Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: n8rhG7pT5U/kPYUiiDp2Cow5uwQA9FXd6+lGVjJ6pZs=
Subject key identifier: 8C:EE:8C:20:97:27:B5:C3:31:29:DA:33:A7:36:52:50:2E:AE:A3:6D
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019DA454218E331F053A6A74B04D24192A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0E8F
Signing time: Sun 19 Apr 2026 06:01:10 +0000
Manifest this update: Sun 19 Apr 2026 06:01:10 +0000
Manifest next update: Mon 20 Apr 2026 06:01:10 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: OC/ap5jmIBzvqWoL7cF7YBqUIzPRF2YWosK5VfiQ2dI=)
2: tHyycM5QCv8W9vwXc_sS0QuTCdY.roa (hash: /5xLYAkh1elAbGPbQgHDZyios7R0OiSG4E8AdgZhCYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:21:8e:33:1f:05:3a:6a:74:b0:4d:24:19:2a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Apr 19 06:01:10 2026 GMT
Not After : Apr 20 06:01:10 2026 GMT
Subject: CN=8cee8c209727b5c33129da33a73652502eaea36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:8e:eb:35:d8:8b:45:b2:81:ab:b7:ac:a1:
a6:04:ad:dd:89:86:3e:53:67:f1:70:aa:3f:ba:09:
09:51:bf:02:b4:33:18:0f:6d:4d:f4:e8:01:b6:e2:
7e:e1:5a:e2:60:93:c9:c6:28:0e:c4:69:48:19:80:
a2:d4:8e:aa:80:9c:72:e9:24:34:a7:d9:83:b5:0c:
79:99:d2:5f:df:5f:42:02:41:77:c9:39:54:49:81:
18:d6:5d:fe:9d:77:21:12:ca:ad:ff:30:2b:7f:ec:
74:ee:fa:91:a8:91:71:0c:53:43:e7:a5:34:98:e6:
81:d1:33:ec:25:a5:98:6d:cd:d5:fa:ba:f9:01:86:
8e:f8:7a:a8:4a:89:84:04:7d:2c:aa:1d:67:20:44:
04:d4:05:dd:5d:4f:db:f9:91:40:81:b7:ca:a1:c2:
33:6a:9b:7a:b9:45:60:46:d9:e3:f0:9e:37:17:c0:
70:ed:36:10:42:b4:be:ad:5f:ae:9b:cc:a7:ca:31:
32:bb:7a:aa:49:12:cc:9c:8c:a8:b0:57:f7:a0:e0:
2a:84:05:4d:57:38:95:c3:1e:ac:32:23:28:45:3e:
13:34:1a:a4:fc:74:de:51:87:de:f4:dd:9c:8f:95:
0f:7f:3f:76:b4:9a:b3:e9:3e:7f:33:36:f8:26:01:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:8C:20:97:27:B5:C3:31:29:DA:33:A7:36:52:50:2E:AE:A3:6D
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d8:6b:26:85:c3:56:83:91:f7:bb:62:56:94:c3:0c:e2:7e:
de:45:37:cc:df:ff:ca:f7:5e:05:f4:01:38:54:27:5c:bd:c0:
24:82:22:ee:23:de:06:0e:39:40:2b:b9:5f:de:a0:ca:b5:13:
69:ae:02:83:30:bd:cb:c9:cc:aa:a1:de:f1:37:67:96:d8:4f:
ea:c5:67:0c:2c:d0:94:28:b7:1d:04:d0:7a:00:70:7b:79:73:
dc:c9:6f:d5:4a:d0:56:93:70:c3:fe:b0:b1:c8:0a:cd:ba:ed:
56:05:c9:6f:07:1b:1b:42:da:3f:bb:55:11:16:d7:c9:56:14:
9b:c9:ba:e9:7d:75:76:af:20:58:37:79:f2:fd:9c:9b:57:e8:
2b:93:bf:6f:51:1b:7f:73:73:94:81:10:09:8b:ab:0e:74:f1:
6b:e4:8f:ec:7d:43:ca:31:3f:86:95:12:51:28:43:ea:6a:77:
b9:90:97:af:47:77:3b:a2:6a:91:33:09:8c:5b:b4:b1:d9:f6:
31:30:98:2e:5e:ec:09:fb:6f:69:8a:7e:4c:b4:8d:a0:40:d1:
26:10:cf:f0:81:f6:fe:ec:56:60:fd:b8:21:b3:7b:8d:f7:2b:
97:f2:a3:ad:e1:f2:a5:c4:44:8b:0a:85:a4:32:6a:db:42:ab:
90:90:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:21 2026 by rpki-client