Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: clpDZjQ9tMtRT+y/6PXvUGlIr4YCtzB4aaWToiLWfjg=
Subject key identifier: B5:FA:9D:9D:6C:48:E2:EC:0E:A3:A8:CF:54:5A:E7:1C:47:18:A2:F7
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019F9391FEF9D4F985EA72E07344F58F7CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1898
Signing time: Fri 24 Jul 2026 10:00:46 +0000
Manifest this update: Fri 24 Jul 2026 10:00:46 +0000
Manifest next update: Sat 25 Jul 2026 10:00:46 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: iggzgBZSaJcRXAUpz4HmW2onwKfE5r6oLuXceN9mIqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:fe:f9:d4:f9:85:ea:72:e0:73:44:f5:8f:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jul 24 10:00:46 2026 GMT
Not After : Jul 25 10:00:46 2026 GMT
Subject: CN=b5fa9d9d6c48e2ec0ea3a8cf545ae71c4718a2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:ff:8d:c7:e4:ba:ff:01:11:f7:98:8c:e2:
78:d5:ae:52:c9:be:d2:c6:18:20:de:b8:f6:78:8e:
47:1f:ed:b9:3d:32:f8:96:34:2c:39:a9:79:6b:b2:
38:38:14:15:36:f7:cb:16:11:a4:fb:77:1a:49:de:
95:50:6e:eb:5e:b5:49:0d:72:47:92:d8:9f:8f:4f:
cc:db:34:fe:27:90:a8:05:a8:20:bf:e6:1a:a3:d0:
33:17:ce:99:23:97:44:42:ac:86:1b:ff:ef:18:ea:
1a:be:43:c9:5e:37:c4:f9:e3:b3:9d:99:4e:05:65:
31:86:1c:b1:4e:fe:51:bd:0c:4c:db:f3:80:28:29:
de:f5:80:64:06:a5:e2:58:46:ca:8d:72:cb:64:c5:
82:72:d6:96:97:36:38:21:5f:b7:c0:eb:e8:9c:a9:
9c:86:7c:b0:9e:02:e3:96:1f:2a:42:dc:96:67:70:
0d:4e:71:75:05:2c:05:ac:3c:b4:6f:e4:fa:66:29:
6e:22:ec:52:02:d6:0f:5a:5b:1a:3b:1c:b4:29:aa:
16:01:da:1a:e7:41:ec:7d:5b:9d:a1:e6:b6:a7:2f:
35:bb:7a:d8:75:4d:9c:d9:27:3d:a2:ef:5e:e4:41:
82:e0:91:57:ff:f2:70:06:26:81:38:5e:0c:29:8f:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:9D:9D:6C:48:E2:EC:0E:A3:A8:CF:54:5A:E7:1C:47:18:A2:F7
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:0a:f1:d9:31:e4:0f:26:ac:84:93:f5:46:27:82:a1:da:
83:97:d9:5c:ce:58:20:0d:77:d9:7c:d9:14:d8:30:dc:67:fe:
dc:9e:46:bf:b4:fa:ee:b9:1e:24:cb:55:81:26:49:c4:3f:43:
dc:80:7d:68:fa:f4:2f:c6:91:2f:c6:62:e3:41:01:34:2c:19:
0d:d3:e5:84:37:d6:5f:04:95:21:21:5f:9e:2b:31:1a:ec:07:
36:6b:08:6e:59:f4:10:b5:1a:a6:3a:40:4f:bf:92:d0:6c:eb:
f8:59:28:bf:ea:79:5a:b5:c6:cf:7c:a0:5d:86:04:00:f9:14:
43:58:3f:25:46:96:7d:f1:75:c8:f4:9e:d0:68:c5:ea:e7:34:
5b:12:6e:b0:55:4f:ad:4f:1f:7f:45:c9:3d:85:83:1d:fb:63:
02:9f:0b:81:1e:13:13:63:18:1a:f0:99:b9:1b:d7:23:e3:fd:
95:53:72:93:16:66:66:e0:86:2c:96:ed:6e:96:06:05:31:36:
69:9e:7c:9c:91:5b:05:d5:7e:fa:72:c8:7b:fb:40:5c:4a:60:
d4:14:f3:56:e3:d4:a9:5f:1f:e3:ab:b1:0b:a9:72:54:2f:ad:
eb:41:4d:e8:e5:e4:e0:ce:57:88:e9:66:2c:5c:fc:2a:b8:65:
0c:7d:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:46 2026 by rpki-client