Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: A8iZN4kO98jreL+8WB8KsfRt7k4Y5EICdlwrchpudK8=
Subject key identifier: 0B:E8:71:EB:99:65:BB:B0:2B:A7:12:AE:C7:06:63:E9:48:F7:6A:BD
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 019D25838F1AADE0766C41A68074C6CA726B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0FE6
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: TLfjtBJO-gZAeaDXTY19Xr2ab50.roa (hash: UnJfONBjYtEh/fDBNx3j1DXpErEyTUKmrLW4TkMbnZM=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: eqsMaLOw+suo7aBxWC1dAZGA4z2B75OrGSXaro8I/qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8f:1a:ad:e0:76:6c:41:a6:80:74:c6:ca:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=0be871eb9965bbb02ba712aec70663e948f76abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:d4:86:a5:57:fe:c2:34:a1:25:2e:60:fe:
2b:77:16:79:50:6d:b8:a2:d7:8a:78:4d:d3:02:9c:
d6:fb:ea:52:7d:05:a0:96:61:a4:56:30:91:a7:7f:
3b:7c:ac:c7:00:8c:1d:b0:31:d3:74:bc:f2:70:19:
8d:16:03:cc:78:4b:63:55:89:4d:5c:df:4a:25:55:
70:65:64:fc:71:e6:24:66:5c:75:6c:19:09:2b:46:
2a:9c:b1:b0:57:4b:f0:27:8b:62:bf:8e:11:c5:88:
29:29:ea:8f:3e:62:be:84:a1:4b:39:b8:d1:51:9b:
f9:42:f9:a7:a3:6b:6b:ff:94:a2:af:06:01:30:d6:
60:3a:60:a1:34:96:a7:8c:fe:b3:07:2c:e4:da:d7:
0a:a2:97:d0:19:ba:d7:53:9b:af:2c:b9:40:21:25:
1c:2c:fe:fe:90:07:72:25:19:a6:74:e3:dd:7d:ea:
56:56:d0:85:60:85:6b:a5:c7:5f:3a:47:57:b6:30:
d7:59:e8:08:fb:d5:dc:11:74:87:f7:ae:88:62:a4:
66:c1:e5:e5:55:74:53:c8:f8:1c:bf:6f:ee:2c:a4:
f1:f1:af:a1:d1:74:59:cd:42:21:94:b9:0b:4f:bb:
69:bf:b3:9f:c8:a9:d8:8c:6f:26:7b:e7:cd:7b:c4:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:71:EB:99:65:BB:B0:2B:A7:12:AE:C7:06:63:E9:48:F7:6A:BD
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3f:35:d2:ca:81:cb:0f:42:82:fc:cf:f1:1f:1c:98:c4:cb:
e9:19:17:5e:c3:25:ea:3e:7a:b3:a3:43:da:55:80:1b:98:14:
01:ba:1e:04:c5:8f:b7:da:41:24:0e:07:10:22:76:b5:96:39:
8b:5c:c3:c3:77:1e:63:cf:18:30:4a:b7:ba:21:50:4a:b5:78:
7a:0c:9a:c9:b0:01:e4:5a:28:18:17:a5:08:73:78:d3:d2:1b:
bb:68:4e:7b:d7:5c:d0:a5:7a:f2:97:52:0a:31:d8:59:ad:2d:
2e:20:b4:0f:9b:bc:fc:b8:0d:b3:3a:52:f4:2d:57:81:58:46:
02:cd:7f:81:81:b1:c7:42:8a:16:5d:d8:02:a1:ab:9a:92:79:
b8:64:e0:a7:f4:9a:6e:aa:38:17:76:f9:8c:6f:01:c6:a1:dc:
94:e5:07:3b:ea:73:8d:03:1b:cb:56:d1:93:cb:5d:db:5e:a8:
70:9e:19:3a:6a:2a:8d:d5:77:58:8f:34:4b:9f:81:41:76:a9:
a9:94:11:00:29:4e:40:38:74:15:90:5b:63:d0:09:9c:79:2d:
1a:fa:f3:01:aa:a3:6e:36:35:d6:5a:48:00:37:c2:be:ca:a3:
c9:5a:54:db:fe:b0:d4:17:90:cc:51:e4:ca:73:18:6f:67:b4:
90:8e:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:46 2026 by rpki-client