Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
File: SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json)
Hash identifier: st8QUKN5bRvlui13Ta0KRfA8yB3OQxzxbIR4JfkNHpw=
Subject key identifier: BD:A1:F5:99:E4:54:80:5C:6F:B3:92:D1:2F:9F:3D:61:A3:FA:B4:8E
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 019D38660A214C600251C7B9EFF04CB49E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
Manifest number: 1031
Signing time: Sun 29 Mar 2026 07:01:44 +0000
Manifest this update: Sun 29 Mar 2026 07:01:44 +0000
Manifest next update: Mon 30 Mar 2026 07:01:44 +0000
Files and hashes: 1: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: IBPUrUp3bV5Yb82nyPH/4zbnnDaDmxvZPmYfiLdyzlw=)
2: ux9t1taenzMzHDc2wmWt_xH_KEM.roa (hash: NpD2C6KlNQ/GY5fAYSdqeCGTMMgpVvFEpoOp4C5rZfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0a:21:4c:60:02:51:c7:b9:ef:f0:4c:b4:9e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Mar 29 07:01:44 2026 GMT
Not After : Mar 30 07:01:44 2026 GMT
Subject: CN=bda1f599e454805c6fb392d12f9f3d61a3fab48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:88:cb:68:ec:eb:c8:03:1e:ea:cc:9a:0b:a4:
4a:05:dc:fd:13:0a:29:70:5f:15:3c:eb:94:eb:fd:
2e:b1:c1:2f:6a:57:eb:45:5f:76:ea:c2:5a:46:7f:
33:51:1f:3f:bc:ba:94:2d:3d:8b:09:fe:4a:05:68:
65:6d:58:37:97:9e:bf:ba:6f:d5:55:80:ef:c2:90:
02:fd:67:41:d0:e6:51:48:ed:58:75:42:72:7a:c9:
16:d4:5b:1e:f3:a5:bc:49:66:f9:06:e4:60:f2:8a:
8c:74:1a:f1:d6:3e:f4:d4:6f:ea:f8:3e:27:91:9c:
3f:c6:26:cd:27:e6:2c:a6:41:74:7f:57:4f:d5:07:
9a:ff:27:2d:b5:57:fd:d4:e5:e5:9d:16:3b:63:7d:
25:e6:4e:68:42:90:37:fe:40:16:ba:4c:c8:28:33:
25:d6:6d:65:67:21:5e:c0:78:da:6f:33:5a:c0:e1:
27:4d:62:3f:e7:31:f7:f0:73:f3:e8:03:fc:b6:35:
11:f8:0d:42:07:5f:42:c9:9a:2c:22:98:4e:3d:05:
85:8c:4a:aa:30:22:60:a5:f8:3b:78:79:2f:d4:76:
3c:a7:7a:94:06:b2:55:53:8a:ac:02:44:1f:af:d9:
40:2e:99:a4:79:dd:c7:1f:54:3b:fc:f0:52:9a:89:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:F5:99:E4:54:80:5C:6F:B3:92:D1:2F:9F:3D:61:A3:FA:B4:8E
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:93:9a:c7:d7:f9:f5:2e:64:a1:80:df:f9:33:ef:11:b6:
6d:77:37:d7:e9:a9:40:44:3e:71:a9:5a:1d:41:30:3b:df:a3:
0d:74:70:9e:29:f1:15:0e:a6:bb:99:da:b7:80:74:f0:d0:64:
03:7f:09:bb:98:5e:80:0e:c2:a6:7c:65:b1:b1:4c:a8:cf:e3:
59:13:3f:34:b3:48:7d:29:57:f3:74:26:82:4a:e1:5f:1c:3e:
02:d5:37:7a:9d:d2:b1:b0:dc:fe:29:e0:aa:7f:4b:fc:65:ef:
f0:b8:aa:f9:85:1a:f8:7d:2e:68:66:43:c7:6b:e7:38:fe:c0:
fd:45:bf:7d:c4:1e:41:08:9f:4b:9e:17:b5:17:31:4e:99:77:
9b:68:8d:79:45:66:e9:d8:af:95:e2:1e:71:25:f8:f0:84:0e:
06:e7:36:f3:f0:33:35:f3:fd:a1:b3:81:da:e7:b9:3a:0a:b5:
5e:cf:3b:e5:13:30:85:86:1a:1a:72:b5:3f:26:95:81:c8:a0:
1a:a7:cd:de:04:e6:fa:2f:09:b0:49:08:7b:e9:ee:18:c7:76:
dd:58:fc:e9:b1:f4:3b:73:2c:e5:d7:75:d3:22:93:fb:8f:ec:
b7:d4:45:ad:c4:e8:e2:0d:75:4c:21:e9:e5:99:c9:64:d8:6e:
5a:47:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:08 2026 by rpki-client