Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: PxSNEKNp67FrZYMx4zWCphMk7sfoUtUzoleOOtlVOjI=
Subject key identifier: F0:BE:93:C6:77:4C:42:54:12:31:96:A7:23:4D:12:EC:60:6B:1F:02
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 01A12FC62A2A118AB213BABA2BF950AFC7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 1065
Signing time: Mon 12 Oct 2026 11:01:18 +0000
Manifest this update: Mon 12 Oct 2026 11:01:18 +0000
Manifest next update: Tue 13 Oct 2026 11:01:18 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: kpoRPhIytSwAzEz3Ys/PAkMFyQR6ufp+VWo1weHgjYs=)
2: Z07oGH4qALSlhCqp4P64q2iB1us.roa (hash: Z4N+HOJqsVfo6FvilkavZbY8gKGAnvRy13Fs0EXFZTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:2a:2a:11:8a:b2:13:ba:ba:2b:f9:50:af:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Oct 12 11:01:18 2026 GMT
Not After : Oct 13 11:01:18 2026 GMT
Subject: CN=f0be93c6774c4254123196a7234d12ec606b1f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:a9:12:52:06:23:97:6d:a7:06:82:bc:f6:
78:3f:4e:f8:a4:83:ad:0f:b4:48:cb:ab:32:b1:e0:
26:77:27:13:a8:48:28:43:2c:b6:17:5c:89:3e:b0:
19:99:45:74:95:05:9a:b3:4b:96:4a:45:59:63:ae:
5e:b4:ea:c6:7d:38:61:17:f9:26:03:de:1e:c4:79:
4e:f8:65:f3:36:92:3b:60:43:7c:d0:ec:81:f6:13:
d1:45:11:29:4c:ac:74:e2:59:1d:09:a2:23:bb:4a:
ab:1a:c3:30:24:ea:dc:f2:00:34:b8:96:f8:d3:59:
a9:28:e8:26:ed:9d:ec:f6:41:bc:4e:15:f6:8b:c9:
57:9a:e2:a4:78:52:c1:84:35:ab:bb:38:8c:93:f6:
17:f9:d0:e6:67:95:07:81:84:78:eb:11:87:3e:ea:
21:5a:3b:71:fa:72:06:74:cc:c0:f9:75:e5:66:96:
ed:b3:92:99:b3:e4:38:6e:f7:5f:a3:5a:ca:b1:6a:
44:a8:2e:e0:9c:b2:74:05:0f:80:ce:f1:f7:7a:a4:
d4:50:84:81:d0:cf:88:e3:05:c0:ca:d0:4d:7e:31:
78:0b:cd:4c:13:06:b7:bb:c9:80:31:75:1d:19:96:
5c:dd:6f:3f:bc:4f:74:0f:c8:49:28:21:fa:a6:ec:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BE:93:C6:77:4C:42:54:12:31:96:A7:23:4D:12:EC:60:6B:1F:02
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b9:fb:fb:1d:69:ff:f9:75:92:78:13:41:5b:21:42:98:f4:
e3:55:69:57:f6:0e:bd:83:b7:18:67:43:2c:1c:f6:da:33:24:
46:61:a0:75:53:09:45:e8:b0:e3:b9:f5:2d:4a:c4:f0:b0:f1:
be:94:dc:46:42:88:f0:f1:4f:78:cf:39:10:ed:49:87:c8:9c:
32:c4:40:90:b9:85:4e:57:c6:4f:c5:69:a8:a9:62:c2:da:e2:
f5:0e:ab:a0:ca:aa:43:64:aa:9f:09:db:36:50:4d:2d:e3:b2:
61:09:5d:5b:ab:b8:e1:d1:6f:97:20:68:b9:8c:04:6e:35:72:
0e:51:35:18:74:a4:38:86:44:e6:7b:ff:c5:ad:c5:dd:07:10:
a8:30:b2:23:2e:17:b1:5d:1f:8a:a1:22:69:cc:c7:6f:4f:f9:
aa:1d:5a:7b:a4:b6:b3:42:a4:e6:87:49:0e:98:80:a3:dc:23:
7d:a1:08:8c:0f:3a:52:4a:6e:89:e8:be:ff:64:cf:77:d5:49:
a7:1c:53:e9:73:f0:e4:f5:73:76:73:2a:04:a6:93:52:5a:ce:
14:af:66:6f:08:48:5a:c3:c5:84:5f:57:ec:18:e5:9d:e6:47:
7c:6a:a7:a6:34:e1:cf:be:3e:da:b9:0c:96:7c:c3:ae:f0:d9:
c1:7f:74:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvxioqEYqyE7q6K/lQr8fwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3
NDFjMGQwHhcNMjYxMDEyMTEwMTE4WhcNMjYxMDEzMTEwMTE4WjAzMTEwLwYDVQQD
EyhmMGJlOTNjNjc3NGM0MjU0MTIzMTk2YTcyMzRkMTJlYzYwNmIxZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVypElIGI5dtpwaCvPZ4P074pIOt
D7RIy6syseAmdycTqEgoQyy2F1yJPrAZmUV0lQWas0uWSkVZY65etOrGfThhF/km
A94exHlO+GXzNpI7YEN80OyB9hPRRREpTKx04lkdCaIju0qrGsMwJOrc8gA0uJb4
01mpKOgm7Z3s9kG8ThX2i8lXmuKkeFLBhDWruziMk/YX+dDmZ5UHgYR46xGHPuoh
Wjtx+nIGdMzA+XXlZpbts5KZs+Q4bvdfo1rKsWpEqC7gnLJ0BQ+AzvH3eqTUUISB
0M+I4wXAytBNfjF4C81MEwa3u8mAMXUdGZZc3W8/vE90D8hJKCH6puxeTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC+k8Z3TEJUEjGWpyNNEuxgax8CMB8GA1UdIwQY
MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt
MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy
LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLn7+x1p
//l1kngTQVshQpj041VpV/YOvYO3GGdDLBz22jMkRmGgdVMJReiw47n1LUrE8LDx
vpTcRkKI8PFPeM85EO1Jh8icMsRAkLmFTlfGT8VpqKliwtri9Q6roMqqQ2Sqnwnb
NlBNLeOyYQldW6u44dFvlyBouYwEbjVyDlE1GHSkOIZE5nv/xa3F3QcQqDCyIy4X
sV0fiqEiaczHb0/5qh1ae6S2s0Kk5odJDpiAo9wjfaEIjA86Ukpuiei+/2TPd9VJ
pxxT6XPw5PVzdnMqBKaTUlrOFK9mbwhIWsPFhF9X7BjlneZHfGqnpjThz74+2rkM
lnzDrvDZwX90AA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:55:13 2026 by rpki-client