Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: xxMy6AxQmy/6lcxZIdGFXrt0OiCZow5kALdBuHkZ4XY=
Subject key identifier: EC:74:05:DC:7F:08:AB:AC:74:0F:32:C9:83:9B:46:E2:8B:17:B7:07
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 01A08A55748AA3DB0000A0C9ABCD09329065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 1932
Signing time: Thu 10 Sep 2026 08:00:51 +0000
Manifest this update: Thu 10 Sep 2026 08:00:51 +0000
Manifest next update: Fri 11 Sep 2026 08:00:51 +0000
Files and hashes: 1: 5LOGjN1Wd__9ZDS6swjA9BXI75k.roa (hash: ubLg2hQhVn8wtB0qM0jKTGRZflH411XYROdch/D1MJI=)
2: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: 2Vfo6DDJmxL21wN8gVlujzybhRbAD2V5LW1q7yIMkNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:74:8a:a3:db:00:00:a0:c9:ab:cd:09:32:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Sep 10 08:00:51 2026 GMT
Not After : Sep 11 08:00:51 2026 GMT
Subject: CN=ec7405dc7f08abac740f32c9839b46e28b17b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:47:a9:3d:5b:84:c0:3b:f0:8e:fb:e9:13:
72:bd:7f:64:1a:53:47:58:5e:e5:85:0a:ae:c4:80:
d7:82:7f:f0:78:b8:f6:e2:b2:de:b5:ea:64:b8:4b:
98:ca:2f:d6:8e:ea:d0:cd:6a:18:5f:cf:f6:23:7c:
9c:73:5c:f8:31:57:e2:09:d7:b7:6b:64:1d:d2:e2:
7f:e7:6c:3b:e7:e5:0f:20:a1:e0:05:29:bf:da:b9:
6c:5a:46:0d:df:0a:1e:b1:78:ed:65:95:3d:5e:fe:
2c:2e:8e:bc:d3:54:be:e8:cd:c5:af:c8:3a:5d:8b:
bd:65:31:58:aa:53:86:fd:08:69:7a:d0:47:06:a8:
cb:6a:ab:99:1c:c2:e9:0d:fd:c1:75:36:fb:a0:b9:
74:c6:06:7d:07:23:58:e5:db:2a:d1:7d:6f:5f:70:
d2:a3:6f:0a:6e:c9:d0:94:bb:a4:c1:f7:b8:de:2b:
04:71:84:d9:e1:97:6d:7e:42:7f:5f:c4:b7:62:e9:
58:bd:3a:72:12:78:91:41:27:59:1e:8d:55:c0:e6:
7a:90:ba:ab:ae:d7:60:27:dd:ad:fa:f7:ac:ae:30:
78:2f:48:56:f7:b2:13:43:57:6f:12:14:e7:20:27:
94:b5:77:8a:a7:9b:6e:f5:b6:a5:9e:d5:0a:8c:f6:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:05:DC:7F:08:AB:AC:74:0F:32:C9:83:9B:46:E2:8B:17:B7:07
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ef:c6:dc:8a:d9:4d:ca:04:7d:2d:ab:a4:f8:15:1c:94:cc:
8d:3d:c5:76:13:ce:e5:6b:15:1f:d7:31:bf:f8:3c:92:62:96:
31:b7:3d:f3:db:dd:a7:77:a7:ba:a2:db:19:a0:b9:af:da:0e:
5d:a8:22:bc:6f:74:d5:c9:7c:4a:54:68:5b:2e:24:b9:61:b5:
82:bd:b5:f2:e3:fb:95:6c:a8:bc:5c:14:81:f5:3f:bf:33:12:
a2:62:34:5c:98:bd:c8:2a:bb:97:0c:e4:52:c2:c1:5c:f3:c7:
b3:14:27:40:4a:aa:24:81:29:61:a8:dd:1e:9a:0a:11:35:00:
63:01:58:12:43:d1:d5:73:74:0c:30:9c:4f:03:16:18:50:27:
a6:e8:f6:c7:83:6f:cb:26:4a:e6:c4:25:4e:7b:38:df:4c:b9:
ac:ba:c9:0c:6d:d3:c6:f6:e7:bd:eb:d1:06:91:8b:ee:52:e6:
f3:9c:66:4b:41:f0:91:08:0f:34:ea:dc:8c:eb:bb:c3:07:57:
cb:7a:82:8e:db:70:31:4d:fb:c9:49:30:8a:dc:e5:17:28:25:
10:f6:c7:44:d2:82:30:d0:84:b7:88:d7:42:95:44:e3:30:0d:
e9:55:fe:20:56:68:55:c9:42:57:e2:17:61:72:bf:ca:2f:e9:
a1:2b:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:08 2026 by rpki-client