Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier: 8C9ubkqP+fz7W6OJavIkLYkmWvo9w//bxVC0Z08kOa4=
Subject key identifier: 1E:44:45:DE:96:8E:6F:18:DE:14:90:55:F3:71:8B:D2:5D:4C:C5:32
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 01A180E1F6BD1C6C56B51664772C5918B8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number: 1993
Signing time: Wed 28 Oct 2026 05:00:54 +0000
Manifest this update: Wed 28 Oct 2026 05:00:54 +0000
Manifest next update: Thu 29 Oct 2026 05:00:54 +0000
Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: itODHy31zDq7ve+238E8zgp+/FiJEGtoLZtqa5zopWs=)
2: TzoH-k-UGeNvhzqHQUEVAQIJuWw.roa (hash: 7uHIJwdjpOn8htuzOnTlNgqjPCRA7LrnNNTVQoYjlzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e1:f6:bd:1c:6c:56:b5:16:64:77:2c:59:18:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Oct 28 05:00:54 2026 GMT
Not After : Oct 29 05:00:54 2026 GMT
Subject: CN=1e4445de968e6f18de149055f3718bd25d4cc532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:7e:3f:31:64:75:f0:4a:4f:93:65:ff:3c:
2c:56:22:95:75:b0:c6:5a:e0:e3:8d:19:85:46:da:
71:89:ef:96:6b:07:fe:64:eb:d0:26:a2:1e:6e:4d:
06:68:95:20:bd:44:d3:91:ed:26:1d:3d:3f:bf:75:
99:4f:19:c9:47:ca:bd:d8:96:dd:e0:0c:c5:93:e6:
c0:34:c2:89:b0:41:1a:84:18:9c:2f:fd:ad:7f:76:
12:5c:a5:78:ed:0e:58:24:0b:c6:96:d4:4d:76:9f:
bb:31:ed:c4:4b:a5:22:8e:17:65:5a:d0:82:65:7f:
e6:ac:59:da:b9:f7:7b:60:fc:e7:31:e6:9a:a2:cc:
9e:4b:4e:d4:3e:1a:d4:c9:f7:55:a0:5d:14:b3:8e:
6a:ce:ee:ad:58:85:12:d2:1f:6d:14:1a:19:5d:d2:
ba:9b:8f:fe:fc:47:03:0b:1a:22:42:27:9e:ef:c8:
0a:a8:88:41:56:0f:2d:fc:d3:46:e1:69:d2:92:a0:
2a:c0:f8:be:88:2c:bc:75:62:9a:01:ff:db:78:c3:
5a:63:48:31:62:26:49:02:c3:7e:e4:85:b8:22:d5:
f4:8b:eb:4f:61:4a:05:03:99:29:90:94:c3:6e:e8:
86:37:fa:f3:f0:81:35:26:5f:ca:7d:24:45:56:68:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:45:DE:96:8E:6F:18:DE:14:90:55:F3:71:8B:D2:5D:4C:C5:32
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0a:bf:8c:61:92:27:c6:c6:4a:da:95:4f:ed:39:d1:e7:5b:
85:7a:9d:98:fb:32:c9:a4:c9:1e:21:51:b9:c6:38:43:3f:a4:
b8:e2:c4:60:b4:47:33:2d:34:d8:b6:95:6c:02:fb:bc:d6:73:
ed:e8:b1:3a:5a:00:30:3b:29:7e:7d:f8:32:77:e5:b5:f3:5b:
f8:a3:96:b8:6a:32:4b:29:e0:ba:1d:1d:bd:63:53:92:18:7a:
c3:c7:8f:66:20:f7:85:5b:49:af:47:82:ec:83:27:68:72:dc:
6e:13:05:49:99:4d:ea:d3:bb:20:3f:7e:dc:34:19:92:5e:28:
3f:fc:c2:0f:da:a7:98:df:f5:8c:d8:b5:96:ce:6b:89:dc:79:
cb:d9:ea:3d:d0:94:50:40:99:fb:3c:8d:04:dd:0d:38:ab:46:
92:d7:72:fc:75:4a:c3:d8:0d:99:9a:15:6a:71:e0:49:c7:12:
c3:f9:b7:74:b6:f4:2a:0e:04:3b:d8:72:01:62:e1:df:07:d7:
26:f5:a9:48:8c:c4:15:db:c9:b0:2d:09:95:c1:49:98:40:72:
10:f2:e5:10:6d:d5:74:58:e3:98:cc:2f:c2:40:4a:e9:9c:25:
b9:0a:e9:43:2c:03:c2:6f:27:74:ed:37:21:0b:55:6b:74:ad:
8c:89:fe:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4fa9HGxWtRZkdyxZGLjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTcxNjcyZDUzZmRmOGIyNTM3NzY0ZjUzN2UzNjVhNTky
N2JkYWYwHhcNMjYxMDI4MDUwMDU0WhcNMjYxMDI5MDUwMDU0WjAzMTEwLwYDVQQD
EygxZTQ0NDVkZTk2OGU2ZjE4ZGUxNDkwNTVmMzcxOGJkMjVkNGNjNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ht+PzFkdfBKT5Nl/zwsViKVdbDG
WuDjjRmFRtpxie+Wawf+ZOvQJqIebk0GaJUgvUTTke0mHT0/v3WZTxnJR8q92Jbd
4AzFk+bANMKJsEEahBicL/2tf3YSXKV47Q5YJAvGltRNdp+7Me3ES6UijhdlWtCC
ZX/mrFnaufd7YPznMeaaosyeS07UPhrUyfdVoF0Us45qzu6tWIUS0h9tFBoZXdK6
m4/+/EcDCxoiQiee78gKqIhBVg8t/NNG4WnSkqAqwPi+iCy8dWKaAf/beMNaY0gx
YiZJAsN+5IW4ItX0i+tPYUoFA5kpkJTDbuiGN/rz8IE1Jl/KfSRFVmgtBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5ERd6Wjm8Y3hSQVfNxi9JdTMUyMB8GA1UdIwQY
MBaAFEgXFnLVP9+LJTd2T1N+NlpZJ72vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjIt
ZGIwNGYyMTM5MGEwLzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjItZGIwNGYyMTM5MGEw
LzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAq/jGGS
J8bGStqVT+050edbhXqdmPsyyaTJHiFRucY4Qz+kuOLEYLRHMy002LaVbAL7vNZz
7eixOloAMDspfn34MnfltfNb+KOWuGoySynguh0dvWNTkhh6w8ePZiD3hVtJr0eC
7IMnaHLcbhMFSZlN6tO7ID9+3DQZkl4oP/zCD9qnmN/1jNi1ls5ridx5y9nqPdCU
UECZ+zyNBN0NOKtGktdy/HVKw9gNmZoVanHgSccSw/m3dLb0Kg4EO9hyAWLh3wfX
JvWpSIzEFdvJsC0JlcFJmEByEPLlEG3VdFjjmMwvwkBK6ZwluQrpQywDwm8ndO03
IQtVa3StjIn+lA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:23 2026 by rpki-client