Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: MeFMRYMjOnqzdXL95HtKqsT4iyHYMMmPZD894WHiNHQ=
Subject key identifier: 5F:39:B7:F9:65:F2:25:CD:5B:64:10:26:73:E9:EE:02:3D:59:D1:96
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019FAD88E3638BCDC6084405F1C8902BE6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0F9D
Signing time: Wed 29 Jul 2026 11:00:57 +0000
Manifest this update: Wed 29 Jul 2026 11:00:57 +0000
Manifest next update: Thu 30 Jul 2026 11:00:57 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: 22e9zPicIU/GEqTRVZxRoqem9mc0GS+pyo9+dEEk/IU=)
2: Z07oGH4qALSlhCqp4P64q2iB1us.roa (hash: Z4N+HOJqsVfo6FvilkavZbY8gKGAnvRy13Fs0EXFZTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:e3:63:8b:cd:c6:08:44:05:f1:c8:90:2b:e6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Jul 29 11:00:57 2026 GMT
Not After : Jul 30 11:00:57 2026 GMT
Subject: CN=5f39b7f965f225cd5b64102673e9ee023d59d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:32:b4:44:42:13:a0:e5:b4:b7:88:a2:ea:
72:7e:90:80:3a:82:a4:29:d8:46:88:60:6e:dc:17:
86:85:c1:e5:d0:af:1a:06:95:f3:eb:27:c6:1c:15:
e1:27:50:1d:b2:c4:4f:5e:56:06:63:87:9c:12:a7:
3c:c9:32:2b:cc:f4:e4:63:8b:a1:94:49:b2:a5:1a:
4d:ec:b0:25:17:54:52:20:96:7f:d7:4d:79:bb:9d:
33:10:55:c8:49:92:4a:a3:97:12:39:17:ef:a0:95:
50:08:f8:fd:d8:df:ef:8d:5a:8c:ce:2e:81:a0:d2:
98:82:26:5f:df:44:9f:98:ad:c1:5e:a1:46:a1:23:
36:86:ce:21:f7:e1:80:26:e3:88:01:fb:c5:26:a5:
e4:37:32:38:6a:be:c2:1a:55:45:f8:04:3c:bf:13:
e5:8b:e9:95:b3:f6:5a:ed:e0:06:48:c1:67:3c:c4:
24:83:87:f9:21:ec:0e:76:e7:3f:b9:2f:f7:bf:e8:
b7:2a:97:a4:fc:dc:4e:c9:87:cc:38:6d:14:d7:8f:
75:65:a9:a4:5e:65:a6:7c:72:7f:51:eb:5c:90:51:
e4:22:52:65:87:9f:74:22:94:18:76:50:82:19:88:
51:c2:d5:89:35:2e:b3:6d:16:d7:40:3f:bf:fe:0e:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:B7:F9:65:F2:25:CD:5B:64:10:26:73:E9:EE:02:3D:59:D1:96
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2b:18:96:9b:3d:48:36:67:1d:ae:97:84:9e:56:36:02:22:
e7:5d:42:5d:60:70:0a:1a:73:f2:61:6f:7f:cd:65:10:17:51:
97:25:13:63:b9:a7:95:dd:8f:d7:0c:77:09:5a:18:fa:6c:d2:
b1:68:d2:a0:21:3b:aa:79:fc:df:12:de:80:e8:ef:f4:14:5c:
82:5c:f5:d2:bb:e7:18:d6:49:4d:c5:45:41:f1:46:7c:75:78:
26:1e:53:97:92:ec:f5:3a:df:06:81:d9:91:85:4f:d1:ac:06:
c7:0c:a1:77:76:44:c1:15:92:22:8c:c3:73:6c:6b:be:80:62:
c9:e7:ef:0b:0a:b5:a3:af:d0:85:aa:d6:1f:6c:d2:ab:1b:6a:
fe:fe:2a:bd:06:a5:b5:e1:8b:37:ee:ed:96:a2:e7:1f:ca:5f:
c7:1a:08:a3:0b:58:f1:b7:8d:d1:16:cf:d7:a5:4a:e9:5c:25:
9e:57:7c:bc:a1:8e:ba:b4:90:4b:60:00:02:20:e5:16:98:2e:
33:75:84:1f:dd:19:23:1d:2a:8c:5a:70:67:8f:df:a5:b6:1c:
32:19:84:65:d9:88:55:51:09:b8:d9:22:4a:21:a4:7f:73:67:
1e:12:2b:d0:6a:44:ca:3f:f2:0e:27:63:3d:c0:af:3c:ac:04:
0a:46:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:32 2026 by rpki-client