Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
File: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft (raw, json)
Hash identifier: Oa82eSXSQ8Xi58SM8knBOVQ2Wb26m46OVD/BGPHShRw=
Subject key identifier: 04:20:6D:47:85:A8:97:06:97:C7:E6:64:C9:4E:DF:6A:3C:16:B6:53
Authority key identifier: B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
Certificate issuer: /CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Certificate serial: 01A0CE246F164A04B6DC857C8747B6AFCEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:29 +0000
Manifest this update: Wed 23 Sep 2026 12:01:29 +0000
Manifest next update: Thu 24 Sep 2026 12:01:29 +0000
Files and hashes: 1: C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa (hash: pNsPtp3Jh4QV8tjlNFIUx759yR4vmvZaCGaiFZ7nHBI=)
2: X_U4PTICjxMwz_zzgRb2YgODG9k.roa (hash: v8UPV4SYAEOIqRdsOLJFm+f1ryb3otUE2YTskYRIYtM=)
3: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl (hash: kkLFNvwxjeLRI3bPlixYYNUQM2I9LF8VuLtrUh8+bhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:6f:16:4a:04:b6:dc:85:7c:87:47:b6:af:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Validity
Not Before: Sep 23 12:01:29 2026 GMT
Not After : Sep 24 12:01:29 2026 GMT
Subject: CN=04206d4785a8970697c7e664c94edf6a3c16b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:d0:4d:c4:34:8e:fd:7c:79:ea:23:e5:20:
a8:c6:e4:ca:88:7b:b1:ac:e3:d5:97:4d:56:70:69:
c5:84:e7:12:69:4c:be:da:b6:b2:80:83:65:63:a5:
a1:47:11:8f:8e:b5:5d:70:0d:32:87:1b:21:e1:89:
c5:b9:dd:b7:d9:94:b0:a3:cf:30:b5:1f:79:d3:c7:
3f:ed:65:af:a5:14:43:48:a2:6c:20:bb:40:d5:ef:
81:72:20:c3:1b:82:6b:c6:29:97:db:30:18:79:24:
96:36:22:6a:35:b9:f8:ac:7f:3f:5f:79:f6:8c:03:
cf:1d:36:db:86:e3:e1:d9:e6:3e:0f:96:42:78:ca:
e7:31:c8:10:eb:1c:b1:15:be:2f:d6:c7:f4:a9:5e:
2b:f4:6f:47:fd:0a:40:f6:bd:81:47:4f:e8:f3:35:
31:78:1c:36:58:bb:06:c5:3a:ca:c5:0a:c3:13:05:
c1:b2:10:dd:40:9b:9b:9c:c9:1f:01:0d:42:cd:05:
18:e3:38:5e:59:4a:51:38:e6:d5:fe:01:89:87:47:
38:d0:a5:d0:e3:e3:8b:48:ed:c5:d6:be:73:3e:00:
68:59:24:35:b8:fe:87:f5:86:90:92:ed:44:f2:b7:
72:ec:77:14:e1:5d:fc:19:2c:2b:87:d9:c0:de:ec:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:6D:47:85:A8:97:06:97:C7:E6:64:C9:4E:DF:6A:3C:16:B6:53
X509v3 Authority Key Identifier:
keyid:B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:e5:cc:14:11:12:df:bf:d0:af:49:43:bb:b7:06:54:dd:
03:db:af:df:8b:b8:4b:8c:d9:22:73:f0:04:c1:66:0b:5d:53:
e1:91:a1:94:76:a9:fa:e0:5d:3e:6f:83:7e:cb:74:7d:33:1a:
39:63:c6:84:43:43:ee:7d:19:bc:91:01:46:a5:95:97:c9:58:
90:0a:13:e1:2c:b5:23:90:a2:c1:db:b0:72:b1:08:96:5e:40:
e0:fd:a3:13:04:9c:26:2e:3e:20:67:1c:20:01:84:4f:f5:eb:
6c:5c:0f:ca:fe:e5:e8:87:0f:d7:1e:74:7d:a5:b3:c1:9b:73:
b0:d2:98:1a:3a:92:14:bb:59:e9:df:63:06:1e:2d:ec:7a:ce:
64:89:0f:f9:f4:e7:e4:9e:61:ad:87:d9:5b:4c:d9:6e:0c:af:
2c:04:03:1a:1e:b5:3b:7b:e2:68:f6:99:1e:a0:c5:3d:c7:07:
07:cc:c2:3a:17:29:68:2d:40:a5:bc:f2:8b:49:c7:fe:4b:e1:
9c:00:be:2e:98:74:8a:62:9c:17:9f:8b:b8:3b:60:6a:4b:94:
ed:35:24:53:ac:83:31:09:14:f2:64:73:08:9a:97:d8:11:58:
4d:eb:fa:6a:03:1d:23:23:d2:ac:42:73:76:ab:e7:58:3c:67:
e3:b8:4e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJG8WSgS23IV8h0e2r86mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYjM2MjY3NzgzZmEzNjE1ZjI4ZmYwYTE4NWU3ZTEzNDY3
YzgyZTMwHhcNMjYwOTIzMTIwMTI5WhcNMjYwOTI0MTIwMTI5WjAzMTEwLwYDVQQD
EygwNDIwNmQ0Nzg1YTg5NzA2OTdjN2U2NjRjOTRlZGY2YTNjMTZiNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhbQTcQ0jv18eeoj5SCoxuTKiHux
rOPVl01WcGnFhOcSaUy+2raygINlY6WhRxGPjrVdcA0yhxsh4YnFud232ZSwo88w
tR9508c/7WWvpRRDSKJsILtA1e+BciDDG4JrximX2zAYeSSWNiJqNbn4rH8/X3n2
jAPPHTbbhuPh2eY+D5ZCeMrnMcgQ6xyxFb4v1sf0qV4r9G9H/QpA9r2BR0/o8zUx
eBw2WLsGxTrKxQrDEwXBshDdQJubnMkfAQ1CzQUY4zheWUpROObV/gGJh0c40KXQ
4+OLSO3F1r5zPgBoWSQ1uP6H9YaQku1E8rdy7HcU4V38GSwrh9nA3uyWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQgbUeFqJcGl8fmZMlO32o8FrZTMB8GA1UdIwQY
MBaAFLGzYmd4P6NhXyj/ChhefhNGfILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2JOaVozZ19vMkZmS1A4S0dGNS1FMFo4Z3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2Yt
NTllNmE2ZDRkNTc2LzEvc2JOaVozZ19vMkZmS1A4S0dGNS1FMFo4Z3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YjRkZjctZDcyYi00NzRmLTk2M2YtNTllNmE2ZDRkNTc2
LzEvc2JOaVozZ19vMkZmS1A4S0dGNS1FMFo4Z3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuLlzBQR
Et+/0K9JQ7u3BlTdA9uv34u4S4zZInPwBMFmC11T4ZGhlHap+uBdPm+Dfst0fTMa
OWPGhEND7n0ZvJEBRqWVl8lYkAoT4Sy1I5CiwduwcrEIll5A4P2jEwScJi4+IGcc
IAGET/XrbFwPyv7l6IcP1x50faWzwZtzsNKYGjqSFLtZ6d9jBh4t7HrOZIkP+fTn
5J5hrYfZW0zZbgyvLAQDGh61O3viaPaZHqDFPccHB8zCOhcpaC1Apbzyi0nH/kvh
nAC+Lph0imKcF5+LuDtgakuU7TUkU6yDMQkU8mRzCJqX2BFYTev6agMdIyPSrEJz
dqvnWDxn47hO7w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:11:37 2026 by rpki-client