Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: FwO7RutXBemKf7Ejev5t8Zvp8Yu2qf20xDvfTJlack4=
Subject key identifier: 4B:31:32:44:A0:4F:EF:8A:2F:26:E7:D8:47:59:91:27:52:C9:9C:14
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 01A01FB0BB5C4484E49FDF88EBA3D007B9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 15:01:10 +0000
Manifest this update: Thu 20 Aug 2026 15:01:10 +0000
Manifest next update: Fri 21 Aug 2026 15:01:10 +0000
Files and hashes: 1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: ZwRBvW8K3xP3RhH74Dd7Mmts3VZxyH8XthL6wBGI25A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:bb:5c:44:84:e4:9f:df:88:eb:a3:d0:07:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Aug 20 15:01:10 2026 GMT
Not After : Aug 21 15:01:10 2026 GMT
Subject: CN=4b313244a04fef8a2f26e7d84759912752c99c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:49:6e:41:10:79:82:0c:19:06:f3:cb:00:1d:
e8:ab:a2:2a:45:8c:cd:c9:c7:4c:b2:a5:60:b2:48:
56:70:d8:bd:29:31:ed:06:d8:dd:61:28:de:a9:f4:
bb:98:a5:14:59:2b:6f:a4:94:4f:55:74:95:63:12:
4a:a5:90:9c:20:17:a6:3d:73:e6:19:3f:77:59:ce:
61:f4:0c:9d:7f:67:0d:4d:29:a7:52:37:88:c3:25:
6b:09:81:a2:d7:a1:bf:a1:2e:69:46:d8:00:22:35:
32:22:7d:14:b3:9c:bc:5e:03:9f:1d:56:1f:11:25:
22:38:dc:dd:57:98:91:54:88:c2:f2:88:4c:9f:9a:
3c:50:29:f5:a0:24:21:09:e9:c2:93:43:b9:1a:95:
0f:99:29:03:e6:54:a8:92:3f:1d:f9:65:22:ba:ff:
03:07:43:8b:43:d6:79:af:22:b1:32:df:94:60:8e:
d0:05:28:68:37:1c:3b:08:bd:27:65:33:6d:96:ec:
02:2f:2b:6f:d2:55:11:27:4a:42:b0:72:3f:76:a6:
a4:63:e5:84:a4:94:a0:cd:fb:4d:c1:da:dc:12:67:
87:8e:ca:53:0b:dc:62:cb:68:b4:7b:d8:87:04:30:
38:f7:6e:6a:37:9d:83:7d:89:4d:77:81:c4:a0:c6:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:32:44:A0:4F:EF:8A:2F:26:E7:D8:47:59:91:27:52:C9:9C:14
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:2b:40:61:99:30:d2:4d:fb:3e:c3:b6:15:53:37:c1:7a:
d4:58:cb:90:c2:ae:13:93:fe:b6:6e:c3:61:80:bd:32:92:1f:
1c:60:ac:7c:73:b6:bf:a3:cd:38:2b:1c:25:1e:47:41:7c:0e:
fa:06:97:90:98:7a:9d:21:4a:f0:72:83:0f:be:0d:11:bb:d0:
a6:30:2b:ab:84:71:8b:fe:69:3d:cb:09:9c:b1:14:b1:ed:5c:
04:dd:e0:c6:20:5a:d1:5e:80:06:00:14:06:63:90:63:52:6b:
48:cf:4a:8d:30:50:45:3f:15:32:9a:50:71:45:a5:8f:ae:af:
16:17:e7:9b:ba:81:cc:59:4f:59:ef:c0:01:ca:78:54:e8:58:
ae:77:cb:bf:c9:20:ae:07:41:68:7a:46:e4:ca:4b:f9:dd:d1:
26:16:a2:c5:be:d0:0c:d8:0c:be:2d:bb:e1:c4:25:44:7a:54:
f3:d2:99:94:31:14:8a:ea:82:62:0d:15:4c:3b:29:0f:54:da:
a0:c9:d9:8d:5e:2e:40:e8:bd:0b:63:1f:44:69:1e:1c:fe:d9:
fd:bb:81:41:b0:f8:b9:6e:a1:e8:60:b0:88:b2:30:7c:ce:ae:
31:ed:8f:e3:3c:28:a1:14:05:8f:92:4e:03:42:9b:3d:96:c7:
c2:aa:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:08 2026 by rpki-client