Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: y4FRYkAdlqPLHWFZN+vQqxge3xOCu+TumpeMZum/jaM=
Subject key identifier: C3:22:24:AA:1A:27:FC:F2:FA:E7:E7:48:D7:31:64:74:53:8A:1D:96
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 01A1962082B2CA63B3589016CC5018E0B69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 109A
Signing time: Sun 01 Nov 2026 08:01:15 +0000
Manifest this update: Sun 01 Nov 2026 08:01:15 +0000
Manifest next update: Mon 02 Nov 2026 08:01:15 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: Vuf6qZeUMNdeWZvIKXnBP8tWGzg9cfbnq9JiYuqFC6M=)
2: Z07oGH4qALSlhCqp4P64q2iB1us.roa (hash: Z4N+HOJqsVfo6FvilkavZbY8gKGAnvRy13Fs0EXFZTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:20:82:b2:ca:63:b3:58:90:16:cc:50:18:e0:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Nov 1 08:01:15 2026 GMT
Not After : Nov 2 08:01:15 2026 GMT
Subject: CN=c32224aa1a27fcf2fae7e748d7316474538a1d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:98:30:9d:6f:1e:9c:93:f8:bf:8f:4c:9e:
68:69:54:ce:8f:af:6a:c4:f0:0c:e3:6d:ae:34:b7:
f7:7a:33:94:7f:0a:96:a3:32:38:0f:63:2d:9a:26:
05:ce:fc:84:1f:92:9c:b9:29:3b:a0:4f:9d:c4:c1:
52:c3:1d:ca:0e:b5:af:fc:d2:1d:2a:ba:ea:8c:ae:
ed:0d:14:fe:27:7a:60:6a:ef:aa:3b:a0:91:11:cc:
f1:32:21:63:90:aa:66:d3:f8:13:78:f4:02:67:71:
8d:66:90:01:dc:2c:9a:90:67:b1:d2:ac:44:78:6f:
39:f5:fa:8f:4a:af:b0:64:13:42:32:eb:f4:3a:d6:
b6:98:95:65:d3:ac:ba:3b:8b:9e:50:c8:33:28:31:
84:1a:00:ba:ab:e1:46:b9:09:23:97:a4:a6:a4:d9:
e9:d3:9d:0f:f2:2e:b6:db:04:a1:53:8e:52:f7:9f:
19:6c:61:9b:83:30:25:77:57:f8:9e:53:4a:eb:ea:
29:c2:d0:31:10:a6:45:39:77:ff:38:09:08:84:8f:
08:a4:21:70:11:6c:f4:83:bd:99:cb:0f:c0:7b:9f:
da:54:23:8b:f6:0a:1e:e0:55:25:48:42:c9:dc:a9:
02:3f:72:01:f9:74:a9:e1:63:ea:2e:20:c1:d6:4b:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:24:AA:1A:27:FC:F2:FA:E7:E7:48:D7:31:64:74:53:8A:1D:96
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:86:6c:2a:e9:f3:c8:da:05:8c:d9:a3:96:d4:80:4d:5a:
92:08:06:e6:a1:64:c7:2a:d2:de:60:5d:51:26:8b:ad:3e:be:
e8:13:bb:07:ff:da:33:42:4a:7a:3f:a4:ce:c5:a3:db:f5:b5:
d0:e7:f5:42:7d:70:ec:e7:05:eb:f9:d2:db:f7:20:28:63:59:
4a:91:cf:6b:fd:7d:1b:7b:17:8e:19:63:e9:d3:c1:70:d8:28:
95:11:41:cc:71:e3:0d:81:4b:08:ed:0c:f7:6b:b8:07:4d:97:
4d:0c:23:68:4b:84:ce:8a:29:f0:9f:5f:3f:70:67:51:13:4c:
aa:2b:ca:ee:ac:75:76:04:fc:73:e0:cb:0e:6e:dc:0c:50:10:
15:b8:23:34:0b:47:2e:96:41:12:ba:77:80:ae:a3:95:fe:2a:
a0:73:55:9d:af:ca:09:1c:ba:51:c3:d3:e8:21:65:ce:b4:2d:
d7:42:fe:8a:af:db:e1:8d:54:6a:b8:84:bc:99:02:6a:60:28:
eb:33:59:12:ee:7b:29:8f:b2:6d:07:80:39:a9:e9:69:46:7f:
fa:d0:aa:5f:30:ca:9d:83:10:a1:72:b0:d8:91:66:e0:c6:7e:
99:68:34:5f:bf:e6:de:93:fa:a5:e3:6e:94:27:8f:c6:46:f4:
bb:f6:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:03:33 2026 by rpki-client