Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: D784s+C/qXOlwAwiOq+eHvddDCKJEePNshYciH9bcMY=
Subject key identifier: 33:7B:D2:7D:25:82:BC:9D:91:38:9F:CE:22:31:52:F7:FD:D1:CA:E5
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 01A179CCA9F8EE849A21EF8BA4CA712097E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 19AE
Signing time: Mon 26 Oct 2026 20:00:18 +0000
Manifest this update: Mon 26 Oct 2026 20:00:18 +0000
Manifest next update: Tue 27 Oct 2026 20:00:18 +0000
Files and hashes: 1: 5LOGjN1Wd__9ZDS6swjA9BXI75k.roa (hash: ubLg2hQhVn8wtB0qM0jKTGRZflH411XYROdch/D1MJI=)
2: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: gGLXW1TOgXobpoTSIaK0HCNcCMP5OA+Cq+qPKoZrfw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:a9:f8:ee:84:9a:21:ef:8b:a4:ca:71:20:97:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Oct 26 20:00:18 2026 GMT
Not After : Oct 27 20:00:18 2026 GMT
Subject: CN=337bd27d2582bc9d91389fce223152f7fdd1cae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:d7:39:b2:94:e7:0d:45:c5:19:36:1c:c8:
75:d7:bd:aa:dd:96:1c:95:34:88:21:4a:0c:02:6c:
46:3b:17:04:08:46:04:ad:cd:61:86:4e:56:39:58:
c0:bb:06:0d:f2:ef:c0:25:f0:eb:76:33:bb:90:a7:
f3:bb:2a:6d:1f:4e:0a:9d:97:ce:9a:95:c3:c1:e7:
c3:82:27:18:3a:96:3f:f7:cd:28:82:7c:f6:ac:b1:
d6:cf:9d:48:15:a2:f1:c2:a7:1d:23:c4:bc:98:4d:
19:4d:ef:e1:57:6f:d0:76:e1:de:ae:92:33:ec:8c:
74:cd:a0:79:a8:d8:de:af:13:c5:ed:c3:d3:75:d4:
27:c2:91:e4:65:ca:12:19:e6:d0:1a:03:c2:44:99:
b8:a7:48:a6:b1:34:cf:1c:69:77:ad:f0:ff:17:06:
3b:cd:a1:54:5b:09:d8:04:b7:50:93:4b:8c:33:5c:
e6:42:93:04:23:df:c5:8c:4f:48:75:0e:34:51:aa:
31:7f:7c:54:08:56:72:6d:33:5b:f2:11:3d:e8:d3:
2b:0f:61:b0:d4:e4:e8:5c:57:bd:8b:b5:af:34:21:
a4:81:48:f8:66:d1:fc:04:4f:de:84:16:40:fe:c7:
a9:81:11:fb:b3:00:5a:90:33:6b:63:21:e0:26:1e:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:D2:7D:25:82:BC:9D:91:38:9F:CE:22:31:52:F7:FD:D1:CA:E5
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:27:5f:7e:c7:3a:a3:05:0a:af:da:de:bc:5b:c1:3d:b0:ff:
6b:1c:f0:d5:32:12:b2:e0:20:b2:75:04:e3:f7:52:87:1d:81:
85:18:a1:47:df:48:80:be:6f:aa:8d:eb:d1:01:59:25:12:d6:
e0:e0:64:4d:04:d1:7d:57:3b:f4:49:c6:34:c6:a6:86:ae:b6:
84:e1:ce:a4:dc:ee:a9:0e:62:1b:0a:b9:37:68:fe:e7:1f:96:
0c:ab:83:b0:12:d5:05:94:f8:79:80:de:4d:2c:2e:33:e1:04:
4b:aa:2f:02:18:56:e7:07:0e:23:ea:86:e3:7c:24:6c:96:5a:
d1:e5:72:9c:d3:23:06:74:d2:19:b3:fd:8f:52:bf:db:21:18:
f0:4a:1c:2c:88:51:cd:82:0a:5a:df:94:67:5a:e2:70:af:3a:
bb:82:1d:bb:95:93:bf:23:7a:78:fb:24:9f:da:e1:49:1e:4f:
78:b7:6a:a4:c3:b3:9c:a2:7b:e8:79:df:c1:07:47:57:ac:c6:
1a:e9:dc:72:a9:50:27:be:03:18:02:f7:1e:de:29:ea:6c:c3:
de:82:95:0a:96:35:b5:29:8d:f3:4b:53:8c:ed:13:02:a3:4d:
16:8b:1b:c3:bc:a5:3d:f1:1c:ec:65:10:fa:5c:e8:f1:44:82:
42:a3:1b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zKn47oSaIe+LpMpxIJfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj
ZWYyMGQwHhcNMjYxMDI2MjAwMDE4WhcNMjYxMDI3MjAwMDE4WjAzMTEwLwYDVQQD
EygzMzdiZDI3ZDI1ODJiYzlkOTEzODlmY2UyMjMxNTJmN2ZkZDFjYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXbXObKU5w1FxRk2HMh1172q3ZYc
lTSIIUoMAmxGOxcECEYErc1hhk5WOVjAuwYN8u/AJfDrdjO7kKfzuyptH04KnZfO
mpXDwefDgicYOpY/980ognz2rLHWz51IFaLxwqcdI8S8mE0ZTe/hV2/QduHerpIz
7Ix0zaB5qNjerxPF7cPTddQnwpHkZcoSGebQGgPCRJm4p0imsTTPHGl3rfD/FwY7
zaFUWwnYBLdQk0uMM1zmQpMEI9/FjE9IdQ40Uaoxf3xUCFZybTNb8hE96NMrD2Gw
1OToXFe9i7WvNCGkgUj4ZtH8BE/ehBZA/sepgRH7swBakDNrYyHgJh7BOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN70n0lgrydkTifziIxUvf90crlMB8GA1UdIwQY
MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt
OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3
LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCdffsc6
owUKr9revFvBPbD/axzw1TISsuAgsnUE4/dShx2BhRihR99IgL5vqo3r0QFZJRLW
4OBkTQTRfVc79EnGNMamhq62hOHOpNzuqQ5iGwq5N2j+5x+WDKuDsBLVBZT4eYDe
TSwuM+EES6ovAhhW5wcOI+qG43wkbJZa0eVynNMjBnTSGbP9j1K/2yEY8EocLIhR
zYIKWt+UZ1ricK86u4Idu5WTvyN6ePskn9rhSR5PeLdqpMOznKJ76HnfwQdHV6zG
GunccqlQJ74DGAL3Ht4p6mzD3oKVCpY1tSmN80tTjO0TAqNNFosbw7ylPfEc7GUQ
+lzo8USCQqMbXg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:05 2026 by rpki-client