Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: hYwsTeYjlCOY+8HTSrTI0YqwgqcNdpDWz8gY3nMYiEg=
Subject key identifier: 37:05:8B:80:78:A2:8D:D3:CA:F2:9D:92:4C:DC:53:46:9A:91:32:C8
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 019D37F776CBC5D180E7C06BB47B69B53A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0F0A
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: f1nU_RitPyLO36_PnZA-KwEjrxk.roa (hash: r/91ZEbv3l6yrw+0PR08C/xqKU/CqoOOpJu55heJw8o=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: tL8QoD0C9z34TcrJi/RUZHQSkV35jXqPulezfplRouo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:76:cb:c5:d1:80:e7:c0:6b:b4:7b:69:b5:3a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=37058b8078a28dd3caf29d924cdc53469a9132c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:17:f2:dd:bb:77:16:12:ef:4d:37:9a:cf:
3d:02:74:de:07:74:ce:39:0f:b0:bf:15:80:e4:64:
b8:0f:c1:b1:63:1b:30:c8:ab:87:ea:a2:9c:52:f3:
ff:7f:e3:04:63:73:b4:e8:3f:aa:7f:ab:42:75:2a:
1a:f9:be:4d:7d:b4:75:22:97:d3:6f:fa:4d:4c:a7:
00:76:f8:74:c1:99:67:8c:c9:0f:f5:5b:58:cf:e1:
f2:31:ee:bf:c0:5b:21:39:a2:ff:30:96:68:d8:07:
e6:99:2c:81:2f:6b:5d:53:c0:7b:41:fb:84:da:df:
8b:b7:de:f2:b6:e3:b7:fe:79:95:ef:c2:b8:35:73:
10:97:e5:ff:ac:2a:80:c5:42:7a:8a:69:38:28:b5:
0a:00:f0:b3:57:9c:fa:62:cf:40:c4:29:53:63:85:
38:0a:09:94:8a:f0:d8:9f:4b:67:e2:dc:f9:e9:5c:
fb:da:ce:d7:d7:b6:2f:65:82:56:f1:79:a6:ff:f3:
84:a0:26:7a:20:88:90:eb:ad:9f:1d:9a:f1:15:bc:
14:1d:ca:98:98:0d:79:77:5e:2e:5a:73:1e:01:a9:
05:84:6e:8e:6d:eb:3b:78:5f:a7:56:21:c2:b5:06:
8f:c5:6c:1b:00:75:2f:4d:4d:1c:d3:d6:f1:6c:49:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:8B:80:78:A2:8D:D3:CA:F2:9D:92:4C:DC:53:46:9A:91:32:C8
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:67:01:a0:05:ae:1b:5e:ab:ea:1c:42:d8:57:a5:53:36:
ac:1c:0b:ba:85:04:d5:5d:cd:ea:b4:5a:7e:22:87:19:fc:61:
fb:30:7b:63:a8:91:8c:c7:2c:91:09:ac:71:e8:13:f5:26:27:
36:fe:be:c8:f7:07:1d:ce:b0:44:b7:9f:b3:0f:55:ac:92:db:
32:fe:95:09:b2:e9:62:82:a9:72:09:83:fe:b9:17:ef:f9:ec:
ca:5a:d3:b1:9e:1c:fd:48:86:c5:73:b5:d1:a4:ba:06:61:f2:
28:8a:26:0f:06:0b:ae:7a:ed:40:77:6c:ea:5a:83:d6:da:49:
86:1b:7d:95:f3:92:93:fe:30:8c:f6:a2:cd:e2:20:cd:2e:77:
e3:36:38:13:0b:f8:af:4b:f6:3b:eb:0e:5a:d5:81:12:93:38:
16:d9:04:92:69:5b:19:cf:32:87:fa:85:b1:9c:13:1a:df:6a:
21:e0:13:0f:47:9b:45:8f:eb:aa:97:78:38:d6:63:4c:09:70:
3c:d7:af:8a:e2:ed:ae:4a:d6:de:f5:49:96:92:e2:de:28:f1:
4d:7c:47:8c:44:ac:2b:08:52:4a:fb:af:5a:06:a3:d8:22:f5:
1f:af:89:32:88:35:01:5c:e8:d9:e4:59:29:5e:81:84:9f:74:
80:78:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:50 2026 by rpki-client