Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
File: SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json)
Hash identifier: omXmhprkoZFGtdJZ/cH9d8zc+2WUPDfJUbU+ulCDml8=
Subject key identifier: CA:0D:51:BA:00:73:F4:5B:79:F1:26:DC:49:1B:78:7D:A1:D3:99:6D
Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635
Certificate serial: 019D2704AF202112172DFEC879B850BC56E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
Manifest number: 1028
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: qhUH1UE1XXlL79fczJ/PAl1F3oc+Qraa4WuvUSk9kdo=)
2: ux9t1taenzMzHDc2wmWt_xH_KEM.roa (hash: NpD2C6KlNQ/GY5fAYSdqeCGTMMgpVvFEpoOp4C5rZfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:af:20:21:12:17:2d:fe:c8:79:b8:50:bc:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=ca0d51ba0073f45b79f126dc491b787da1d3996d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:51:a7:84:ed:d2:d4:5d:98:8d:b3:d4:86:
96:ab:bb:bb:18:7d:99:7c:f6:be:2e:f7:bf:b9:80:
40:61:2e:22:17:f7:fc:1f:54:a0:f7:23:bf:a4:f1:
00:88:22:05:08:77:de:33:d4:2e:78:32:3e:e7:19:
65:53:f6:8a:83:0d:29:9d:6d:86:14:8f:44:d6:f5:
f1:0e:7c:a9:d1:11:69:17:2d:eb:ed:02:e0:bb:ad:
68:bc:19:c6:76:f4:4e:12:d4:ec:26:9f:df:fd:5c:
a0:ec:71:88:c6:1a:ad:c4:79:76:c3:b5:4e:3d:1e:
f4:0b:26:9a:9c:b6:9e:04:86:43:eb:a4:29:c5:45:
04:f0:2c:27:c6:c0:39:3a:de:1c:99:0a:4d:01:b0:
56:f6:e6:cd:e8:fa:40:4f:f2:e7:51:06:b8:4c:e3:
10:f5:28:85:98:0c:e5:45:15:b1:d9:fa:3e:b4:7b:
83:4b:90:8e:24:c9:80:fb:70:ef:3a:01:2f:7f:29:
86:10:4b:5f:ce:58:d8:21:11:80:0f:b7:c4:98:c7:
d5:80:2f:db:8c:e3:60:31:fa:2a:e3:08:cd:bd:93:
10:8c:2d:4d:01:48:48:73:5b:ef:f0:ff:11:60:95:
b5:2e:f5:19:41:d7:51:86:57:c1:8c:99:9a:ed:91:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:51:BA:00:73:F4:5B:79:F1:26:DC:49:1B:78:7D:A1:D3:99:6D
X509v3 Authority Key Identifier:
keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:bf:dc:1e:d5:ed:ae:74:6f:89:cf:95:a7:9e:1f:1a:bc:
7a:e3:33:fc:ad:7c:7e:be:9c:69:54:b7:05:3b:75:f0:3b:63:
2f:c7:41:cd:96:f5:2e:ce:fc:cd:6b:7f:e4:fb:dd:e5:f4:49:
16:09:01:30:63:ee:b1:29:13:df:03:e9:01:e5:22:72:03:cd:
74:e3:ab:de:0a:b5:8e:b5:45:93:6b:c6:f3:4e:2b:10:4c:53:
96:88:6a:a6:33:ee:f5:c1:21:c8:62:2d:5a:fa:c5:17:88:93:
b1:a4:39:6a:6f:5c:9b:c6:9c:77:f6:77:11:c6:88:51:a5:84:
b0:7d:a5:a4:dd:2a:62:1c:07:6e:7b:2e:46:04:ef:70:e9:a3:
35:cf:85:5b:10:01:fd:f0:02:76:42:2b:4c:a7:49:ab:1d:b6:
33:a7:f2:cd:b9:5e:82:39:9c:cc:bd:2e:32:c9:05:b1:1f:c1:
05:e8:f9:68:6b:fd:c7:dd:07:58:d8:57:67:38:fb:9b:b9:8f:
a8:00:3b:a9:53:7a:72:b8:2a:78:94:4d:bd:5e:d4:9b:5b:a4:
8d:93:c4:27:05:56:a7:fe:2d:33:ad:66:b9:7c:f1:14:91:8d:
ff:be:70:7f:ec:13:7a:8f:90:a0:b2:ee:5a:be:4f:8e:5e:59:
19:1e:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:49 2026 by rpki-client