Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: ++OkvDMp0ro0SymOLFA+pql5q0XfSnAo3RkFkUkW0R0=
Subject key identifier: EB:43:46:6E:8B:21:90:05:41:4C:CE:5A:D0:83:B2:30:6F:44:BF:E7
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019D27A86BE887A132A86365D6499A736C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1757
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: KI/Tc0HXMcxU01go687pSBwKFAiSSaudUhweQTMTNyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6b:e8:87:a1:32:a8:63:65:d6:49:9a:73:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=eb43466e8b219005414cce5ad083b2306f44bfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:e6:40:1b:be:4c:e7:dd:4b:2f:e1:ad:60:
bd:36:16:ac:a5:e0:32:d4:da:be:ac:f5:89:29:de:
26:1a:25:eb:87:6e:2a:8b:18:9f:2a:f1:57:86:c5:
0a:10:34:e3:44:bb:87:ba:7c:f6:a7:ff:e0:c5:a1:
de:e0:99:4a:26:97:d1:51:dc:5a:7d:8a:86:85:c5:
ca:af:98:51:df:8d:d8:6c:35:0e:80:af:a9:f1:fe:
56:b4:f2:76:a7:01:27:d6:d5:57:7d:d9:5c:ac:02:
d3:f4:22:02:00:2f:b5:fa:09:d1:c1:ed:3d:39:92:
2e:53:12:9f:1f:fa:76:ed:51:4f:06:d7:d8:cf:66:
6e:d1:5f:bb:9f:94:2f:4f:f8:f7:de:67:8b:f6:d9:
fb:bf:08:40:8f:c8:71:c9:46:d9:e3:15:f1:ac:b8:
0d:6a:d5:77:44:b6:02:8f:1d:a5:57:67:c1:20:82:
16:2a:c2:79:1c:fe:05:94:d7:32:35:35:5b:bc:d5:
56:82:98:5d:05:f0:fc:f5:39:66:44:90:de:2b:40:
c0:5a:00:fb:40:a1:9f:85:f5:e6:06:f1:dd:db:5a:
90:2d:97:1f:73:c5:d4:5c:a4:be:2a:fb:4a:36:ef:
f5:6c:19:65:25:bc:fe:fb:60:b8:56:e2:8e:8c:11:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:43:46:6E:8B:21:90:05:41:4C:CE:5A:D0:83:B2:30:6F:44:BF:E7
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bb:01:96:dd:88:21:a3:48:ae:2a:aa:da:7f:fe:95:2b:9a:
0d:ea:eb:d1:3e:d2:e1:17:10:00:7d:b4:6e:37:a9:69:42:fb:
68:c3:77:79:5e:d9:b3:d1:18:f1:b9:96:50:51:89:fa:ff:bc:
85:6d:a4:c9:fd:b1:51:de:fd:77:20:45:5b:2b:32:2e:6a:86:
7c:7b:55:ee:e6:bf:3f:81:0c:9e:5b:d6:fe:6a:09:ac:4e:0c:
55:a1:2d:4f:2a:4a:8a:ab:e8:d5:3d:5f:a0:e4:50:f1:75:98:
6a:1e:e3:1f:78:17:54:91:e7:68:23:d9:4c:aa:09:eb:67:40:
fd:fa:57:2c:3e:82:46:6c:00:f1:cd:52:30:a6:3c:30:e6:90:
df:06:f5:aa:a8:1f:b9:3a:b6:fd:53:83:b3:a2:37:5b:54:22:
4b:47:cb:b0:fa:12:3d:89:a6:65:16:d9:68:10:6f:74:07:9c:
b3:42:28:81:ac:1d:aa:d4:c2:4b:b2:cb:cf:28:37:b6:f2:28:
7b:6e:a1:53:8f:44:49:20:02:96:39:97:6e:c7:97:49:68:05:
f4:39:58:8b:e6:cb:16:54:13:07:f7:77:3b:dc:ff:fe:70:74:
fa:d2:f7:a1:dd:ba:25:5a:4c:56:ba:1b:81:99:ca:aa:e3:f8:
59:0b:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:27 2026 by rpki-client