Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File: 1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier: CXRfCAynOCZSZHRaH5v+PT8A04KHA9SvvbWUP6jJcxw=
Subject key identifier: 28:85:27:8F:5B:86:63:98:43:FB:70:77:9C:BE:E3:12:82:2B:74:3E
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer: /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial: 019D2A04F2BE241DD7B10429E902B7DAC276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number: 04DE
Signing time: Thu 26 Mar 2026 12:01:00 +0000
Manifest this update: Thu 26 Mar 2026 12:01:00 +0000
Manifest next update: Fri 27 Mar 2026 12:01:00 +0000
Files and hashes: 1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: +Y7PdoP24nP0u4YCLk5QIuMu40rrxenDYHRZhaMwZTM=)
2: JL6Ox6dWBL8ApbzGhHNgHgkH08o.roa (hash: ixMKAyIPqjVMfEHJMavyVmPNTt58bhUiJM7XMfqPYcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f2:be:24:1d:d7:b1:04:29:e9:02:b7:da:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Validity
Not Before: Mar 26 12:01:00 2026 GMT
Not After : Mar 27 12:01:00 2026 GMT
Subject: CN=2885278f5b86639843fb70779cbee312822b743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:2a:a4:57:3b:07:3b:f7:a0:dc:8d:19:b6:
57:50:dc:6c:96:f6:dc:00:8b:a1:dd:9c:09:b1:d2:
b2:5b:0d:28:a7:10:3c:17:e4:63:a4:18:12:55:d7:
eb:23:2e:7e:4b:96:fa:64:ef:53:46:60:f0:0c:4c:
89:5c:97:f6:41:fe:e8:40:d2:15:6c:f3:d9:3a:dd:
71:79:01:d7:c9:b0:10:65:e0:23:4f:65:12:57:86:
53:1b:87:38:ea:80:53:30:cd:d2:61:d9:e7:b6:f7:
83:7a:49:35:a9:18:47:1e:0b:13:a6:ab:3b:bd:23:
c0:86:99:12:e8:54:ca:7f:97:15:a2:47:9b:e5:48:
1f:f5:07:7f:7e:b4:f3:03:4f:60:26:7e:fe:a0:45:
9b:05:c9:d7:7d:94:67:c8:81:a1:0c:c7:af:03:56:
73:56:fa:4c:0d:1c:14:76:d8:67:84:c7:53:e5:18:
49:50:9d:d3:cc:63:32:d7:d7:3d:37:d6:d3:f3:47:
a2:81:ef:11:ea:b7:ae:27:8d:e5:a8:ed:54:85:ee:
6a:71:f3:46:93:80:35:3c:e3:41:f5:d2:54:1b:7f:
43:d7:e1:17:bc:6c:74:62:9d:ef:a8:4b:5d:1b:93:
a7:22:3b:d9:15:69:a9:17:fe:d4:c4:f2:32:3b:3f:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:85:27:8F:5B:86:63:98:43:FB:70:77:9C:BE:E3:12:82:2B:74:3E
X509v3 Authority Key Identifier:
keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:69:a9:12:6f:ac:ba:6d:1f:ad:de:d9:e3:3b:03:02:99:
41:87:a6:9a:f0:95:4c:14:80:62:02:96:62:aa:73:f0:25:f6:
dc:db:0e:1f:7f:88:66:94:dc:24:09:2a:e9:46:1d:0c:06:5a:
c6:23:f2:9a:8a:65:04:39:29:fe:a2:33:3b:d3:2d:d9:8a:aa:
2d:f3:81:87:d4:a0:a0:cd:ad:4f:f6:f1:8a:1e:c7:08:df:0e:
dc:05:c7:67:33:1b:de:72:06:fb:38:fb:ce:21:3f:3a:a4:7e:
c5:6f:d9:a5:3b:63:57:0e:d3:08:b4:67:10:16:d0:e6:76:a1:
46:6c:78:2f:02:a8:db:d5:46:cd:b3:de:73:08:60:38:ec:77:
a3:51:11:b2:e6:89:89:1a:00:5a:40:03:50:2c:90:50:3f:4c:
5a:ce:b1:f9:39:98:23:97:76:83:1f:c7:3e:85:cc:27:be:c5:
bd:4e:c7:48:cc:f4:1c:9b:2d:8a:d1:2e:14:79:ea:e1:d7:bc:
71:8d:a6:df:21:1e:48:0b:93:06:f6:0e:e4:8b:75:fc:28:a6:
28:8f:c1:be:6b:b4:bb:a0:98:f6:d0:2e:6b:73:31:72:eb:f8:
84:f4:bc:bd:b0:3e:64:06:b1:54:e2:ee:c2:ba:21:1e:14:73:
01:c0:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:02 2026 by rpki-client