Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
File: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft (raw, json)
Hash identifier: 8zklkk7zCbNBrieL/2a4KOSHFAygq4QYRe4l9SAXFS4=
Subject key identifier: 34:32:82:23:61:EA:2B:18:D0:3A:C0:B4:F9:63:E5:BA:0E:E5:2C:1F
Authority key identifier: B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
Certificate issuer: /CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Certificate serial: 019F9549EDC1DD62095AFDE2B0D56F22A866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:17 +0000
Manifest this update: Fri 24 Jul 2026 18:01:17 +0000
Manifest next update: Sat 25 Jul 2026 18:01:17 +0000
Files and hashes: 1: C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa (hash: pNsPtp3Jh4QV8tjlNFIUx759yR4vmvZaCGaiFZ7nHBI=)
2: X_U4PTICjxMwz_zzgRb2YgODG9k.roa (hash: v8UPV4SYAEOIqRdsOLJFm+f1ryb3otUE2YTskYRIYtM=)
3: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl (hash: DkdHfSiSP672mJUtUNJHuEwuynpNi+6PL1a085zFGnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:ed:c1:dd:62:09:5a:fd:e2:b0:d5:6f:22:a8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Validity
Not Before: Jul 24 18:01:17 2026 GMT
Not After : Jul 25 18:01:17 2026 GMT
Subject: CN=3432822361ea2b18d03ac0b4f963e5ba0ee52c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:0d:6e:d0:63:45:f8:da:79:46:8c:43:e4:
42:12:fc:34:43:6f:10:cb:9c:cd:fe:4b:ed:8c:fb:
1f:73:c4:0e:11:b9:54:2d:05:5d:28:3f:2a:58:47:
41:a8:2a:8f:04:cc:c9:19:7d:a5:21:61:15:50:4e:
09:7f:6a:f8:aa:64:e5:89:24:e1:b7:90:64:b2:94:
72:0a:72:18:be:38:c3:85:b1:72:f6:3d:75:bd:d6:
18:41:bd:6a:45:78:55:6b:0e:a5:9e:4f:53:7d:b9:
b6:55:c9:fe:6a:de:cb:02:7e:05:d1:2c:64:7d:c6:
da:e6:23:34:89:98:42:11:4e:89:ef:db:24:2a:2a:
94:f7:c5:f2:b4:ec:14:3c:69:33:44:2e:15:c8:bc:
86:3c:12:9f:51:ea:7d:cd:dd:2e:72:76:d7:78:33:
0c:bb:7a:72:1a:3a:19:d6:41:66:d6:de:af:e2:f7:
72:b4:83:9c:38:36:b6:bf:e2:74:e2:84:12:1e:f2:
20:f6:52:5d:4c:52:71:5c:99:50:47:c9:c5:fc:67:
11:2e:db:36:48:a4:4c:94:42:6e:ba:a0:9a:ef:fe:
dd:63:6f:c7:27:5a:1b:22:22:d4:1b:67:f0:ef:ee:
7f:a7:3e:5f:a2:b1:bd:69:77:e7:a4:87:7f:83:77:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:32:82:23:61:EA:2B:18:D0:3A:C0:B4:F9:63:E5:BA:0E:E5:2C:1F
X509v3 Authority Key Identifier:
keyid:B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ba:d3:c5:b0:e9:44:26:24:80:68:2a:0a:a1:7e:ae:44:32:
a7:8a:59:52:5e:49:d4:70:cf:22:d8:fc:5d:0a:ea:e0:9c:84:
67:e9:4f:3e:38:ce:5f:a3:c6:c1:f4:9d:a2:4e:22:6f:90:a2:
78:49:52:10:1b:36:3b:d6:77:f7:5b:ce:d5:bb:80:53:2b:10:
9d:77:a3:6b:f2:9a:cf:3d:af:0a:d8:ed:b6:1c:cf:87:4e:5f:
02:d3:98:94:f7:4c:92:b8:8e:23:b9:1e:f6:99:23:11:b1:79:
f9:d8:51:a9:d7:d8:1f:9d:58:c5:66:a6:b9:ac:e5:e4:7b:6f:
83:aa:e9:ac:c8:5a:bc:82:d0:38:0a:27:4e:df:c1:ab:c1:97:
fa:79:92:99:12:69:77:05:b0:69:ba:7a:6c:25:c4:fe:ab:e2:
a4:d8:0d:b1:0b:71:2c:e5:19:66:67:33:13:69:e4:da:6b:06:
34:f9:04:a0:e6:65:86:4e:52:7b:ab:38:94:28:e9:dc:60:8b:
b4:85:5b:13:b7:54:6d:dd:8e:a3:bc:db:0d:76:7c:6c:73:5b:
a9:ce:5d:3c:f3:61:95:31:5d:2e:da:07:e9:b3:4f:50:d6:bc:
3e:2b:01:2c:f9:d6:99:ff:8e:ef:51:93:4f:5e:1a:22:1e:e2:
42:fa:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:52:08 2026 by rpki-client