Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
File: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft (raw, json)
Hash identifier: GhOPLDxIo2Q5IxBgo8pw769dc2Z9kuwm5wXaR4VE5Os=
Subject key identifier: C7:EF:FB:E3:23:C6:01:AE:2E:6D:E3:A1:82:EE:BF:39:10:C2:67:87
Authority key identifier: B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
Certificate issuer: /CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Certificate serial: 019FAC770512E2DDD7F56A30F07FCABA6A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:48 +0000
Manifest this update: Wed 29 Jul 2026 06:01:48 +0000
Manifest next update: Thu 30 Jul 2026 06:01:48 +0000
Files and hashes: 1: C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa (hash: pNsPtp3Jh4QV8tjlNFIUx759yR4vmvZaCGaiFZ7nHBI=)
2: X_U4PTICjxMwz_zzgRb2YgODG9k.roa (hash: v8UPV4SYAEOIqRdsOLJFm+f1ryb3otUE2YTskYRIYtM=)
3: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl (hash: x3fLqOJ2ikHrwkzU/eHboKFAj+Wl0HPSxYwOOUPOpjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:05:12:e2:dd:d7:f5:6a:30:f0:7f:ca:ba:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Validity
Not Before: Jul 29 06:01:48 2026 GMT
Not After : Jul 30 06:01:48 2026 GMT
Subject: CN=c7effbe323c601ae2e6de3a182eebf3910c26787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:f1:a6:a5:3f:b5:5a:d9:52:71:82:2b:4c:
cb:32:8c:d9:61:ef:54:3b:41:71:5c:23:74:eb:f3:
28:d7:1e:fe:a1:0f:46:62:15:62:9b:81:63:3d:ab:
97:c7:9a:81:6b:7b:ba:5d:fb:41:a3:b5:67:29:64:
fb:6a:3f:31:08:bb:ff:d8:8b:c8:68:0c:43:9b:dd:
74:e5:d0:b7:b4:38:7d:98:8d:3a:ea:a3:5e:49:45:
36:c5:43:05:0d:80:93:e2:b0:da:41:24:52:26:b3:
29:49:3f:2b:3e:82:38:8e:f6:65:f9:2a:5d:27:0d:
2f:0c:98:e8:32:7a:40:8a:4b:2f:fc:7d:bc:e9:a1:
51:e5:4d:6e:4b:8b:c6:94:db:3f:aa:1b:63:5c:64:
59:be:9b:7f:9e:8d:be:27:08:ec:32:b8:f3:02:7f:
8b:87:f5:91:6b:62:37:5b:9b:5d:9e:41:3a:b7:63:
0b:4d:3b:44:8d:7d:1a:30:6e:c7:99:9a:ee:e9:09:
a4:aa:42:82:da:25:0d:76:a4:29:82:17:84:92:ed:
ce:bc:f1:10:6a:42:28:ec:1e:58:19:a7:b3:26:20:
ea:69:4d:97:b0:16:8f:f4:9f:79:d4:7c:52:05:7f:
04:75:28:98:8a:f0:2b:75:b8:d6:49:f4:37:2e:1e:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:FB:E3:23:C6:01:AE:2E:6D:E3:A1:82:EE:BF:39:10:C2:67:87
X509v3 Authority Key Identifier:
keyid:B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ca:6a:ee:4e:3e:95:7c:ff:0d:77:6f:b5:5b:ca:fa:94:81:
61:fb:37:36:fb:44:1a:55:91:ca:0b:76:98:35:5e:14:87:e7:
74:3a:f3:1a:18:af:99:1b:21:37:69:a3:52:8f:91:7f:98:45:
a3:79:f0:3d:22:9f:48:6b:5c:a4:68:70:ef:7d:b9:ce:53:fc:
b7:81:66:3e:b6:59:2e:6e:2f:5f:f2:4a:a8:9b:52:04:90:8d:
83:03:3a:fd:70:81:5c:f7:8c:e4:51:3f:a5:d4:a7:16:93:e2:
5a:a2:3d:9f:7d:b2:3c:ac:61:6e:5f:d4:74:bb:30:26:24:ba:
50:af:24:1c:d7:df:da:c5:31:15:f8:15:2c:d5:1a:12:e8:ae:
69:21:37:93:dc:e7:e3:a4:50:fc:66:e1:4b:17:28:3d:91:36:
c1:e3:1e:69:c2:02:b1:32:bc:a8:c8:a5:36:fe:78:2b:83:b4:
9c:d8:77:f9:9b:87:4e:3c:ef:5b:42:70:6d:44:f9:ee:58:ab:
eb:8e:30:01:ff:1a:72:54:0b:31:2f:11:af:ee:48:91:33:88:
d9:27:f2:a3:1d:07:c3:e1:9f:40:76:0d:77:34:29:e2:65:39:
88:18:f9:60:eb:b4:48:1a:40:3c:bb:13:9a:75:e1:f5:e5:0c:
02:38:d8:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdwUS4t3X9Wow8H/KumpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYjM2MjY3NzgzZmEzNjE1ZjI4ZmYwYTE4NWU3ZTEzNDY3
YzgyZTMwHhcNMjYwNzI5MDYwMTQ4WhcNMjYwNzMwMDYwMTQ4WjAzMTEwLwYDVQQD
EyhjN2VmZmJlMzIzYzYwMWFlMmU2ZGUzYTE4MmVlYmYzOTEwYzI2Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOjxpqU/tVrZUnGCK0zLMozZYe9U
O0FxXCN06/Mo1x7+oQ9GYhVim4FjPauXx5qBa3u6XftBo7VnKWT7aj8xCLv/2IvI
aAxDm9105dC3tDh9mI066qNeSUU2xUMFDYCT4rDaQSRSJrMpST8rPoI4jvZl+Spd
Jw0vDJjoMnpAiksv/H286aFR5U1uS4vGlNs/qhtjXGRZvpt/no2+JwjsMrjzAn+L
h/WRa2I3W5tdnkE6t2MLTTtEjX0aMG7HmZru6QmkqkKC2iUNdqQpgheEku3OvPEQ
akIo7B5YGaezJiDqaU2XsBaP9J951HxSBX8EdSiYivArdbjWSfQ3Lh76mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfv++MjxgGuLm3joYLuvzkQwmeHMB8GA1UdIwQY
MBaAFLGzYmd4P6NhXyj/ChhefhNGfILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2JOaVozZ19vMkZmS1A4S0dGNS1FMFo4Z3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt
NTllNmE2ZDRkNTc2LzEvc2JOaVozZ19vMkZmS1A4S0dGNS1FMFo4Z3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2
LzEvc2JOaVozZ19vMkZmS1A4S0dGNS1FMFo4Z3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScpq7k4+
lXz/DXdvtVvK+pSBYfs3NvtEGlWRygt2mDVeFIfndDrzGhivmRshN2mjUo+Rf5hF
o3nwPSKfSGtcpGhw7325zlP8t4FmPrZZLm4vX/JKqJtSBJCNgwM6/XCBXPeM5FE/
pdSnFpPiWqI9n32yPKxhbl/UdLswJiS6UK8kHNff2sUxFfgVLNUaEuiuaSE3k9zn
46RQ/GbhSxcoPZE2weMeacICsTK8qMilNv54K4O0nNh3+ZuHTjzvW0JwbUT57lir
644wAf8aclQLMS8Rr+5IkTOI2Sfyox0Hw+GfQHYNdzQp4mU5iBj5YOu0SBpAPLsT
mnXh9eUMAjjYNw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:12 2026 by rpki-client