Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
File: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft (raw, json)
Hash identifier: UhsHuSdGDVu+S1o5D7qi4moy6leqcPGUVZWaXdlBOOY=
Subject key identifier: 88:87:6D:60:64:D9:5B:D7:CA:66:6C:F0:5E:49:CC:6D:44:B2:8D:4D
Authority key identifier: B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
Certificate issuer: /CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Certificate serial: 019F916D081DC5C841FD0AA60A1F74C96CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:09 +0000
Manifest this update: Fri 24 Jul 2026 00:01:09 +0000
Manifest next update: Sat 25 Jul 2026 00:01:09 +0000
Files and hashes: 1: C5_lqSUQ6WLQmcw5DaQ4glmbd-c.roa (hash: pNsPtp3Jh4QV8tjlNFIUx759yR4vmvZaCGaiFZ7nHBI=)
2: X_U4PTICjxMwz_zzgRb2YgODG9k.roa (hash: v8UPV4SYAEOIqRdsOLJFm+f1ryb3otUE2YTskYRIYtM=)
3: sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl (hash: kxnmUDu5riL+4/2DT4YjZfAgM0WxqTJhaHgwnCTU9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:08:1d:c5:c8:41:fd:0a:a6:0a:1f:74:c9:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b36267783fa3615f28ff0a185e7e13467c82e3
Validity
Not Before: Jul 24 00:01:09 2026 GMT
Not After : Jul 25 00:01:09 2026 GMT
Subject: CN=88876d6064d95bd7ca666cf05e49cc6d44b28d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:3f:97:32:1d:d8:bd:2a:9d:90:c8:06:88:
17:54:3f:70:6b:61:5a:3e:a8:44:4a:50:ac:03:f6:
10:c0:47:de:5e:f2:d8:07:bc:a7:0f:71:35:25:31:
62:97:61:1f:07:ce:5e:9d:50:72:38:30:c5:bd:5a:
86:90:ab:28:25:07:f7:0a:d3:ed:0f:3d:c3:e0:d7:
7b:6b:09:2e:79:23:cb:46:75:4c:a4:02:dc:13:10:
42:99:af:83:a4:6c:2f:10:ef:1c:03:49:34:8e:d2:
5e:95:a2:44:7f:bb:45:c3:16:b1:ec:be:73:87:34:
ee:3b:6b:3a:90:5a:26:3e:7b:6e:99:ef:20:a9:38:
26:0d:f6:17:5a:f5:f0:7c:35:59:5b:1e:4f:9e:9a:
0f:f9:c2:47:16:00:82:26:90:0d:61:71:24:f1:3a:
22:58:dd:41:19:20:33:c4:f1:bd:da:87:b7:7e:d9:
10:a4:83:62:42:82:28:23:21:03:93:68:88:26:a9:
3a:74:c7:63:ff:c9:ac:61:33:36:3a:6f:da:84:7f:
e7:d1:2b:ff:57:91:eb:21:c8:a1:0f:83:6a:8e:61:
f6:f2:47:cc:90:6a:1f:1a:53:95:53:ff:63:db:43:
ec:43:92:f3:68:61:1d:b8:4b:87:bf:e0:94:7d:9f:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:6D:60:64:D9:5B:D7:CA:66:6C:F0:5E:49:CC:6D:44:B2:8D:4D
X509v3 Authority Key Identifier:
keyid:B1:B3:62:67:78:3F:A3:61:5F:28:FF:0A:18:5E:7E:13:46:7C:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/sbNiZ3g_o2FfKP8KGF5-E0Z8guM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:89:3e:5f:8c:73:5e:dd:97:3a:cb:39:0b:ed:6f:18:59:ab:
18:10:fb:da:9d:a1:7e:8c:8b:ea:7b:88:9f:70:c9:cd:fb:8d:
ca:fe:bb:f1:90:f0:61:24:50:a8:2c:91:f9:a2:cf:07:cd:e5:
5d:aa:a7:e5:83:ea:fd:97:98:50:ad:16:48:20:b0:60:a9:71:
b9:dd:c0:d5:4c:3c:e5:38:03:55:69:72:c6:05:ff:06:1e:0f:
8b:c3:5c:e9:e7:3e:f3:b5:1d:dd:75:d1:f8:60:52:d7:b3:10:
67:05:56:bf:d3:82:85:e7:56:b9:7e:8b:25:18:c1:b1:71:54:
23:71:8a:0c:06:02:58:fc:aa:cb:d1:3f:0d:da:aa:1a:b6:b8:
a3:b0:8a:74:b6:1f:34:0e:47:f0:88:1f:f5:07:77:a9:b6:f7:
ea:93:0c:db:d5:1f:a1:05:03:e7:48:f7:50:a5:f8:5a:5d:71:
76:7c:e1:0a:08:72:0c:0b:a4:3c:c3:60:b9:93:e2:6b:42:27:
2d:65:fa:23:3f:a1:41:97:27:47:10:5a:84:fe:3e:e5:e3:df:
33:4b:fb:0f:5e:7a:77:24:34:05:4a:a7:b5:c7:f0:fd:19:a2:
10:b6:05:02:06:ad:ef:fb:cf:64:5b:3b:c4:bb:2d:99:1b:b5:
34:1e:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:05 2026 by rpki-client