Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: S46Cq4ZbISh/dPO0HxeOfwyP2Ry3gji9wN4nXsZA3bo=
Subject key identifier: C0:2E:8E:AB:00:C2:18:C8:0C:38:AF:85:74:B8:4D:C6:3A:EA:A8:3E
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 019D9C633E78037C51032E8E65E9D770E171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0F3E
Signing time: Fri 17 Apr 2026 17:00:42 +0000
Manifest this update: Fri 17 Apr 2026 17:00:42 +0000
Manifest next update: Sat 18 Apr 2026 17:00:42 +0000
Files and hashes: 1: f1nU_RitPyLO36_PnZA-KwEjrxk.roa (hash: r/91ZEbv3l6yrw+0PR08C/xqKU/CqoOOpJu55heJw8o=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: E3frBk8dPC3qmvUte3QkfPFAOfXolF1tjcU5ZP6KauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:3e:78:03:7c:51:03:2e:8e:65:e9:d7:70:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Apr 17 17:00:42 2026 GMT
Not After : Apr 18 17:00:42 2026 GMT
Subject: CN=c02e8eab00c218c80c38af8574b84dc63aeaa83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:d4:a6:61:2b:9a:b6:97:db:cd:8c:0c:c4:
01:97:2c:4c:1a:67:f5:a4:21:e0:2e:64:b6:85:9a:
95:53:9b:fc:2c:30:fa:3e:5b:79:52:d6:06:70:8d:
95:ea:4f:b1:68:8f:e3:d8:92:e2:ac:55:cd:b5:27:
c2:83:fe:36:c8:6f:56:da:9b:70:67:72:99:04:7c:
35:51:39:ab:50:26:c3:8c:ff:80:d6:0d:e6:53:a1:
e1:93:52:93:8a:d1:f8:de:d1:38:54:aa:4c:94:85:
78:d7:b1:f1:1b:2d:1e:7d:31:1e:e8:c1:8e:01:73:
1b:c3:36:79:11:50:3a:16:7c:c1:ef:be:de:02:20:
cf:5b:40:49:b4:46:b1:78:61:92:3c:58:8a:b4:11:
03:b3:e2:21:5e:d6:9c:fe:4a:8f:36:01:8f:0c:91:
05:1c:fc:91:07:5e:8e:a4:62:48:85:aa:53:cc:2a:
75:a0:5f:e2:93:11:22:05:ed:28:2e:ed:d3:dd:00:
7d:98:1a:63:a8:b0:4f:dc:42:99:15:01:93:69:a3:
97:5a:71:0c:3e:19:b8:ee:f7:2c:15:85:61:3c:2a:
e1:9f:3d:0a:dc:8a:54:3d:a7:18:df:ee:ba:8d:47:
1d:8c:fc:af:b6:3e:55:84:a9:7e:c1:4b:aa:3e:03:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:8E:AB:00:C2:18:C8:0C:38:AF:85:74:B8:4D:C6:3A:EA:A8:3E
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:8f:48:bc:74:28:bc:a7:e8:ec:5f:e2:18:42:e7:f8:8c:
ec:83:23:30:13:63:2b:0d:54:f1:bc:13:e8:3d:df:70:a9:71:
25:86:d0:ee:13:f1:b5:01:ed:e5:3e:d8:ef:a0:13:de:9f:9c:
af:07:c3:eb:cb:29:3b:a3:e9:08:98:21:79:3f:85:ee:7b:a5:
ee:be:fb:db:07:35:ee:7b:3a:10:10:03:ca:29:3d:8d:89:ef:
6b:4d:8a:0c:98:49:40:6f:29:26:68:e7:30:2c:ff:84:ae:40:
4e:67:6b:f4:4c:38:f8:e2:f9:26:c8:11:ad:70:bd:e9:79:19:
10:4e:81:ac:6a:7b:9e:4f:78:9a:8c:da:9b:4a:36:2d:24:d6:
ba:a2:3e:b2:2c:b2:3d:8f:94:c9:40:1f:de:df:69:25:d5:28:
ba:1c:34:9d:64:37:5b:9f:7f:73:6c:b3:81:71:37:9a:ea:cc:
71:a6:1e:b0:c8:a1:f6:95:24:ae:a9:5a:63:f6:02:d3:9c:91:
01:77:63:a2:ca:3a:be:6c:13:89:41:2a:14:32:ef:24:f3:eb:
52:4e:54:2a:0f:b7:d1:38:7e:24:ff:b6:3b:7f:6c:b2:1c:00:
bb:35:b6:b0:3d:6b:24:f2:50:63:eb:a3:9f:64:68:6c:c7:c3:
d6:f6:40:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cYz54A3xRAy6OZenXcOFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYjIwMTM2M2NjYzU1NmJlYzg4NzAyNTY5ZDhkMzgxYTBl
ODk1NjYwHhcNMjYwNDE3MTcwMDQyWhcNMjYwNDE4MTcwMDQyWjAzMTEwLwYDVQQD
EyhjMDJlOGVhYjAwYzIxOGM4MGMzOGFmODU3NGI4NGRjNjNhZWFhODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2HUpmErmraX282MDMQBlyxMGmf1
pCHgLmS2hZqVU5v8LDD6Plt5UtYGcI2V6k+xaI/j2JLirFXNtSfCg/42yG9W2ptw
Z3KZBHw1UTmrUCbDjP+A1g3mU6Hhk1KTitH43tE4VKpMlIV417HxGy0efTEe6MGO
AXMbwzZ5EVA6FnzB777eAiDPW0BJtEaxeGGSPFiKtBEDs+IhXtac/kqPNgGPDJEF
HPyRB16OpGJIhapTzCp1oF/ikxEiBe0oLu3T3QB9mBpjqLBP3EKZFQGTaaOXWnEM
Phm47vcsFYVhPCrhnz0K3IpUPacY3+66jUcdjPyvtj5VhKl+wUuqPgOyXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAujqsAwhjIDDivhXS4TcY66qg+MB8GA1UdIwQY
MBaAFLGyATY8zFVr7IhwJWnY04Gg6JVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81YWU4YmYtZjk5OS00Yzc0LTlmNDYt
MzI1NjI3YzQ2NmUyLzEvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81YWU4YmYtZjk5OS00Yzc0LTlmNDYtMzI1NjI3YzQ2NmUy
LzEvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhyPSLx0
KLyn6Oxf4hhC5/iM7IMjMBNjKw1U8bwT6D3fcKlxJYbQ7hPxtQHt5T7Y76AT3p+c
rwfD68spO6PpCJgheT+F7nul7r772wc17ns6EBADyik9jYnva02KDJhJQG8pJmjn
MCz/hK5ATmdr9Ew4+OL5JsgRrXC96XkZEE6BrGp7nk94mozam0o2LSTWuqI+siyy
PY+UyUAf3t9pJdUouhw0nWQ3W59/c2yzgXE3murMcaYesMih9pUkrqlaY/YC05yR
AXdjoso6vmwTiUEqFDLvJPPrUk5UKg+30Th+JP+2O39sshwAuzW2sD1rJPJQY+uj
n2RobMfD1vZAew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:57 2026 by rpki-client