Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: TcXJQb7K8NUiZQTP6A81/CmUfTAYvi09smyNMxRax6Q=
Subject key identifier: 11:91:04:E9:A5:99:6E:C7:66:40:75:08:30:64:0D:66:11:82:67:78
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019D382E59BF985E65F792E213D3CE35C7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0E57
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: gNhdW459OnBgTeoXQqTLnr8zyzwQN8fS8WaIex3OF0U=)
2: tHyycM5QCv8W9vwXc_sS0QuTCdY.roa (hash: /5xLYAkh1elAbGPbQgHDZyios7R0OiSG4E8AdgZhCYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:59:bf:98:5e:65:f7:92:e2:13:d3:ce:35:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=119104e9a5996ec76640750830640d6611826778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:b9:f7:7d:b8:e2:4b:18:aa:b0:d0:44:9d:
b5:e9:ff:ce:7e:86:e0:0a:5b:fb:cf:85:85:e8:45:
6d:63:42:b6:ff:0d:d5:05:7f:da:70:c3:51:37:08:
4e:bc:af:73:e4:77:a9:4e:af:20:9f:55:0b:fa:78:
e7:9e:6e:c9:fd:8c:a6:09:c0:06:ca:92:a7:33:6d:
36:50:b3:4e:8e:d7:0a:96:c4:02:2f:1d:9d:1d:e1:
a8:d0:66:6f:5c:9c:da:f0:c9:52:3b:ef:d4:39:d5:
8c:84:e8:c2:d9:3c:a3:19:2c:7e:a7:31:58:1b:6b:
63:4c:9a:84:a5:cb:7c:1f:a2:16:29:b8:1d:0d:0e:
05:34:74:e9:dc:09:8f:76:7a:a3:53:18:a0:e9:b6:
db:86:2a:37:5e:70:da:40:11:4d:ad:11:4c:e1:fe:
09:12:1e:21:27:59:98:64:2f:95:9d:bd:3d:f0:e8:
70:d8:a1:2a:fd:72:9b:f9:6f:b0:a0:74:6d:c1:e2:
bd:4d:32:ed:7f:25:c2:9a:81:84:a4:1b:f1:59:52:
57:a1:56:6f:e7:fa:ac:99:00:2d:5d:24:0f:70:1c:
ae:5d:34:51:6d:7a:a1:32:db:0d:1f:32:3f:7c:0d:
b7:43:aa:71:26:6c:74:be:53:be:8d:f8:2e:6c:57:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:04:E9:A5:99:6E:C7:66:40:75:08:30:64:0D:66:11:82:67:78
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c4:36:88:ed:c8:41:1a:4b:ba:0b:53:c6:62:21:be:e3:01:
a3:08:38:e0:32:5a:26:44:11:af:8a:73:c2:c6:89:13:7b:f1:
45:ca:ea:2c:80:f5:f4:61:2f:1a:f3:d3:64:9c:38:db:63:c0:
f9:f5:bf:5d:79:db:1b:05:90:ac:9f:61:3c:6d:cf:8f:67:8b:
17:1e:9f:96:0b:f1:0c:86:7d:46:b3:98:fc:a6:1e:84:77:2e:
9d:5a:47:23:80:06:a7:e6:30:51:24:09:9b:b5:c2:fe:8d:fc:
fa:44:04:98:b5:15:cf:62:83:65:f2:ca:ba:7b:27:f3:a8:f1:
37:a0:1a:4a:cb:f1:48:80:2a:20:7e:a4:e8:32:39:b3:c6:9a:
c9:b0:4d:89:e2:49:a9:34:4d:3e:0d:19:03:5b:35:d8:b3:5c:
35:df:b2:45:52:fb:e6:e5:ec:92:70:d7:b9:bb:5c:0b:21:d3:
84:55:6b:2c:6f:bb:05:65:5d:93:49:79:28:28:0f:51:5a:51:
a3:aa:c7:72:b1:47:11:85:40:cb:3f:5d:64:92:3d:56:2b:39:
1c:f8:fe:18:4d:60:72:81:6b:46:7a:9e:0f:9b:79:fb:6a:63:
70:35:63:99:63:68:b9:d2:2b:05:e7:7b:e5:ac:27:3e:31:cd:
71:7f:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:27 2026 by rpki-client