Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: B7w7BfWHzGQmxOx0m6cld3ktVZ8C2S2NrXWPlWkctfA=
Subject key identifier: FB:D7:73:B5:CA:E8:8A:5F:E9:72:15:8C:34:97:1E:D2:6C:F8:03:C2
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019F30394B641DDF228502FA3B53801995B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 1995
Signing time: Sun 05 Jul 2026 03:01:28 +0000
Manifest this update: Sun 05 Jul 2026 03:01:28 +0000
Manifest next update: Mon 06 Jul 2026 03:01:28 +0000
Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: +OcNGWNRMWLb+HP38PhmIikKaPQ5AbxgYwrD3mU1wgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:39:4b:64:1d:df:22:85:02:fa:3b:53:80:19:95:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jul 5 03:01:28 2026 GMT
Not After : Jul 6 03:01:28 2026 GMT
Subject: CN=fbd773b5cae88a5fe972158c34971ed26cf803c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:dd:1e:0c:d7:31:de:ba:15:cc:1e:6d:d3:
23:ed:9d:e9:fd:65:8f:c5:ee:1f:6c:ff:c0:d9:21:
dc:db:c7:f9:0a:72:d4:31:96:93:a8:87:cf:96:d7:
ae:40:dc:31:b7:0d:9f:a4:3e:cf:1a:7e:c0:49:0e:
39:cf:f1:9d:8e:eb:4f:bc:73:48:48:02:1e:30:c4:
17:db:40:35:7c:c3:46:ea:27:44:4d:a5:f0:21:a9:
3a:12:da:6a:e3:8d:4b:04:c4:59:fa:3b:9b:db:bd:
01:57:40:64:72:10:0d:da:c6:dc:99:2c:31:cc:9f:
6f:71:24:43:af:33:2e:27:2f:da:82:aa:b5:fd:8b:
7b:03:b8:b5:42:92:56:35:a5:f1:f2:43:52:f0:e8:
78:af:29:50:58:8e:9e:72:f6:84:50:08:d8:86:04:
38:d5:e9:a9:f9:97:39:b2:f2:e2:7a:74:e0:06:c4:
35:62:0e:30:87:85:1b:2a:5b:24:92:be:14:79:7d:
df:de:64:fe:a3:e9:3e:00:c1:67:05:88:a2:19:ff:
a3:95:d9:86:6f:81:d7:bd:81:be:d2:df:21:70:27:
47:69:04:9d:e0:09:5a:6f:23:f2:de:ec:c3:a1:30:
8d:ba:61:e5:31:e6:aa:94:d7:24:39:c7:50:06:bd:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D7:73:B5:CA:E8:8A:5F:E9:72:15:8C:34:97:1E:D2:6C:F8:03:C2
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:fc:7c:98:7c:f9:c8:be:99:1b:54:12:17:1e:6c:0f:8e:
f2:b9:28:96:d4:f0:99:48:f2:fb:52:5b:f7:f4:03:91:e0:96:
ba:b4:f2:2e:8b:81:9a:c5:3b:6d:a1:62:5b:6f:2c:80:4c:1f:
f2:ef:b5:4b:87:89:61:30:e7:67:f2:65:91:94:95:f2:99:a3:
59:ec:b8:a1:98:cc:9b:26:8e:ac:14:4e:b6:4c:49:d6:23:69:
f0:9a:04:5f:05:b5:93:41:54:06:3d:59:b2:aa:ca:ff:e6:41:
96:09:37:b1:a4:53:6f:75:a0:15:0d:ca:48:8d:c7:60:3b:63:
b4:07:91:8f:56:68:d2:45:55:69:33:90:e0:33:5a:d7:03:56:
af:d2:fc:79:74:bc:6a:7b:61:08:d4:42:4f:bc:6a:28:d0:ec:
bc:44:09:6a:9a:e7:f8:32:96:68:9b:79:77:e0:70:32:f5:06:
a1:b9:f0:73:c8:4e:d0:e0:ba:1b:8f:c3:a4:b8:95:b4:30:cd:
f6:ad:9c:cd:f8:16:39:28:a9:6f:2d:de:3b:77:b4:c5:97:53:
a4:e3:48:a6:70:57:55:c5:85:a7:54:9b:6f:ea:5f:92:3b:87:
78:09:48:a2:78:04:28:45:af:d2:2d:22:f9:e0:3c:37:71:1b:
10:97:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:34:37 2026 by rpki-client