Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: xS8WnCqSauE/9Bw4VDGQJ3lY5xFDLL8QH2qMaJF7TnM=
Subject key identifier: 3B:6F:ED:49:F0:49:E1:79:01:E9:CB:5D:DF:3F:92:60:B1:2D:74:4F
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 01A111BC71E630C04745D1898BE655C64CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 1650
Signing time: Tue 06 Oct 2026 15:02:04 +0000
Manifest this update: Tue 06 Oct 2026 15:02:04 +0000
Manifest next update: Wed 07 Oct 2026 15:02:04 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: plF1y4PLjqbrN+d6I71btkMuROefT40Tk72goqeovUg=)
2: wOjdRDY4rMDU4XDk35HoLt7uT2M.roa (hash: 7YjJqmLdz1HfJE+GpOkltOPkNzD9vAKu54sBhDV3osE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bc:71:e6:30:c0:47:45:d1:89:8b:e6:55:c6:4c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Oct 6 15:02:04 2026 GMT
Not After : Oct 7 15:02:04 2026 GMT
Subject: CN=3b6fed49f049e17901e9cb5ddf3f9260b12d744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:fa:bf:00:15:97:8a:2d:2c:d0:5a:f4:cd:
0f:19:4b:ac:ec:6e:73:0b:69:8b:19:c5:22:4d:08:
d8:75:e2:ff:62:00:aa:7d:d3:ce:86:85:9d:28:da:
62:da:c9:96:d5:b7:57:5f:4d:52:8b:02:4e:9a:86:
e7:c3:9c:5f:bc:0e:02:55:4e:bc:34:25:50:a8:95:
36:42:46:24:bb:eb:4a:f9:90:7f:4a:ee:91:a7:93:
e3:b3:d6:e9:fb:9e:bb:7c:b9:98:e4:01:7f:53:ec:
23:25:69:3f:73:80:3f:c3:89:81:bf:05:1c:9d:dc:
96:3f:51:ed:4d:e6:5b:69:bc:46:4f:18:18:cd:50:
48:95:f7:65:5f:60:78:a5:84:e2:d8:3b:12:d9:6a:
82:6c:3d:30:2d:0f:c0:45:11:d1:26:79:20:75:70:
ad:c9:b9:f4:33:4b:5e:4c:7a:3a:dc:42:ee:04:65:
d0:51:48:9d:05:d1:e0:ec:3d:d3:ea:f7:af:0e:0b:
a3:9e:7e:06:74:c2:b0:82:b9:f5:c5:17:33:47:49:
6d:46:4c:5d:c8:c4:9b:52:3b:46:73:82:a4:a8:e1:
75:2e:14:80:32:eb:35:d6:13:b4:8b:57:b0:58:56:
40:b5:c2:44:39:01:80:ec:5c:33:d1:79:3e:d9:12:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:ED:49:F0:49:E1:79:01:E9:CB:5D:DF:3F:92:60:B1:2D:74:4F
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:d9:23:47:25:30:e8:0b:47:4f:88:b9:77:06:5d:a8:f8:
fc:2e:68:e5:40:3b:b5:82:4e:aa:00:2c:ff:a3:43:b1:43:be:
57:39:a1:48:f5:df:03:f5:a1:14:53:d9:d3:05:1b:a7:57:b4:
d5:64:ba:9c:80:0e:15:db:cd:a0:27:66:28:56:6d:38:12:40:
e9:70:50:6d:5b:43:90:69:66:a4:ba:f7:d0:b3:02:c7:c1:d7:
87:ed:5b:90:91:a4:95:01:d9:0c:7c:7d:30:f3:af:e7:10:08:
00:56:79:ac:1e:e4:09:54:73:35:b4:0b:99:63:33:ba:47:f6:
37:5c:0d:81:5d:03:93:22:a8:46:96:57:be:97:5b:69:2f:49:
38:53:3b:f2:5e:52:50:e2:78:47:21:ae:54:6e:2a:cc:8d:dd:
c1:b0:11:6f:c5:08:0e:52:36:f4:e4:f8:49:bc:14:d4:28:29:
c4:ce:43:23:85:a5:87:2e:4f:d6:ee:c6:21:44:99:93:f3:12:
94:84:2a:8e:97:7e:e3:30:40:e9:28:31:3f:e2:f2:b2:38:5e:
d9:d7:88:da:90:ed:ab:80:fc:b7:e7:f9:8d:93:c9:7b:e6:29:
74:ba:d1:e8:fa:ca:6f:7b:11:8e:ba:2b:75:66:9b:cc:e7:9b:
c8:fa:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:53:02 2026 by rpki-client