Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: tm92znV/zekF9YJ2louwwEaWOMkEikaA+YkmcAK1mDg=
Subject key identifier: 12:3E:D6:50:60:B9:86:4E:69:52:CB:C7:C8:90:22:BF:07:C8:03:CD
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019D28BBCF907EE4FC35D6C1D0BCBFAB1B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0E4F
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: rR2WedG72k3FMFEsXmBOBEKCDd02yMT+HqSZqq4K5Qo=)
2: tHyycM5QCv8W9vwXc_sS0QuTCdY.roa (hash: /5xLYAkh1elAbGPbQgHDZyios7R0OiSG4E8AdgZhCYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:cf:90:7e:e4:fc:35:d6:c1:d0:bc:bf:ab:1b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=123ed65060b9864e6952cbc7c89022bf07c803cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:aa:60:a9:a1:aa:be:93:fe:a3:cb:f0:5e:
2b:47:3f:28:b2:e2:2a:6b:13:9f:b2:e1:c3:99:c1:
cd:9b:d2:2a:50:65:a2:6a:07:20:3a:5c:7e:29:6f:
4e:9e:a6:3a:fc:f3:ea:58:61:bd:99:e2:e7:fe:d5:
a2:a1:21:02:65:3f:2b:de:8d:60:f9:7a:b1:a9:98:
1a:27:14:d6:64:ff:aa:d0:34:b9:29:87:bf:08:6d:
24:b7:8b:ba:25:f2:8c:33:26:18:f6:11:7e:4a:54:
2e:62:83:e3:27:30:34:64:56:8d:5d:65:fe:38:ab:
2b:07:f1:57:9c:5e:d2:54:bd:cd:04:b8:e3:d1:ab:
41:a8:09:0f:08:5a:c6:d2:1b:04:c4:d7:14:86:e8:
d5:bf:44:96:3e:cb:71:c8:0c:b1:e0:d3:79:7c:f4:
33:55:0d:a6:c4:0d:09:64:91:07:ef:00:ec:e3:67:
74:d7:b1:ab:66:aa:10:2c:2a:2c:52:83:82:bb:64:
76:90:cb:fb:35:8e:fa:8b:1b:92:18:55:d4:c2:88:
2e:05:4a:d0:20:1f:f6:e9:a7:bd:ca:98:27:ee:2a:
dd:c2:84:01:04:cb:fa:9b:eb:02:e3:10:cf:96:9d:
de:c3:10:9e:9a:0a:a6:6d:77:e0:f6:2d:ac:a0:d0:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:D6:50:60:B9:86:4E:69:52:CB:C7:C8:90:22:BF:07:C8:03:CD
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e7:93:ca:e5:e0:d3:60:66:4a:fd:89:1a:b6:73:96:7b:c6:
a8:47:50:56:61:a9:c5:b3:ae:0f:2a:4e:ca:3b:e2:13:82:20:
cf:aa:7b:c4:4c:fa:42:34:39:f0:cb:20:0c:69:26:38:88:10:
2b:2c:c7:95:f8:d5:26:1c:07:81:d4:3c:ab:53:d7:1d:f1:e6:
61:6d:ab:43:bf:14:c6:63:9a:ed:e7:fa:55:80:58:9f:bf:7c:
59:98:10:c5:e3:25:6c:b1:15:16:1f:77:42:25:ab:13:6c:b6:
e1:c1:58:cd:04:e1:c9:f3:2c:64:12:0d:85:fe:5d:d2:85:9a:
98:2d:72:00:65:fd:70:1f:71:40:e3:bd:2c:5c:d7:2d:7f:db:
41:86:cc:cc:08:e3:b7:35:ec:ed:81:3c:1c:2a:08:6c:af:6a:
2f:9e:02:76:d5:1a:3c:4a:18:7f:4b:d3:a0:e9:9b:7e:8c:05:
3b:c7:66:79:37:1c:9f:27:71:5b:54:e7:d8:7a:2b:df:a9:2d:
4c:f8:78:eb:a2:8e:b4:34:fc:13:0e:0c:9a:a4:a5:1f:31:ea:
17:95:86:49:38:e1:a5:d0:59:0b:f4:f0:26:2e:5b:e7:08:16:
e9:49:21:30:01:81:c7:db:c3:47:09:e7:20:2b:d9:ef:f2:18:
c6:0c:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:49:57 2026 by rpki-client