Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
File: SboHm38CFqb2ZzyXHCr63VrpQuo.mft (raw, json)
Hash identifier: QlFdvvI25dpRN4gwYau/yNqax0Eq1EG/OurXXuHL+ZU=
Subject key identifier: 5C:64:70:85:61:E9:00:08:92:40:EF:2D:1C:E4:6E:68:8D:02:EB:20
Authority key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA
Certificate issuer: /CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
Certificate serial: 019D371BE7F43C0530EB7F0B3FE8FA196F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
Manifest number: 0A65
Signing time: Sun 29 Mar 2026 01:01:08 +0000
Manifest this update: Sun 29 Mar 2026 01:01:08 +0000
Manifest next update: Mon 30 Mar 2026 01:01:08 +0000
Files and hashes: 1: SboHm38CFqb2ZzyXHCr63VrpQuo.crl (hash: F1SSIdeQ915T4OZIfIQrmHbreuPZMVWpWQau5feZ+ZA=)
2: mQQJegnq95EZE2V56v2zWL1gvbQ.roa (hash: q/7V6DJvjSprwlUJnZGo0QNXx9JjaUcQEYt4M4pXjvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:e7:f4:3c:05:30:eb:7f:0b:3f:e8:fa:19:6f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
Validity
Not Before: Mar 29 01:01:08 2026 GMT
Not After : Mar 30 01:01:08 2026 GMT
Subject: CN=5c64708561e900089240ef2d1ce46e688d02eb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:ad:a7:94:23:8f:22:e5:8c:b6:a8:33:1f:
a1:92:47:66:c7:fc:97:52:a9:c7:a2:f0:1c:ae:d6:
e1:63:bf:a1:f9:5a:d4:76:8f:6f:a4:57:14:a3:29:
ed:26:c4:44:46:af:c0:5c:60:f0:27:df:85:63:60:
ed:82:2b:09:2c:1b:10:a5:55:cf:3a:45:43:d8:f2:
33:f2:77:30:09:ed:6a:af:d1:1c:9d:ca:f2:da:54:
f5:c8:50:a1:97:5a:4a:97:1d:49:90:1e:fa:a8:f0:
ff:22:ac:cd:04:00:c3:42:19:ad:e0:e8:53:06:53:
55:81:57:0c:bf:1d:95:86:60:77:e0:c7:a8:ff:6d:
cd:bb:d1:46:49:b6:9f:80:29:24:b3:42:2b:c0:d5:
af:0f:69:32:a7:93:44:94:7e:34:16:9c:12:70:19:
00:87:97:c9:bd:76:13:f1:9f:f3:03:78:6d:f8:cd:
37:24:29:54:b7:82:8d:81:c5:f6:ed:69:4e:99:47:
8e:92:02:bd:04:e2:09:64:02:6b:80:0e:b9:f1:6e:
63:b7:31:12:51:4f:f5:07:6c:d4:af:20:e4:50:1d:
44:71:b8:53:08:5d:e5:ba:c8:49:9d:47:4c:10:c4:
7a:75:4f:3f:cd:a3:c4:6d:77:77:a9:c3:c1:2e:f9:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:70:85:61:E9:00:08:92:40:EF:2D:1C:E4:6E:68:8D:02:EB:20
X509v3 Authority Key Identifier:
keyid:49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:89:33:ed:a9:f0:51:00:32:f4:0d:75:7a:77:e2:3f:8d:
66:97:bf:ac:32:be:35:6e:3a:b1:ae:ad:90:12:92:b9:7f:0b:
59:c6:11:2a:9e:46:25:82:01:70:fb:c0:ee:3e:dc:ff:55:1e:
1f:2c:93:64:49:48:ad:e6:b1:c4:29:fa:7d:68:a4:e4:02:51:
e7:11:19:59:c6:89:04:f9:a7:97:c9:7c:05:cd:07:00:b6:c2:
95:61:59:f0:ec:25:50:0c:d6:8d:63:da:29:6b:a2:38:97:b0:
2c:86:dd:95:4c:15:d5:84:0b:83:56:94:9b:8c:6d:c7:40:36:
6d:47:d3:19:1f:db:77:11:6e:97:c4:b6:c0:ec:59:78:2f:fd:
d3:52:ca:b7:9c:6d:2d:96:20:4a:af:12:03:8d:7f:8d:c0:20:
48:02:7f:6e:31:54:6d:b6:d5:f3:da:b9:88:aa:e9:b1:6a:71:
75:8c:f9:e4:cb:fb:77:86:ac:c2:a6:9b:b2:e7:f1:28:a9:2d:
c9:c6:42:12:2e:7c:c3:46:18:8d:ae:15:0a:a8:37:61:28:bb:
f2:1f:27:a1:bc:bf:33:41:37:14:bc:2b:fc:e2:4a:1c:22:82:
1e:ca:41:42:34:c6:cd:08:59:d0:3c:90:52:55:a6:d4:f2:3d:
6f:a2:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:23 2026 by rpki-client