Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: 22M84hFbEejGWw7nJP+4u16WHmF3txPSfM9hmicJiVw=
Subject key identifier: A9:91:E2:A7:38:7D:74:5E:DE:96:53:AA:49:B1:58:53:6F:6A:CC:79
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019F133AC9D7D635E9AAA629C3791AE46FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0F4D
Signing time: Mon 29 Jun 2026 11:54:07 +0000
Manifest this update: Mon 29 Jun 2026 11:54:07 +0000
Manifest next update: Tue 30 Jun 2026 11:54:07 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: 8AnsL4Azt4XOCHGTU7stlTkoX0qozzCB2lJgpOKlI/8=)
2: Z07oGH4qALSlhCqp4P64q2iB1us.roa (hash: Z4N+HOJqsVfo6FvilkavZbY8gKGAnvRy13Fs0EXFZTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:3a:c9:d7:d6:35:e9:aa:a6:29:c3:79:1a:e4:6f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Jun 29 11:54:07 2026 GMT
Not After : Jun 30 11:54:07 2026 GMT
Subject: CN=a991e2a7387d745ede9653aa49b158536f6acc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:43:a4:39:8f:05:f5:32:5c:72:2a:bf:71:
c7:84:c4:27:9f:42:72:b3:66:bd:c5:68:7e:91:91:
a4:69:4e:2d:93:14:cb:63:fb:c7:67:a8:73:cd:2c:
8a:32:e1:2a:dd:3b:53:fd:2d:8c:3d:46:96:47:88:
cc:33:53:ce:8a:02:91:47:80:c0:03:29:3f:a5:c0:
83:d2:46:a9:f6:ae:8c:f8:b4:25:da:cf:b4:69:24:
77:ea:f1:f2:b9:31:4a:0c:ea:02:7f:e7:f7:cb:9e:
53:53:30:b3:b7:45:77:e9:9d:ca:78:92:34:58:88:
e8:47:5d:98:c4:de:8d:48:2f:bf:c9:14:1e:d8:2b:
2f:82:2e:62:7e:cd:0b:e5:18:af:7b:49:8f:a6:c8:
e8:22:a7:5f:fa:24:33:9e:81:32:b4:d9:44:58:71:
99:6b:d6:44:6b:c6:82:e8:89:0a:9d:7c:b3:18:8a:
fb:0f:ac:01:1c:d8:a5:cd:d1:21:a0:ef:88:d8:df:
07:62:f4:36:45:dd:5b:70:28:f6:16:27:82:5f:a6:
c5:97:3e:a4:a6:ff:89:7f:55:1e:93:ff:6f:72:83:
f6:8d:43:db:5b:0b:37:a9:5b:c3:0a:ab:b8:04:7f:
7d:33:b8:4a:bb:4c:c1:b5:d8:57:f7:27:2c:0d:07:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:91:E2:A7:38:7D:74:5E:DE:96:53:AA:49:B1:58:53:6F:6A:CC:79
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2e:27:a8:a5:14:bf:99:37:23:2d:1b:04:1a:7f:fd:e4:1e:
01:79:a8:89:ad:f3:11:61:ef:4a:d2:8e:7c:98:f2:a9:99:78:
65:aa:5f:76:d0:72:be:f5:6c:e4:56:bf:b7:84:86:f7:4e:00:
a6:da:e4:f4:f2:0c:4f:92:b0:4f:59:d0:b1:80:fc:2f:07:c2:
8a:c9:ea:b6:62:01:a0:de:4e:e2:3e:2b:b9:7f:37:36:30:a4:
8f:8d:3d:98:a4:dd:04:4a:4b:72:6f:10:c3:e4:98:d9:52:f6:
b0:91:0a:9b:f0:4a:30:f0:89:49:c5:c1:ed:6a:a4:9f:35:8c:
55:14:f2:76:7a:e1:fe:4f:89:40:bc:c6:07:07:73:e3:51:bd:
58:e6:6e:27:f8:55:d1:b3:5c:4c:95:07:a0:37:15:af:9c:18:
5b:45:a8:fa:56:c1:4a:71:ec:b9:d8:3f:9b:e3:09:37:3a:25:
b1:6e:18:ed:cd:b2:e2:4b:6f:f0:97:7d:ab:cd:5a:ad:47:ab:
f8:8f:5a:e1:25:3d:42:ac:0b:89:06:e0:a5:c1:dd:60:c4:8e:
76:dd:00:96:96:bd:27:d7:71:84:dd:09:55:df:96:aa:e5:2c:
fd:bd:0f:55:1d:5e:b3:51:37:f1:ea:f5:12:99:25:fe:b6:bc:
7a:7b:8b:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TOsnX1jXpqqYpw3ka5G++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3
NDFjMGQwHhcNMjYwNjI5MTE1NDA3WhcNMjYwNjMwMTE1NDA3WjAzMTEwLwYDVQQD
EyhhOTkxZTJhNzM4N2Q3NDVlZGU5NjUzYWE0OWIxNTg1MzZmNmFjYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqVDpDmPBfUyXHIqv3HHhMQnn0Jy
s2a9xWh+kZGkaU4tkxTLY/vHZ6hzzSyKMuEq3TtT/S2MPUaWR4jMM1POigKRR4DA
Ayk/pcCD0kap9q6M+LQl2s+0aSR36vHyuTFKDOoCf+f3y55TUzCzt0V36Z3KeJI0
WIjoR12YxN6NSC+/yRQe2Csvgi5ifs0L5Rive0mPpsjoIqdf+iQznoEytNlEWHGZ
a9ZEa8aC6IkKnXyzGIr7D6wBHNilzdEhoO+I2N8HYvQ2Rd1bcCj2FieCX6bFlz6k
pv+Jf1Uek/9vcoP2jUPbWws3qVvDCqu4BH99M7hKu0zBtdhX9ycsDQehQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmR4qc4fXRe3pZTqkmxWFNvasx5MB8GA1UdIwQY
MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt
MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy
LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARi4nqKUU
v5k3Iy0bBBp//eQeAXmoia3zEWHvStKOfJjyqZl4ZapfdtByvvVs5Fa/t4SG904A
ptrk9PIMT5KwT1nQsYD8LwfCisnqtmIBoN5O4j4ruX83NjCkj409mKTdBEpLcm8Q
w+SY2VL2sJEKm/BKMPCJScXB7WqknzWMVRTydnrh/k+JQLzGBwdz41G9WOZuJ/hV
0bNcTJUHoDcVr5wYW0Wo+lbBSnHsudg/m+MJNzolsW4Y7c2y4ktv8Jd9q81arUer
+I9a4SU9QqwLiQbgpcHdYMSOdt0Alpa9J9dxhN0JVd+WquUs/b0PVR1es1E38er1
Epkl/ra8enuLog==
-----END CERTIFICATE-----
Generated at Mon Jun 29 20:21:53 2026 by rpki-client