Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: KnWGr0aMftn/cSS6hGl5UxQKXFR874DHk9d8hNF7XbM=
Subject key identifier: 4D:D8:B0:84:38:BD:9C:87:29:0D:35:FC:96:66:25:8C:C8:81:A6:5E
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019E1ED9CE1529787B31C857AC35281EA1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 17D7
Signing time: Wed 13 May 2026 01:00:51 +0000
Manifest this update: Wed 13 May 2026 01:00:51 +0000
Manifest next update: Thu 14 May 2026 01:00:51 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: fQJNa1KnuCO7ygr9pFbS/MKZ7cCAolWqhuAo41DTTxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ce:15:29:78:7b:31:c8:57:ac:35:28:1e:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: May 13 01:00:51 2026 GMT
Not After : May 14 01:00:51 2026 GMT
Subject: CN=4dd8b08438bd9c87290d35fc9666258cc881a65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:52:45:57:b2:7f:24:c6:4e:64:c3:54:6d:
dd:de:12:32:1e:c1:4c:df:fa:3e:27:8d:7b:97:6d:
fe:3c:6f:55:3f:54:e0:c2:13:2d:73:9b:19:25:5a:
24:ee:7f:1c:11:f7:e2:ef:b7:df:8b:25:1f:a9:cb:
13:a8:0d:8f:fd:b2:f4:67:df:b7:41:11:86:fe:41:
7b:91:3a:ab:e7:fa:13:77:5e:d8:da:0b:8c:ce:27:
ee:9a:34:7f:d9:f5:73:0a:2c:93:d8:b5:51:ff:92:
64:5c:19:ea:35:2b:4d:89:21:19:af:bb:92:05:ec:
a7:55:62:0b:3e:5e:5e:17:7c:6e:88:c4:5b:1e:19:
27:a8:b1:1f:57:26:46:e6:cc:2c:42:23:b3:51:76:
72:34:c0:11:6f:2d:12:d8:95:a1:cc:52:f7:21:52:
24:3d:69:f3:0a:4a:7e:2e:9e:e5:b9:92:3c:61:e0:
46:07:54:39:bf:b4:ea:b5:4c:68:9b:71:c7:ee:9d:
b2:b3:5b:00:00:77:b8:40:db:07:7f:32:06:71:d5:
57:a7:b9:06:c3:30:eb:99:93:30:9b:79:58:44:44:
75:92:88:b4:74:e5:9f:2b:b8:6c:aa:72:81:7f:57:
b9:bd:4e:ac:4a:ca:aa:0d:52:6b:de:a3:5b:29:85:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:B0:84:38:BD:9C:87:29:0D:35:FC:96:66:25:8C:C8:81:A6:5E
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:71:88:3d:47:f8:d1:36:7f:00:7d:d5:28:38:48:51:86:d2:
29:4b:a1:16:0a:ab:42:23:ba:5e:6b:4f:f7:7a:47:75:b6:b1:
37:3e:fd:ad:ec:0d:4f:52:de:6c:0f:5e:30:f4:77:5c:57:5c:
a2:e3:c8:d3:f7:e5:0d:cc:bf:56:fe:91:0a:13:52:3e:64:a6:
92:78:a2:d0:57:6f:90:1e:b2:14:cf:da:04:7a:16:a3:6b:77:
6b:22:75:cd:e8:d2:07:2d:cd:57:dc:1f:65:a2:0c:ac:62:33:
60:d6:b4:74:95:a9:95:17:f7:26:b9:44:46:fc:ec:11:ff:a5:
3e:6f:dc:ea:3f:f5:91:12:d7:d0:a8:b8:ba:36:83:c7:28:fd:
53:99:ff:51:99:bd:c7:25:03:a5:df:bc:ec:7c:f1:ad:4a:1e:
63:f4:14:f1:0c:68:f2:4e:d8:9b:ab:ea:5f:f4:6a:93:43:c3:
f4:93:21:12:7f:b7:df:91:09:25:a0:3d:6e:44:da:9f:ba:8a:
b1:ba:31:75:43:f0:3a:7e:a9:a3:95:8e:02:69:a9:a7:e2:db:
3c:af:06:45:13:29:49:b1:a4:f5:55:8b:a7:7e:e7:ce:04:15:
4b:64:54:5c:0d:3e:4e:96:c2:04:d9:8a:cc:d4:ef:21:34:f0:
e9:dd:42:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2c4VKXh7MchXrDUoHqGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1
ZjliMDIwHhcNMjYwNTEzMDEwMDUxWhcNMjYwNTE0MDEwMDUxWjAzMTEwLwYDVQQD
Eyg0ZGQ4YjA4NDM4YmQ5Yzg3MjkwZDM1ZmM5NjY2MjU4Y2M4ODFhNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZNSRVeyfyTGTmTDVG3d3hIyHsFM
3/o+J417l23+PG9VP1TgwhMtc5sZJVok7n8cEffi77ffiyUfqcsTqA2P/bL0Z9+3
QRGG/kF7kTqr5/oTd17Y2guMzifumjR/2fVzCiyT2LVR/5JkXBnqNStNiSEZr7uS
BeynVWILPl5eF3xuiMRbHhknqLEfVyZG5swsQiOzUXZyNMARby0S2JWhzFL3IVIk
PWnzCkp+Lp7luZI8YeBGB1Q5v7TqtUxom3HH7p2ys1sAAHe4QNsHfzIGcdVXp7kG
wzDrmZMwm3lYRER1koi0dOWfK7hsqnKBf1e5vU6sSsqqDVJr3qNbKYUaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3YsIQ4vZyHKQ01/JZmJYzIgaZeMB8GA1UdIwQY
MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt
NjhmZTA4NjIyNjE0LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0
LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHGIPUf4
0TZ/AH3VKDhIUYbSKUuhFgqrQiO6XmtP93pHdbaxNz79rewNT1LebA9eMPR3XFdc
ouPI0/flDcy/Vv6RChNSPmSmknii0FdvkB6yFM/aBHoWo2t3ayJ1zejSBy3NV9wf
ZaIMrGIzYNa0dJWplRf3JrlERvzsEf+lPm/c6j/1kRLX0Ki4ujaDxyj9U5n/UZm9
xyUDpd+87HzxrUoeY/QU8Qxo8k7Ym6vqX/Rqk0PD9JMhEn+335EJJaA9bkTan7qK
sboxdUPwOn6po5WOAmmpp+LbPK8GRRMpSbGk9VWLp37nzgQVS2RUXA0+TpbCBNmK
zNTvITTw6d1CiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:43 2026 by rpki-client