Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: NoW+HNmMwZ2Bhq6keS/PsM2Pj2L3pAQtoy6akdZDnz0=
Subject key identifier: F4:6B:14:86:2D:A3:F8:3F:5A:40:83:DD:EE:30:A7:31:1B:98:43:33
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 019F9324703C4A0AF4B30A03101962D92AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 18B2
Signing time: Fri 24 Jul 2026 08:01:06 +0000
Manifest this update: Fri 24 Jul 2026 08:01:06 +0000
Manifest next update: Sat 25 Jul 2026 08:01:06 +0000
Files and hashes: 1: 5LOGjN1Wd__9ZDS6swjA9BXI75k.roa (hash: ubLg2hQhVn8wtB0qM0jKTGRZflH411XYROdch/D1MJI=)
2: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: zAxqqer2hlbmghk0ykn73aOsuOFHGWYSgtlyy2sggPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:70:3c:4a:0a:f4:b3:0a:03:10:19:62:d9:2a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Jul 24 08:01:06 2026 GMT
Not After : Jul 25 08:01:06 2026 GMT
Subject: CN=f46b14862da3f83f5a4083ddee30a7311b984333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:b1:f6:2b:5a:01:36:cf:f9:d9:a2:3f:63:
64:ea:6e:58:c1:ef:f2:f3:2e:d6:1f:76:c6:ef:b6:
31:ca:95:25:e3:04:57:2d:b4:29:8e:a9:8e:b2:d1:
65:b1:3d:c6:2c:c4:39:48:10:07:d1:8f:b9:b4:d5:
3c:69:63:1d:f5:fc:f1:9e:2d:10:64:5e:5e:e4:35:
43:57:d8:85:f0:9b:79:67:ec:68:4f:57:22:c7:9b:
0a:d9:0b:5e:26:a3:05:e4:1f:bd:32:02:b0:ad:5d:
1e:9a:c2:61:89:02:8c:c1:76:bb:8c:0b:65:39:c8:
53:42:43:0c:e9:1e:7a:6c:13:82:9a:c8:87:43:42:
fd:1c:bb:d7:ba:c1:20:7c:15:52:6e:2b:46:10:97:
7e:9c:09:17:9c:11:bf:df:44:92:19:52:be:9a:71:
02:00:be:3c:40:a7:09:bd:5e:b7:ef:b4:6b:10:d4:
dc:54:a0:ff:3a:d8:ab:b7:94:93:98:45:29:f0:33:
43:55:88:8f:bb:63:01:c8:8f:f7:5c:fd:73:f1:c1:
ce:55:5c:e3:5b:62:39:9e:83:4b:9d:04:65:cb:60:
36:87:3e:68:24:94:15:41:2f:b4:d0:30:bd:f1:6c:
81:16:9d:c7:d0:2d:30:8f:f7:5c:1e:c7:54:00:a2:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:14:86:2D:A3:F8:3F:5A:40:83:DD:EE:30:A7:31:1B:98:43:33
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:f1:d5:e0:a7:4d:f0:4f:ea:c1:48:11:1c:be:d2:d5:2f:
b5:20:b4:de:57:c7:01:df:ce:ea:ab:21:2d:51:22:e8:f3:07:
5c:fd:a6:81:bb:9a:e9:41:27:de:c5:53:90:a4:7e:a4:03:79:
00:98:5d:90:ee:28:dc:d0:ed:81:95:79:06:6f:cd:b9:b7:70:
8f:6f:67:9a:07:63:78:07:ea:72:f3:4f:c5:c1:57:80:f9:24:
3f:c7:ef:69:b9:08:04:5a:b5:65:b2:a0:7e:2e:ff:5b:14:d8:
20:82:cb:42:56:ed:d3:a6:38:93:c7:9c:4e:71:8c:cb:5c:de:
57:a3:f2:1b:74:45:8f:c2:23:c6:51:92:1f:75:85:3f:e8:5f:
4f:ca:e2:8f:e4:3c:d5:0f:b1:d5:48:4b:44:5e:d9:2d:af:e4:
a9:f9:0d:5d:ce:3a:79:37:75:48:d3:1e:a7:25:a4:c7:d1:d5:
86:c4:2d:bc:d7:6e:ba:80:c0:49:ba:0f:1c:de:83:36:b8:03:
d5:6c:fd:44:03:b3:f8:dd:46:66:20:6c:43:bf:63:e6:6f:f0:
84:9d:ad:08:32:05:98:3b:c7:7c:1a:07:23:2d:91:87:39:c2:
23:e4:00:5e:63:b9:e0:c5:ab:47:43:d3:4d:d5:47:66:f0:bc:
d1:01:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:46 2026 by rpki-client