:
74:67:cf:b4:63:de:bd:03:e9:b2:9b:d7:47:16:5f:c1:36:23:
c9:56:50:61:3b:76:e3:d6:12:88:50:a7:ba:a1:34:e6:22:86:
3a:53:0a:88:da:8b:5d:cc:b2:35:25:fa:bc:59:13:46:16:82:
fa:cf:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:13 2026 by rpki-client