Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: vXQ//2JGekhCMQJEuMSRsrgTnxQnyhHKpU5k2kGP/No=
Subject key identifier: 49:D0:3A:AE:B3:FA:5D:82:FC:BE:B3:75:6C:34:1D:C9:49:8C:8D:8D
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019F8F4729EFD6F3F45452B7E50E2E2A1255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0C8F
Signing time: Thu 23 Jul 2026 14:00:33 +0000
Manifest this update: Thu 23 Jul 2026 14:00:33 +0000
Manifest next update: Fri 24 Jul 2026 14:00:33 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: TAp31O8S1pH2Zq2XD4Dz+dN5IPJ8C5aLiReJlxuJvTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:29:ef:d6:f3:f4:54:52:b7:e5:0e:2e:2a:12:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jul 23 14:00:33 2026 GMT
Not After : Jul 24 14:00:33 2026 GMT
Subject: CN=49d03aaeb3fa5d82fcbeb3756c341dc9498c8d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:18:52:51:b0:4f:86:50:9e:32:96:10:1e:
d8:c2:77:bd:5c:6d:07:23:86:50:65:fa:58:da:a8:
aa:4b:86:dd:ce:70:d0:00:1a:ef:3e:f9:29:aa:e6:
44:77:80:b5:8a:c5:82:85:3e:a2:b9:8c:c4:d5:c3:
52:f5:4e:eb:e5:db:2e:23:e0:7f:7f:7a:b7:72:de:
c2:0e:3e:b3:29:24:bf:bd:60:d3:eb:37:0c:6f:d5:
29:56:91:59:84:e4:4f:52:3a:65:09:2d:69:8a:4b:
c3:78:84:2d:b4:de:dd:19:4a:07:cd:67:39:a0:6e:
2b:4a:ca:b8:34:65:5b:b1:af:82:20:f6:d3:bf:40:
12:98:5a:a4:0a:35:1f:39:af:f0:ff:cc:67:e3:f7:
40:04:8b:d7:06:23:5e:1b:d9:23:42:95:29:df:29:
a4:c4:59:ef:0e:1c:e9:7b:33:3a:3e:40:59:12:f4:
8f:46:05:d2:ee:18:9d:2d:4d:d5:9d:c0:85:59:55:
6e:93:59:4d:63:c7:61:ad:7c:2f:e8:a8:84:f3:77:
9f:fb:30:22:e7:09:8c:3e:44:3f:47:24:38:f1:d5:
d0:f3:db:b2:14:ca:c2:6f:11:7b:12:f9:15:71:d5:
ac:c9:45:4d:5f:1a:82:32:83:0e:66:0b:50:c2:3f:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:3A:AE:B3:FA:5D:82:FC:BE:B3:75:6C:34:1D:C9:49:8C:8D:8D
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f4:b6:c3:f8:66:2b:4a:ff:8e:1d:45:28:5c:97:8d:31:f4:
ae:7d:c8:28:50:7e:48:09:7d:dc:e3:d0:26:04:d1:e8:28:f9:
e0:59:d5:d9:a6:41:73:b9:0d:37:1a:96:db:fa:6a:9a:7b:6e:
ea:3e:26:cc:21:3f:94:cd:ff:21:31:48:fd:0e:23:b1:58:22:
19:a0:8c:f9:c1:28:ce:1f:aa:31:74:4f:2f:3a:77:fa:7f:c9:
11:49:1e:8a:69:90:25:8c:dc:f3:28:e8:f4:ff:6e:20:5a:68:
be:d3:3e:6a:43:9f:4d:a3:85:55:5a:a9:5d:98:a5:16:9a:f4:
f8:d5:4d:44:b0:3b:42:ef:97:1a:dd:33:2c:4f:ec:b4:21:7c:
80:16:c3:3d:da:57:b7:45:8b:13:29:a4:6a:50:a0:c8:9b:58:
02:25:0d:b1:e7:63:ae:09:01:77:a5:6e:6f:92:9c:f0:02:c0:
ea:c3:90:e4:81:26:8b:97:12:7b:fa:8b:01:1b:d4:bf:51:3f:
a2:1f:1e:1e:89:bc:dc:46:98:64:cd:bd:2d:ca:7c:35:a5:a7:
f5:a3:0f:72:94:4e:30:71:d9:25:6b:39:84:36:8d:37:86:3e:
1f:0c:d3:8f:fc:cf:2f:a9:fa:f4:7a:9c:80:2c:39:4d:93:52:
e7:fb:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:36 2026 by rpki-client