Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: wcWpOdJ6mZE3WA9lzcACSUjDNt0qPkMn5Fn7GcNMFS4=
Subject key identifier: BA:D5:F6:4A:33:0D:8D:77:99:E3:24:9C:B3:87:44:5F:07:E6:BA:8D
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 01A0CDEC96B1D6501C1896C8A85E69F57385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0D34
Signing time: Wed 23 Sep 2026 11:00:29 +0000
Manifest this update: Wed 23 Sep 2026 11:00:29 +0000
Manifest next update: Thu 24 Sep 2026 11:00:29 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: ESBPkst8WOQN4qEg5cZoHeb+9r+xUGtwjLXvwmjx8aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:96:b1:d6:50:1c:18:96:c8:a8:5e:69:f5:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Sep 23 11:00:29 2026 GMT
Not After : Sep 24 11:00:29 2026 GMT
Subject: CN=bad5f64a330d8d7799e3249cb387445f07e6ba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:4b:9e:37:0a:47:2b:02:ff:c6:c3:7c:a6:
bc:fd:9d:01:35:3b:a0:10:42:01:26:7f:3b:3a:08:
ae:b9:a6:bd:84:cb:35:b4:dc:a0:2c:5d:30:33:c4:
9b:86:61:c2:66:77:dc:a8:d3:00:fd:03:26:dd:09:
8e:3f:16:95:3f:51:6c:b0:2f:b4:f7:72:99:0a:a0:
85:30:21:8b:93:c9:b5:98:12:ca:a7:69:87:3f:ad:
51:af:a9:d0:ee:97:b2:9c:4b:25:31:bd:e2:e5:ae:
1e:3c:e5:e7:66:0b:35:06:62:5e:a0:05:69:ab:9f:
46:8c:10:56:9f:00:2c:db:df:67:94:c5:01:7d:6f:
b1:e6:9c:68:a4:73:fa:90:73:38:28:74:df:b3:16:
f0:8b:a9:7c:52:9e:8d:b6:9f:ca:4d:24:a8:19:24:
91:9c:c9:d1:d4:3f:72:48:43:4a:db:98:10:74:2f:
ee:5d:cc:97:15:77:07:ad:a1:74:a8:48:e1:fe:3b:
9f:36:97:ff:39:10:91:9a:ca:b7:73:55:13:15:a6:
6a:10:89:a6:6e:d5:10:e6:a1:2c:0b:46:02:52:12:
e8:da:17:24:ae:5b:7f:f9:db:49:6e:fe:0c:40:b9:
de:af:7e:f8:4a:12:ea:53:18:40:7f:71:eb:49:7b:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:F6:4A:33:0D:8D:77:99:E3:24:9C:B3:87:44:5F:07:E6:BA:8D
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:16:4a:6c:9e:0d:20:5f:90:39:cb:dc:40:79:24:a6:b2:
2d:92:5b:73:6e:22:2d:b0:e2:40:4f:4c:8c:82:8e:c4:4d:eb:
37:56:9b:61:6c:a9:66:75:36:56:3f:ef:eb:79:6c:84:9d:9b:
17:82:47:bf:88:ee:60:68:a0:ea:97:11:46:85:00:03:9e:96:
6d:91:0f:2d:60:f2:c8:3a:d0:8d:02:a8:b3:b1:53:50:a0:4d:
7a:7c:dc:10:35:fb:20:0e:68:1c:3c:bc:27:8e:b4:46:a3:8d:
9b:98:cf:43:a2:40:c8:e3:f1:c9:a5:5b:1e:d4:b6:40:dd:4c:
e1:53:d2:9a:84:ec:18:a9:e6:89:ef:bc:0e:73:cc:6f:1a:31:
8b:af:15:3f:06:50:f7:3e:3f:7d:06:ef:bd:58:80:7b:78:97:
e5:ea:e4:46:9d:ee:19:21:c6:a0:a5:0c:6b:e2:6c:70:2a:67:
ca:99:04:48:17:71:69:74:fe:36:5d:a5:ec:22:01:c9:ef:a9:
78:95:4b:7b:5a:a9:52:0b:f0:f5:be:58:d6:d6:74:a7:aa:8a:
21:89:91:81:9e:59:b8:94:ec:dc:d3:2a:d9:32:bf:0b:30:9d:
ff:ae:9a:cc:a8:1a:1b:5b:af:75:f6:d1:2c:3f:b8:df:c5:04:
9c:20:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:58:07 2026 by rpki-client