Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: uGoPx/1wU3IiFAgigSbHT5tK6s2gLqoKrOgAUDzbKhs=
Subject key identifier: 70:25:64:F6:EE:45:C1:A7:F0:5E:1B:27:83:83:5D:2D:7A:33:62:36
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 019D3941CBC2EFE72034F1BDEC379D91B3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 0711
Signing time: Sun 29 Mar 2026 11:01:46 +0000
Manifest this update: Sun 29 Mar 2026 11:01:46 +0000
Manifest next update: Mon 30 Mar 2026 11:01:46 +0000
Files and hashes: 1: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: M7lG7auFE697aIS+lgqWArdLkiZEGzjjA6cAvYOsV6s=)
2: ejZDEXBG6lJfQBaB_r07TXkoi64.roa (hash: S5aamcy+0zShe8pnJRlRZQ6L4/p8VXPVoAbyx/8mm70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:cb:c2:ef:e7:20:34:f1:bd:ec:37:9d:91:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Mar 29 11:01:46 2026 GMT
Not After : Mar 30 11:01:46 2026 GMT
Subject: CN=702564f6ee45c1a7f05e1b2783835d2d7a336236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:d5:8d:4e:33:e9:00:4d:25:79:15:f3:27:
dc:2c:66:c5:c0:27:e4:40:3f:80:26:6f:15:64:1d:
dd:7a:88:4c:fa:92:50:24:70:97:7f:1b:3a:16:1d:
19:56:39:1b:e8:49:97:2e:10:19:68:3f:0a:ad:72:
c6:a4:f9:80:42:69:58:76:1e:8c:eb:e1:e1:42:5f:
5b:a6:20:b6:86:b6:5f:57:46:e9:20:ad:71:46:e5:
d3:39:90:26:ce:e1:c1:50:f9:88:06:b4:75:9f:c5:
cf:6e:39:44:1c:22:bb:b2:ef:7e:e1:04:d9:83:7d:
28:be:90:87:56:7b:0a:e8:a8:1e:82:85:68:da:85:
b3:4a:c4:f5:bd:a6:97:d5:04:69:45:c7:5a:44:a5:
a8:e7:39:c1:1d:94:24:d1:77:a7:e1:fe:b8:02:58:
14:4b:61:f4:f1:30:38:2e:1d:2d:1a:ed:4e:ac:35:
04:0b:09:30:f2:18:44:25:e9:1b:6f:7b:5b:1b:fb:
45:f2:47:11:af:0b:1d:2d:32:d3:89:7d:4f:1e:ef:
a2:f4:08:4d:cd:ba:36:b6:ea:ba:e2:ec:61:20:b7:
93:b1:ba:89:26:8b:84:e3:d5:a5:e7:5e:a7:39:bc:
8c:3f:c6:23:54:55:fe:53:19:7e:79:66:52:8f:e9:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:25:64:F6:EE:45:C1:A7:F0:5E:1B:27:83:83:5D:2D:7A:33:62:36
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:46:a3:29:e3:16:ea:4c:a8:f0:19:f3:e7:74:de:2b:f6:
8c:de:99:77:0b:0a:e6:7b:0f:29:7b:81:10:9d:29:b8:d0:70:
66:86:9e:f1:7b:6f:44:6b:08:8e:c7:5c:b6:65:a4:cf:d4:5a:
70:99:59:bb:8a:fe:4d:e5:cd:ac:5a:4e:15:e1:a7:48:88:9b:
f9:f0:b8:7f:8f:48:47:13:f9:64:44:bb:ac:59:10:7d:2b:79:
ef:56:5c:8d:02:86:50:29:2f:6f:7f:54:bd:f4:45:9f:b6:b5:
7f:71:6c:84:50:2c:18:e8:75:ca:04:52:da:e2:a0:d4:a3:40:
23:eb:ee:13:e0:fe:be:07:a2:6f:34:3f:aa:3c:8b:49:d6:09:
62:01:0e:54:e3:cd:fd:3c:c4:1d:52:5e:ae:6c:2e:e1:7b:4f:
71:81:04:b6:d1:dc:3d:68:91:05:62:e2:3f:04:77:ba:a0:03:
bb:4f:7a:f0:59:79:bf:83:e7:46:c3:79:cb:12:c8:eb:cf:ca:
9b:38:58:4c:c0:c2:5c:73:c0:95:d0:1a:84:69:0e:a2:4b:5f:
43:11:b3:4b:83:6c:d4:3e:f2:1d:19:57:2a:d3:3f:a2:5a:16:
99:e1:2a:99:38:d8:0e:6a:b4:9e:08:d6:b1:60:4f:3e:5c:dd:
3b:e7:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:28 2026 by rpki-client