Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: B1Gronmv7beeQyEygzRV36yx5NCx+KZIpcCMfau129c=
Subject key identifier: BD:9A:09:F7:71:46:A2:86:F4:BD:36:D9:0A:CD:56:70:2F:86:BD:9F
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 019D3A8AB0A7024AB2C5B3158A0BD4FC0F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 177B
Signing time: Sun 29 Mar 2026 17:01:00 +0000
Manifest this update: Sun 29 Mar 2026 17:01:00 +0000
Manifest next update: Mon 30 Mar 2026 17:01:00 +0000
Files and hashes: 1: 5LOGjN1Wd__9ZDS6swjA9BXI75k.roa (hash: ubLg2hQhVn8wtB0qM0jKTGRZflH411XYROdch/D1MJI=)
2: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: XRBWAzotxlMvExGQ8k/yGWq2NEP8lfuYGW10VASdWyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:b0:a7:02:4a:b2:c5:b3:15:8a:0b:d4:fc:0f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Mar 29 17:01:00 2026 GMT
Not After : Mar 30 17:01:00 2026 GMT
Subject: CN=bd9a09f77146a286f4bd36d90acd56702f86bd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:9d:5f:93:69:1c:b8:ce:31:e6:d1:9b:7f:
91:92:61:7a:44:5a:2d:11:47:d4:be:d6:ae:51:3e:
b7:ee:fd:0e:d0:98:d8:e6:e9:03:b1:51:bc:f6:33:
d5:bc:0b:f9:95:25:4b:22:a5:b7:9a:82:3a:da:6f:
d8:52:72:45:7e:d5:dd:c8:24:a3:35:b3:7b:a2:ad:
9c:c8:55:a6:19:43:5d:af:a5:6d:08:07:75:a0:ee:
31:e2:ec:98:0c:ce:1f:22:f5:41:4e:58:78:d3:75:
fa:2c:7a:f6:f7:dd:49:73:53:5a:4b:6f:36:e1:88:
e2:07:63:7e:de:33:39:65:4b:d8:f6:c1:a6:80:75:
c2:6b:09:ab:f5:1a:bd:98:94:e4:3b:95:1b:2e:c4:
30:a8:ae:6d:ff:ff:b7:95:2c:21:71:5b:6b:9e:26:
5e:00:49:28:79:a1:33:db:26:88:05:9a:c4:27:6b:
8c:ae:51:ec:7f:cc:44:10:f9:b9:92:70:48:39:de:
3e:27:96:cd:63:de:ae:d0:46:0d:e5:3e:c0:f6:c2:
5b:9b:14:08:0f:ff:c7:5b:72:7f:4e:d7:16:f9:cc:
79:77:e1:bc:97:89:9d:c2:eb:73:1f:f2:23:cf:6c:
99:34:58:6a:83:5d:cc:b9:bc:3b:b5:68:ed:26:c3:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:09:F7:71:46:A2:86:F4:BD:36:D9:0A:CD:56:70:2F:86:BD:9F
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:27:bc:6b:b4:7c:76:c4:b5:25:f1:83:89:1d:aa:aa:f9:
f8:7a:ff:af:c5:c5:b4:53:00:a1:3d:b8:2b:78:81:7d:1b:75:
04:98:cf:54:95:fd:db:a0:b6:92:da:20:12:0b:ec:85:79:64:
1c:5d:91:2f:c7:db:f0:26:86:b7:77:68:2f:47:b4:6f:24:7c:
9e:c6:15:6f:04:bc:d5:3f:25:66:51:d4:90:7a:4a:f7:c4:45:
9a:0d:1d:a6:65:23:28:d2:de:91:89:02:fc:aa:95:61:21:01:
ed:23:22:a3:da:e1:cf:ee:ef:45:d6:1d:32:e4:4a:00:04:af:
d0:b5:e9:62:aa:ea:3b:ef:46:32:06:0c:df:db:23:cd:01:98:
4f:2b:0a:2b:eb:5f:fa:e7:f4:e0:b1:b0:52:ce:11:7b:8d:ef:
d3:d3:e5:20:cf:f9:e0:57:ce:31:c6:0d:01:a6:6c:44:9b:7b:
8a:98:48:d3:f1:03:01:f2:2e:0c:c4:11:1a:d3:6a:67:e7:21:
b7:a1:bb:e9:eb:ae:c9:15:91:55:5e:48:9d:1a:5c:9b:db:21:
62:a0:46:43:0d:83:b6:f3:04:5a:bc:b0:dc:c3:0c:94:60:56:
51:e5:bf:81:ce:3b:93:cc:d0:50:9a:be:af:70:de:91:d8:3c:
dc:82:6d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06irCnAkqyxbMVigvU/A97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj
ZWYyMGQwHhcNMjYwMzI5MTcwMTAwWhcNMjYwMzMwMTcwMTAwWjAzMTEwLwYDVQQD
EyhiZDlhMDlmNzcxNDZhMjg2ZjRiZDM2ZDkwYWNkNTY3MDJmODZiZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUCdX5NpHLjOMebRm3+RkmF6RFot
EUfUvtauUT637v0O0JjY5ukDsVG89jPVvAv5lSVLIqW3moI62m/YUnJFftXdyCSj
NbN7oq2cyFWmGUNdr6VtCAd1oO4x4uyYDM4fIvVBTlh403X6LHr2991Jc1NaS282
4YjiB2N+3jM5ZUvY9sGmgHXCawmr9Rq9mJTkO5UbLsQwqK5t//+3lSwhcVtrniZe
AEkoeaEz2yaIBZrEJ2uMrlHsf8xEEPm5knBIOd4+J5bNY96u0EYN5T7A9sJbmxQI
D//HW3J/TtcW+cx5d+G8l4mdwutzH/Ijz2yZNFhqg13Mubw7tWjtJsMDtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2aCfdxRqKG9L022QrNVnAvhr2fMB8GA1UdIwQY
MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt
OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3
LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhYnvGu0
fHbEtSXxg4kdqqr5+Hr/r8XFtFMAoT24K3iBfRt1BJjPVJX926C2ktogEgvshXlk
HF2RL8fb8CaGt3doL0e0byR8nsYVbwS81T8lZlHUkHpK98RFmg0dpmUjKNLekYkC
/KqVYSEB7SMio9rhz+7vRdYdMuRKAASv0LXpYqrqO+9GMgYM39sjzQGYTysKK+tf
+uf04LGwUs4Re43v09PlIM/54FfOMcYNAaZsRJt7iphI0/EDAfIuDMQRGtNqZ+ch
t6G76euuyRWRVV5InRpcm9shYqBGQw2DtvMEWryw3MMMlGBWUeW/gc47k8zQUJq+
r3Dekdg83IJtLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:17 2026 by rpki-client