Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: keI9Q+SadieftAqUZ92fY2VaecQMKSXjJEC7pFiY9NQ=
Subject key identifier: A1:0B:CF:2E:0B:0D:DE:CD:B5:EB:7B:2E:DF:3E:83:88:03:CA:85:F9
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 019D25F204263C6AA873B744F636E02D67C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 0C45
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: 51_BbgzWUWo6DTAu3ayMEep8mII.roa (hash: LlzlCU2PXzwgKPsniXuMY4kbQqRGH8YDiOPFJXAnqPI=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: bhtNOCItMTVQQwAemz5h0rEEo+eQtQ8k9MWm9f50p70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:04:26:3c:6a:a8:73:b7:44:f6:36:e0:2d:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=a10bcf2e0b0ddecdb5eb7b2edf3e838803ca85f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:d6:b2:5c:f0:29:98:7e:8a:c8:25:b7:ec:
15:a1:74:5b:a2:e2:05:42:72:1a:60:99:09:83:dd:
12:b0:7c:5e:ec:99:ce:26:7e:3c:a2:16:b2:bb:c4:
d8:44:04:e6:d8:de:e6:50:17:92:5c:a9:77:dc:fa:
39:4a:ce:a8:08:c1:56:cc:1c:28:cf:99:1d:01:05:
72:02:40:cd:0e:ae:cf:86:fd:1e:5b:75:60:fb:11:
90:3d:bd:e5:37:38:90:18:ee:40:e0:51:e0:62:b8:
fa:8e:a5:89:3b:40:cb:2c:db:53:62:2d:cd:43:29:
06:9c:b7:b6:86:a8:8f:eb:d6:b8:c7:d3:dd:31:1c:
81:fc:0c:c8:f2:52:c1:d8:bb:d6:b0:0f:c5:4f:cb:
a4:d2:f6:f6:41:57:a9:1b:f8:1b:2b:26:cd:38:e0:
4d:92:bb:81:fe:f3:f1:73:3a:8c:81:e8:3b:64:05:
69:1b:bc:2f:b6:cc:e6:87:e5:23:fb:ec:00:c3:de:
bb:55:f1:56:29:e0:69:56:20:be:f7:1a:31:dc:f0:
1d:c3:fd:26:30:6f:8b:ad:69:96:0c:89:90:ff:b4:
34:c5:61:2b:51:20:b0:fe:c1:88:10:f5:5d:5b:65:
29:12:e1:42:75:96:fd:ce:9c:17:a4:ea:f1:33:de:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:CF:2E:0B:0D:DE:CD:B5:EB:7B:2E:DF:3E:83:88:03:CA:85:F9
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:34:c1:3b:58:fb:03:d5:b6:63:58:bc:1c:f6:48:6d:e4:
77:df:d2:ac:a4:91:b5:bd:ed:93:5c:20:39:d2:03:5a:74:e2:
d9:57:82:47:37:6e:df:26:e8:58:e9:d9:83:d2:36:6a:75:1b:
3a:db:1c:e1:c8:64:f0:72:6e:0e:68:03:f8:f0:1b:fa:89:14:
a7:ce:14:63:b0:e6:7d:2a:6d:65:fb:94:61:65:24:d4:9c:a7:
67:86:49:90:c4:89:de:95:e7:2b:65:48:d2:b6:16:24:8a:82:
49:be:0a:6b:37:8f:81:04:2f:cc:e9:f6:69:ca:77:ce:94:4e:
e9:3e:4c:21:20:2f:4e:1c:d0:76:a3:a6:92:d9:36:fd:da:f9:
78:d0:92:f8:8a:b1:ab:d8:93:76:8e:1d:22:96:fb:96:3f:a2:
fa:16:3a:5c:8b:54:02:04:63:08:07:2f:8f:44:a5:f8:28:f1:
56:48:a3:5b:d7:0f:fc:42:e6:c7:29:83:ee:13:a7:12:50:5a:
73:49:c7:73:7b:d2:96:ff:05:2d:cc:3a:b2:22:bb:d8:c2:91:
14:2b:b5:3f:cc:e9:df:40:d2:f5:72:18:92:42:31:58:40:35:
40:08:ac:0e:e4:45:9e:81:f7:ff:f1:ac:d6:0b:54:48:51:e4:
21:1a:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:09 2026 by rpki-client