Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: v09xENqHsHW+4Ns1n67sZFwdBFgzUT1f1oxhUi6BufM=
Subject key identifier: 17:A0:E5:11:3D:77:36:65:5C:26:B7:4C:14:51:FC:30:85:57:E6:CE
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 019D27DF529AA5FBF26D51FA3FB4B788EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 0708
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: zcF9s4Aot8y7eK3gozZII7DANtnTlE+bTzoIYriZMFI=)
2: ejZDEXBG6lJfQBaB_r07TXkoi64.roa (hash: S5aamcy+0zShe8pnJRlRZQ6L4/p8VXPVoAbyx/8mm70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:52:9a:a5:fb:f2:6d:51:fa:3f:b4:b7:88:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=17a0e5113d7736655c26b74c1451fc308557e6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:e2:b8:d8:2c:a4:25:7d:12:fa:ff:fc:7c:
03:5c:cb:ee:a1:1e:36:93:ff:91:2e:84:a0:94:e2:
ce:b9:a3:4c:01:de:72:6b:a0:85:a8:ff:b1:6a:53:
0b:d9:87:94:80:c2:ac:7a:9a:64:6d:dc:5d:b0:69:
4f:b4:bc:0e:dc:14:0d:b9:0f:c4:e8:b0:15:b2:73:
a1:0e:22:88:9a:7c:8a:44:d4:ec:23:e7:e9:b1:a6:
b9:11:7b:a9:9f:77:1a:8e:a4:1a:26:89:05:5b:1b:
09:5b:17:f3:17:51:bb:48:f0:ec:2c:e4:ca:32:c2:
54:80:92:d1:52:db:77:aa:c8:eb:22:05:d8:bf:f5:
19:54:1f:96:ad:bf:da:6d:e8:e9:e5:ea:3d:ce:0c:
41:d5:42:45:84:1a:36:f1:8e:8b:aa:d5:94:c5:1c:
55:3f:c9:b3:78:e9:fb:2f:95:a2:2d:40:f1:d9:58:
49:d6:4e:85:71:a1:90:47:eb:62:31:8a:6c:67:f6:
9c:38:0a:61:b3:7b:2f:09:d2:28:c7:44:d8:56:60:
d3:9d:9f:51:c0:12:2c:c2:d3:c7:42:2e:a0:12:5c:
f6:12:62:35:f4:9a:69:11:ff:ae:17:d8:61:b1:90:
19:f4:4f:65:d2:1e:a1:b8:53:57:3c:96:61:fa:e5:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:E5:11:3D:77:36:65:5C:26:B7:4C:14:51:FC:30:85:57:E6:CE
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:51:14:1b:88:70:57:41:54:f8:71:92:f7:e7:87:4e:eb:
0b:50:a4:8f:61:da:07:9d:95:e7:d5:43:ed:72:30:6f:98:51:
bb:98:0c:dd:96:4a:55:95:a2:87:00:25:17:56:a1:64:da:7b:
ea:93:3a:2e:b2:c8:7b:15:f4:bb:8e:78:ca:d8:12:cd:c2:f0:
e3:4b:fe:fb:b0:38:68:91:4c:6d:32:43:f0:52:fa:52:29:21:
6a:d1:6f:15:48:42:18:04:86:37:48:68:83:4a:bf:5b:62:72:
f4:61:2c:19:c4:c8:92:f4:6c:c1:94:2c:dd:84:77:bb:8f:cc:
a6:0b:a7:7e:98:ee:72:89:aa:21:1d:0e:bd:32:ec:95:cc:e6:
7d:3b:f7:47:15:d5:c9:79:db:21:67:c0:d8:bf:b4:76:d4:5c:
52:18:0e:50:08:b4:6d:c4:1f:75:af:7c:5f:aa:6c:dd:69:a5:
8f:b5:4f:d0:bb:8e:a1:6a:5e:29:21:2c:56:c8:f3:b0:f2:12:
cc:1c:48:e7:d9:0f:13:77:3b:16:0c:b7:9c:6e:c4:1a:20:f7:
47:d1:fd:b2:00:09:1d:d5:58:4b:e8:dc:75:2b:7f:7f:ca:ca:
14:83:f2:68:9a:9d:59:7b:11:dd:b4:fb:cf:51:19:a9:43:97:
37:04:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:43 2026 by rpki-client