Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File: sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier: xOwvDtMBXG4JkdQIGygyYAHmJOpYsvoSQnt5crERor0=
Subject key identifier: 38:C3:04:24:18:D2:C0:07:B1:0A:8C:31:CF:8A:00:41:1E:76:85:CC
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer: /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial: 019FFF131B6722FDE6FF5DB8742ED1936B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number: 0217
Signing time: Fri 14 Aug 2026 07:01:09 +0000
Manifest this update: Fri 14 Aug 2026 07:01:09 +0000
Manifest next update: Sat 15 Aug 2026 07:01:09 +0000
Files and hashes: 1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: CDH+7S0xzAFNFt6u/yswXL2ZYGvpAGfw0WxJZVpzz90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:13:1b:67:22:fd:e6:ff:5d:b8:74:2e:d1:93:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Validity
Not Before: Aug 14 07:01:09 2026 GMT
Not After : Aug 15 07:01:09 2026 GMT
Subject: CN=38c3042418d2c007b10a8c31cf8a00411e7685cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:21:dd:a3:1c:da:58:22:44:36:34:91:6a:
4d:05:4d:37:c0:23:db:c2:0d:fc:64:a5:7e:08:37:
e7:0a:f6:d7:31:83:b7:8b:03:f2:c1:e4:46:2c:9e:
54:c3:92:b5:9c:d1:ad:05:03:b8:35:de:44:29:9e:
ac:d6:d2:29:38:94:eb:dd:3f:2c:a3:1e:8e:9a:48:
ee:4b:01:69:d3:01:22:a4:47:da:a7:54:ef:8e:37:
6d:f4:1b:19:b4:a1:10:d6:be:8c:85:a6:88:cf:85:
70:3b:43:55:46:95:af:88:e8:a2:d9:5b:8a:1e:83:
32:10:1e:81:c2:66:ce:8b:55:68:1a:0e:d9:27:00:
18:fa:f5:4c:c5:7d:82:85:1a:75:48:db:f8:15:4c:
a2:60:e8:2f:9b:ab:ba:e1:69:7d:28:06:6d:c4:5f:
26:08:79:ac:57:9d:e0:a3:f2:f3:9b:6e:d1:78:60:
e2:ce:84:fc:6c:e4:e9:2a:b8:03:f3:37:66:c2:2d:
85:8d:2e:51:14:d0:61:f4:f1:13:7a:3c:62:d2:16:
7f:46:a7:f8:58:aa:5b:f8:ac:53:6a:99:72:ae:69:
1c:1b:6e:0c:d7:cb:92:4d:bc:6e:20:57:e8:45:25:
5e:f0:61:ec:f6:54:c7:0d:b5:55:2e:72:42:af:08:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:04:24:18:D2:C0:07:B1:0A:8C:31:CF:8A:00:41:1E:76:85:CC
X509v3 Authority Key Identifier:
keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:0d:11:6c:b2:45:9a:0c:c0:72:98:af:9d:fa:86:e9:ed:
7b:b2:d1:b5:43:7b:22:c6:28:c7:3f:7a:8f:54:8a:ca:d1:80:
4d:d6:2d:d6:f5:6c:15:19:7b:21:79:b6:36:fb:c2:0e:e0:79:
3e:fd:55:7e:32:28:65:d4:69:0c:00:a5:e2:6c:b5:53:1d:dc:
de:1e:dc:66:ba:19:8c:83:2f:47:e8:51:2e:80:a6:1a:95:65:
81:07:eb:2a:e5:c2:9f:20:d2:71:f3:ed:e3:3a:a2:a2:9d:ff:
3f:fd:ad:5e:bf:3f:69:ea:b8:c3:17:95:d7:0f:1f:9b:ae:e2:
ef:5e:1c:d2:fa:dc:36:97:45:46:17:4d:d3:5b:da:7f:c7:c1:
8a:42:80:b7:94:92:51:31:8e:80:bd:a9:a4:dc:71:0d:3e:1e:
eb:58:4e:a9:84:56:ed:be:f9:be:21:e8:b1:5a:7a:b4:1f:0e:
17:10:c9:06:94:cf:db:26:7a:54:52:a4:27:b3:ce:4b:eb:34:
d8:9b:3e:91:4f:ae:dd:91:e2:44:1e:c5:5b:06:8f:53:37:d9:
ef:20:65:76:5a:81:76:bf:58:ee:c9:16:57:9e:a4:54:72:47:
90:86:c9:bf:75:43:50:62:f6:2e:04:2a:ff:0e:ac:88:60:1d:
e7:8f:e8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 11:14:43 2026 by rpki-client