Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
File: Sbo670PAo_CNKrW5MRwGJcwrEYo.mft (raw, json)
Hash identifier: ZTEATVyPse+RpEE5A7hrnNJbumeNoPrlQGYJrAGMRgM=
Subject key identifier: 74:3A:E4:2B:C0:10:28:E2:09:41:E3:2B:99:0B:43:E7:DA:2B:43:67
Authority key identifier: 49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
Certificate issuer: /CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
Certificate serial: 01A0E3D00A035AAB0DCE05522756749A573F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
Manifest number: A3
Signing time: Sun 27 Sep 2026 17:00:57 +0000
Manifest this update: Sun 27 Sep 2026 17:00:57 +0000
Manifest next update: Mon 28 Sep 2026 17:00:57 +0000
Files and hashes: 1: Sbo670PAo_CNKrW5MRwGJcwrEYo.crl (hash: NkkM3j/rvdnXqsfxJCMo73wrJBB5HaInDXC/wf57iss=)
2: rRYXF778h2zxEKTxbR3XCmsKwRY.asa (hash: QUmdN+d6JbOesGKhvE1uI335IDnmyzy1AQt3iQvb1qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:0a:03:5a:ab:0d:ce:05:52:27:56:74:9a:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
Validity
Not Before: Sep 27 17:00:57 2026 GMT
Not After : Sep 28 17:00:57 2026 GMT
Subject: CN=743ae42bc01028e20941e32b990b43e7da2b4367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:2a:87:6c:de:ef:1a:89:e5:92:5f:b3:0e:
be:ed:2b:1c:cd:b6:9b:0a:dc:b8:a5:5b:54:ae:e9:
b8:cb:26:e5:06:98:9c:93:6a:f0:d9:1c:ab:fc:8c:
84:d0:08:23:a7:9f:b6:58:87:0b:3f:5c:27:a0:95:
c4:71:8c:9c:14:55:96:76:0c:e8:2f:ac:fc:db:e1:
da:f1:a8:f7:77:1e:1d:d1:d4:49:b9:8c:4c:94:3e:
26:5b:39:90:50:c4:89:18:9d:a3:2f:5e:59:3b:77:
d6:c7:1a:59:ce:3e:19:cb:0a:1c:41:a5:a5:49:ff:
75:a2:12:43:cb:0d:8c:15:77:44:09:24:51:a4:ac:
fa:96:80:60:5f:e6:a2:bd:04:60:f6:20:dc:43:ea:
1a:0e:d4:79:62:fc:3f:1e:3f:04:d4:eb:7a:0e:13:
07:9c:57:ee:30:25:c5:0d:2a:ba:00:78:7f:d9:b3:
b3:65:eb:b6:e5:40:6a:82:19:38:92:b0:36:02:29:
c4:94:92:0c:6a:d9:96:b9:bf:5b:41:df:c9:e8:db:
4d:2a:a7:17:a9:b3:e8:17:4b:f0:52:f1:f3:b4:50:
d2:09:63:a6:15:ab:51:11:7a:d6:89:be:f2:1f:b9:
a4:52:c9:1a:9d:60:8e:9b:a8:5d:ce:59:6b:82:a1:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3A:E4:2B:C0:10:28:E2:09:41:E3:2B:99:0B:43:E7:DA:2B:43:67
X509v3 Authority Key Identifier:
keyid:49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:d8:b5:2d:b3:b0:cd:63:52:5b:0a:2c:4c:e0:57:02:83:
7f:40:87:de:79:70:97:0c:b7:e1:ff:a0:b7:e7:aa:90:7b:2b:
ac:40:38:e3:c8:71:1a:e7:0e:f3:e8:6d:25:52:d5:fd:e8:63:
c3:ca:fa:cf:2c:18:2b:a2:92:a8:a9:11:2c:88:b2:0f:e9:ab:
f1:29:a4:da:2b:6f:15:33:26:24:47:36:27:0e:a2:b8:64:72:
af:55:37:83:f8:dc:13:c8:d7:29:18:a4:43:7e:ae:f4:ea:bd:
d1:cb:16:ee:22:af:22:76:53:58:d0:9d:ff:f1:e8:05:02:e7:
f8:1f:b7:43:49:3e:99:2c:68:f8:45:20:08:ed:84:98:7f:61:
8a:9d:ac:fb:46:0d:1f:1b:62:85:50:ee:1b:6d:94:df:da:6d:
dd:ca:47:de:46:8d:6e:ab:de:03:4a:45:91:85:81:14:02:05:
72:5a:bb:cd:de:68:06:b3:56:33:15:0a:c6:c4:89:98:1a:9f:
48:c2:43:a9:78:f9:b4:c8:de:ae:82:f2:7f:07:96:1e:d2:4d:
f2:18:d4:99:54:15:11:cb:b4:fa:36:64:11:df:fd:e0:5b:af:
96:1c:f0:c0:a0:b1:ee:e6:7c:3c:de:db:d6:0a:0e:f1:3c:45:
be:47:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:11:25 2026 by rpki-client