Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: Fs6CKAje7Ef8HJr6tZKY8dzy58UBAGW/FCmw2tEhqzY=
Subject key identifier: C9:67:6D:1C:1B:07:1F:D2:13:9A:5D:A1:1C:EE:74:17:51:5F:64:70
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01A0DDCE5C6E0607907F399D1D55ADE1C720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1943
Signing time: Sat 26 Sep 2026 13:01:23 +0000
Manifest this update: Sat 26 Sep 2026 13:01:23 +0000
Manifest next update: Sun 27 Sep 2026 13:01:23 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: kdqNsGX95SNEoQuMJKkXClZEa6l9XSQwhBxVh9wjVCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:5c:6e:06:07:90:7f:39:9d:1d:55:ad:e1:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Sep 26 13:01:23 2026 GMT
Not After : Sep 27 13:01:23 2026 GMT
Subject: CN=c9676d1c1b071fd2139a5da11cee7417515f6470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:32:63:71:7b:fb:ef:99:c6:71:2d:cb:eb:
45:b5:3c:13:95:a9:33:a0:77:6d:0c:1a:97:2c:ed:
17:37:21:b0:64:08:41:01:68:8a:85:40:16:2a:ab:
ba:ab:52:59:52:19:97:a5:bd:bd:a8:1e:b6:7d:c8:
43:47:0e:b1:df:22:19:00:dc:6b:62:5a:51:d0:2a:
d2:03:90:c6:82:60:99:50:b5:09:5e:88:03:8e:56:
20:dc:26:24:8e:94:a7:1f:1d:a2:db:fb:51:36:9c:
e9:47:bb:2a:2d:51:b4:de:52:2d:4a:55:1d:a4:e6:
c1:21:b0:d4:d3:e6:23:0e:49:dc:6a:ed:15:46:40:
7e:3e:6a:49:e0:9c:31:78:57:36:4b:d2:ab:68:87:
54:58:a4:3d:31:84:f0:31:48:bd:56:5f:c7:84:94:
de:6e:25:15:43:59:8e:f5:ca:d1:b8:98:c0:a3:23:
b1:48:77:46:03:bd:ed:6c:a6:ca:c6:3b:39:2a:e2:
42:af:b1:6b:97:65:6f:9d:63:2c:9a:e0:f3:94:51:
05:a2:29:82:46:72:99:34:c0:09:7f:30:9f:db:81:
6c:9a:cf:2b:51:7c:a9:11:e4:b0:90:bc:0c:b1:43:
cd:6a:ca:d5:e0:2b:ce:a2:96:09:84:59:3d:48:90:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:67:6D:1C:1B:07:1F:D2:13:9A:5D:A1:1C:EE:74:17:51:5F:64:70
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9d:95:26:13:66:a4:30:15:e6:73:bc:25:72:fd:96:08:18:
6d:3e:d6:4c:1a:55:4a:80:d4:fd:da:be:15:9b:45:30:e6:fb:
23:54:94:7b:73:17:93:51:69:2b:d5:57:f2:e6:66:f1:c7:93:
22:37:2e:00:8a:fd:8e:e2:cb:9f:b2:29:a5:8c:53:35:ab:a2:
2e:f1:3d:1c:88:6c:56:47:36:eb:f6:f0:04:0d:50:24:c6:21:
14:be:44:04:0c:e3:ed:08:02:99:3e:0c:3e:c6:0b:aa:10:87:
d6:58:b4:39:a8:b3:0e:42:01:50:0e:c9:56:d2:12:1c:49:c5:
fd:01:96:28:6f:7f:b7:01:d6:76:a8:b1:f6:08:1c:2c:c2:49:
82:50:74:da:50:e0:72:51:02:22:1c:39:14:24:64:f7:74:fe:
70:29:a4:ce:4b:2c:bf:f3:a9:d8:c0:08:d2:97:44:5e:aa:2b:
0a:08:1d:a1:c3:67:e2:29:1c:53:39:5c:a3:53:ff:85:bc:ea:
ba:32:2d:8f:31:d7:a6:5b:35:07:b7:ca:8b:34:84:a5:b1:90:
3e:c6:e7:ba:fd:ab:75:eb:3a:f1:5e:4c:c8:79:ac:70:2c:0f:
31:29:da:6d:53:c9:c5:1f:c8:f8:e2:34:be:2a:82:f4:5f:ba:
0d:6c:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:14:22 2026 by rpki-client