Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: f8Rnutj1FCG+I2LdVa+++ElJ1ZRABin3c1XUwskXTNA=
Subject key identifier: 70:D1:AD:1C:6F:7F:22:6B:94:69:83:F5:2B:3A:B4:E0:3E:73:F2:F2
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019CAD2262AD9F274A3EEEEBADD73408AFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0E0F
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: 7x3dSD5Jrgpslpj3l1ikbbN4PhL4mevhdGc6M53mMVY=)
2: tHyycM5QCv8W9vwXc_sS0QuTCdY.roa (hash: /5xLYAkh1elAbGPbQgHDZyios7R0OiSG4E8AdgZhCYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:62:ad:9f:27:4a:3e:ee:eb:ad:d7:34:08:af:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=70d1ad1c6f7f226b946983f52b3ab4e03e73f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:a1:7e:40:df:bb:cb:30:37:19:d5:10:86:
3e:18:da:ba:2e:9d:87:ac:f6:d3:1e:16:c6:22:15:
7d:c8:7e:e2:ad:ae:f8:73:01:4d:77:de:ae:fe:0e:
6b:c1:73:b5:bc:fe:e0:e2:e6:63:a0:e6:be:e6:d6:
ff:16:2e:74:ef:0f:54:a7:aa:d7:e5:5c:67:f6:bb:
52:68:95:b0:74:ad:83:5f:23:62:0f:34:29:dd:39:
20:5a:73:2b:ce:35:86:4e:83:7b:9f:6e:f1:fe:7c:
eb:63:c2:59:d9:c8:ed:31:70:11:aa:43:46:ad:df:
57:49:b6:35:9e:10:77:6c:42:45:4e:67:5f:63:98:
98:0e:7d:f1:6d:47:b5:28:ee:a3:63:86:96:b5:b2:
8c:3c:6b:5c:9e:24:ec:a5:fa:94:d6:16:31:8a:5f:
cb:06:d5:1a:28:48:91:27:dc:cc:71:41:c9:b3:08:
48:ff:8c:ec:77:56:1e:85:40:6e:77:0c:2a:68:fa:
4e:aa:92:5a:84:2f:2f:bb:f5:b9:f0:cf:59:93:db:
83:ad:44:86:96:06:79:ff:2d:98:07:9a:7e:44:17:
06:c1:e9:f8:23:41:ab:54:e8:2f:57:e9:20:ae:c8:
8f:42:f5:af:ab:f2:80:7d:a6:18:8a:53:77:c6:9b:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D1:AD:1C:6F:7F:22:6B:94:69:83:F5:2B:3A:B4:E0:3E:73:F2:F2
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ea:14:ec:3d:b3:90:33:31:e8:cf:70:16:c4:26:5a:98:e3:
9b:84:80:ad:b6:1d:9a:9b:99:64:c9:a6:19:6c:d9:84:24:07:
1a:8d:95:bf:f6:12:c7:ea:af:89:9d:77:b7:99:40:38:c3:85:
6b:05:1b:5c:f6:a9:df:1a:ed:1f:d4:e6:24:ae:9d:be:a0:59:
74:b9:ac:bd:9a:db:91:45:4d:86:5d:ae:6a:7e:44:79:50:49:
70:74:ac:04:d9:8f:80:85:de:75:ff:b2:5e:14:7e:2d:d8:09:
67:d5:7d:39:6e:9a:89:28:c7:3e:01:ac:93:36:cd:e7:f9:89:
d0:50:ee:c3:26:1f:5c:b0:67:9b:f6:f9:66:c7:91:9a:cc:de:
a7:b1:2a:ee:cc:98:77:67:be:c0:37:6e:c4:a5:1a:53:ef:1b:
15:2d:2b:5d:85:a6:1a:e7:ab:f5:81:13:e1:3b:4e:87:0d:3b:
54:ca:3a:0a:7d:b8:52:b4:a5:c1:2c:d6:ac:53:ed:d6:32:5f:
46:c6:96:db:8d:58:99:56:22:09:62:24:3e:70:7d:2b:ac:ab:
00:e0:e6:5c:c8:35:01:9b:65:34:3e:1c:82:de:4d:eb:35:0c:
33:40:39:43:a8:43:47:7f:ed:3a:90:6e:30:16:8c:a9:99:97:
af:58:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:47 2026 by rpki-client