Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
File: Sbo670PAo_CNKrW5MRwGJcwrEYo.mft (raw, json)
Hash identifier: otB11CqmdxqNCQEx6bC30jgA+EQ1tR6D7HlCITV1zB8=
Subject key identifier: EE:F4:AA:2C:04:08:7A:F7:91:99:49:49:EE:23:65:44:FE:22:A5:B6
Authority key identifier: 49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
Certificate issuer: /CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
Certificate serial: 01A0DA28A7BD955406AEB6E37B622EF8E527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
Manifest number: 9E
Signing time: Fri 25 Sep 2026 20:01:32 +0000
Manifest this update: Fri 25 Sep 2026 20:01:32 +0000
Manifest next update: Sat 26 Sep 2026 20:01:32 +0000
Files and hashes: 1: Sbo670PAo_CNKrW5MRwGJcwrEYo.crl (hash: ant5NCZKaH5Kkgtn6FhBCBXCWIYul7W1846/z93WWOM=)
2: rRYXF778h2zxEKTxbR3XCmsKwRY.asa (hash: QUmdN+d6JbOesGKhvE1uI335IDnmyzy1AQt3iQvb1qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:a7:bd:95:54:06:ae:b6:e3:7b:62:2e:f8:e5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
Validity
Not Before: Sep 25 20:01:32 2026 GMT
Not After : Sep 26 20:01:32 2026 GMT
Subject: CN=eef4aa2c04087af791994949ee236544fe22a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:8e:9f:49:1e:fe:74:5f:03:2d:2d:2e:fa:
35:3c:bc:e4:60:c1:62:0d:8f:f7:9c:1c:9f:bf:ec:
e9:f0:5d:9b:28:7e:6e:8b:70:f3:60:3d:3f:34:04:
5e:e1:07:35:1b:fb:40:3f:1d:83:41:a4:d6:cb:43:
71:de:1d:95:4a:41:75:b9:9e:c6:ff:4f:ee:ec:72:
f4:d9:5c:e0:6d:c6:40:ea:fb:29:94:e4:cb:c0:1a:
24:fc:8d:e6:f1:1c:6c:a8:27:df:2e:2e:dd:0b:c1:
89:ef:03:9c:14:bd:72:a1:69:61:4e:49:de:a9:bc:
e1:b9:db:11:c7:33:6c:a2:86:8c:5e:e4:5f:19:8b:
4b:f8:f4:6a:1b:2d:71:46:47:dc:a4:44:d4:79:dc:
9c:4d:16:d2:7d:85:d8:df:ee:63:ee:f4:13:74:c4:
0b:72:c7:ce:84:33:26:18:ee:17:f2:88:1a:da:c6:
e3:54:d2:86:2c:6d:c6:92:b1:9d:40:c0:81:d4:be:
3c:d6:7a:7b:f6:b9:54:08:db:49:36:98:f1:f0:a6:
d8:73:e9:43:61:ab:f6:24:e4:4f:24:25:e8:fb:3d:
18:43:0d:ca:f3:96:06:89:19:8e:f4:3f:76:bc:83:
55:40:0c:60:b7:7a:1f:43:09:2f:cf:b6:59:0d:f9:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:AA:2C:04:08:7A:F7:91:99:49:49:EE:23:65:44:FE:22:A5:B6
X509v3 Authority Key Identifier:
keyid:49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:72:ac:0a:d7:bb:32:2a:67:5c:36:27:58:63:99:67:1c:
22:d1:77:a0:4e:07:b7:ba:92:01:75:bc:51:21:ea:9f:91:1a:
d4:f2:af:07:2f:33:6e:f8:2a:06:c3:39:8e:95:77:88:11:22:
e7:65:4b:04:3c:33:55:d0:4a:2b:ab:d0:79:93:4e:6b:39:38:
34:5d:20:aa:67:6e:3a:57:41:2d:83:1a:ad:5b:3e:25:1b:bb:
75:f3:cd:b5:17:fe:e3:0a:75:1a:80:e2:e3:99:03:4f:6e:83:
21:07:30:ba:b0:75:e0:7c:96:5d:4e:56:82:9f:4c:bd:a7:82:
ba:a9:cc:dd:8c:f2:4f:87:8e:78:d9:9a:2a:c3:2a:11:dd:58:
c5:28:69:f8:6f:4b:79:21:7e:46:41:32:fe:8f:11:ec:eb:66:
b2:11:b5:00:7d:79:d3:d7:af:e7:49:b9:69:6a:51:75:eb:aa:
0e:04:65:77:9a:6b:46:29:49:c5:50:22:47:f5:44:b9:c2:5d:
18:bc:89:8e:b4:f1:1f:08:ac:51:c8:03:45:ff:9c:e9:37:0b:
eb:e8:09:aa:d5:d8:cc:08:e8:cb:aa:43:e5:73:37:92:ef:fa:
9c:dd:b7:e1:6a:66:0b:bc:bd:0d:32:fa:fb:1f:f3:18:58:4e:
01:47:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:06:57 2026 by rpki-client