Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: XwLDsiyic7CmvLaUpri2UQCRaJBM4t8XqCiUQZbynuY=
Subject key identifier: 64:45:7A:47:B5:D0:48:08:3C:C4:3F:C9:0F:E3:59:EA:E6:69:64:9C
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 019CACEB8118CCA429C7B7E30F9D7A1BF0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0EC2
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: f1nU_RitPyLO36_PnZA-KwEjrxk.roa (hash: r/91ZEbv3l6yrw+0PR08C/xqKU/CqoOOpJu55heJw8o=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: okpnuCUX+2q2cGaA/qXg3tvkAX2dI2L+QV9yCa1Q+GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:81:18:cc:a4:29:c7:b7:e3:0f:9d:7a:1b:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=64457a47b5d048083cc43fc90fe359eae669649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:bf:a1:fc:64:6f:49:f2:b8:a5:59:b6:c9:
dc:b4:bc:75:23:75:e9:ba:1b:32:1d:45:c6:1d:f9:
f5:fd:89:7d:8a:33:9a:06:6c:15:8f:7a:2a:9b:a3:
0a:ef:29:d4:94:a3:a6:7f:94:13:c8:df:db:c6:37:
00:ac:a7:fc:d1:9c:5a:b8:ae:6d:a3:e7:05:5c:56:
9f:3a:6b:cc:c2:18:bc:50:1b:91:7d:e5:99:77:30:
d6:59:1e:04:8c:64:ca:c2:86:15:8b:ad:51:50:76:
a4:11:12:00:57:49:e9:0e:d6:0b:e2:e8:9d:f0:8f:
d7:7a:35:70:67:a9:9c:24:26:7e:09:69:fd:21:6f:
83:41:10:9c:7b:89:3e:df:6b:57:4c:8b:62:33:28:
c7:9f:2a:44:32:5a:1e:5c:57:59:51:6d:61:46:96:
0b:83:dd:ad:76:3f:f6:15:f2:e7:58:df:62:f5:3c:
72:85:d6:05:ae:48:ff:08:65:b1:a6:ce:5f:34:be:
d5:1f:d8:b0:16:9b:02:d8:ed:b0:f6:bc:6f:4a:2e:
6a:31:da:5f:ac:6e:57:9f:fd:ab:9c:85:bb:68:e9:
75:d2:a4:20:03:30:a1:9d:85:69:cb:62:e8:3a:56:
09:b0:fc:83:16:52:7d:8b:67:10:a3:e9:b0:43:ef:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:45:7A:47:B5:D0:48:08:3C:C4:3F:C9:0F:E3:59:EA:E6:69:64:9C
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:10:05:2d:86:e5:bc:d4:57:8d:37:46:7c:05:04:97:a8:6d:
c4:08:91:a3:f9:97:ef:f0:f5:c1:51:ab:9a:f2:ba:ba:7f:e6:
63:35:4f:0f:58:9e:aa:3e:6e:58:2b:81:9d:ec:62:80:1a:d5:
ba:ed:a0:c2:50:e9:31:85:69:96:0b:da:9b:56:aa:8d:e1:e9:
3b:21:fb:a9:7d:ef:6a:bd:44:34:c4:2d:52:2c:f5:a1:8f:7f:
78:c9:ee:47:5b:75:25:39:c0:c6:12:a0:58:b2:bd:15:b3:5a:
41:da:6f:98:61:c3:00:dc:60:39:b6:52:35:8f:6e:88:34:73:
29:38:90:53:e6:30:bf:8d:9f:8f:15:70:e7:55:d7:dc:79:a1:
f5:3d:a5:aa:93:67:29:85:f3:ed:50:00:fa:09:0f:74:11:72:
8b:20:4c:5b:6d:3d:51:01:6b:46:55:e7:70:24:be:71:c6:a6:
0a:7e:d9:69:85:25:e4:ba:77:ce:07:4f:ed:1c:88:e8:83:f7:
1e:38:69:72:f1:ce:bf:cf:e7:69:eb:a0:41:80:3d:35:e0:8a:
d4:ca:77:73:55:71:4a:1b:e5:fa:ed:ac:a6:da:ae:80:c2:e8:
dc:7f:a6:9a:93:19:3c:67:e9:5b:c2:8f:ae:1f:56:04:cc:86:
fb:12:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:47 2026 by rpki-client