Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: uTLJv4vEA3yqMWqYuOqp9DPCkf3GE6/XGUrTzgRnRdg=
Subject key identifier: 4E:72:E2:1D:33:90:C0:26:86:FE:34:58:73:2A:9E:BA:BF:2C:10:B4
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 019F93FF8CF58E6C33F6906003EC69ED6391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 1426
Signing time: Fri 24 Jul 2026 12:00:26 +0000
Manifest this update: Fri 24 Jul 2026 12:00:26 +0000
Manifest next update: Sat 25 Jul 2026 12:00:26 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: S8GHzzSmXJ012YiFsnOByp/YQBZiKo71k+Jj86ypWxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:8c:f5:8e:6c:33:f6:90:60:03:ec:69:ed:63:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Jul 24 12:00:26 2026 GMT
Not After : Jul 25 12:00:26 2026 GMT
Subject: CN=4e72e21d3390c02686fe3458732a9ebabf2c10b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:ac:87:c3:73:28:3b:01:7b:7b:7d:01:99:
90:ec:7b:29:3c:2b:db:e0:62:d3:87:5d:dd:66:8c:
ae:af:9a:9a:77:d9:69:fc:5c:d2:52:9f:b1:9b:45:
83:e4:d0:d2:95:bd:18:f5:7f:22:a2:84:f8:58:19:
5f:dd:b7:c9:90:ab:01:e9:e3:d6:a5:d6:ef:f5:55:
6e:66:7b:99:46:67:23:5f:18:30:98:e6:49:00:3c:
eb:bd:03:b6:87:b2:bd:82:26:f8:cf:55:20:46:be:
7c:fa:3a:78:54:8e:b7:3f:3b:e7:5c:6f:14:9c:25:
b7:30:e4:fe:b6:84:eb:96:e9:f8:c1:30:98:a5:94:
f6:2e:a1:98:dd:a2:81:45:0f:78:ac:c9:3c:7e:ce:
c9:62:bb:15:d4:c4:34:97:fb:fe:79:bf:b0:e3:f7:
49:43:67:61:f7:b1:9a:cd:a8:b0:ec:d9:3d:af:d1:
0f:f5:fd:ff:23:6c:91:8f:86:a8:b9:7e:4a:59:89:
52:3b:04:8b:d5:35:dc:5a:57:c1:f7:3c:43:98:35:
3c:00:8f:e7:2f:56:ed:db:81:9f:8f:5c:39:e5:12:
cb:85:64:c2:c5:f6:9a:d2:4e:88:c1:7c:84:7c:50:
9d:91:67:79:b4:eb:5f:b2:86:ba:f9:83:22:13:85:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:E2:1D:33:90:C0:26:86:FE:34:58:73:2A:9E:BA:BF:2C:10:B4
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:fc:0d:1e:e9:6b:f6:70:1c:9f:f2:56:97:3e:85:dc:29:
12:83:78:6b:77:40:5d:61:3b:d2:b3:b8:2e:b5:ef:bb:78:b9:
ec:6f:03:6b:08:30:50:fa:67:91:e7:72:46:62:88:b1:13:14:
d2:1e:63:4b:36:0d:e6:e6:b2:96:59:a5:fe:64:69:ca:5b:e1:
1d:8c:b3:b6:f5:7f:98:3a:9d:bb:24:3d:5e:dd:47:48:43:30:
bd:f8:84:a9:76:4f:e4:07:91:56:df:57:ec:37:d9:a1:e9:72:
28:37:69:69:50:de:21:1c:27:b3:26:1c:32:2d:6d:3b:70:9c:
19:0a:2b:40:c1:8e:e8:85:ba:96:d7:0a:6d:08:b4:8c:14:b2:
6f:c4:36:b6:73:f5:89:8c:e3:02:56:24:f9:46:e7:06:fb:92:
fc:64:b9:f6:40:68:70:d7:34:61:86:17:4d:59:42:b7:3c:02:
65:59:ee:fb:3a:da:9f:4e:07:a8:0b:d1:2d:2f:d7:01:62:dc:
12:6d:6d:ea:26:98:0d:24:60:d3:b6:62:b9:81:89:38:21:37:
91:60:cc:0e:55:6b:92:6f:4d:24:a9:b2:5a:e0:61:29:6e:be:
da:e2:92:a0:26:4a:75:d9:a6:ce:17:70:35:41:0e:31:d3:78:
6a:ec:6b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/4z1jmwz9pBgA+xp7WORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWQyMjY0M2MyZDk3YmQ3MWY4YjYzNGZiOGQxZDRmOWYw
MWY0YTcwHhcNMjYwNzI0MTIwMDI2WhcNMjYwNzI1MTIwMDI2WjAzMTEwLwYDVQQD
Eyg0ZTcyZTIxZDMzOTBjMDI2ODZmZTM0NTg3MzJhOWViYWJmMmMxMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso6sh8NzKDsBe3t9AZmQ7HspPCvb
4GLTh13dZoyur5qad9lp/FzSUp+xm0WD5NDSlb0Y9X8iooT4WBlf3bfJkKsB6ePW
pdbv9VVuZnuZRmcjXxgwmOZJADzrvQO2h7K9gib4z1UgRr58+jp4VI63PzvnXG8U
nCW3MOT+toTrlun4wTCYpZT2LqGY3aKBRQ94rMk8fs7JYrsV1MQ0l/v+eb+w4/dJ
Q2dh97Gazaiw7Nk9r9EP9f3/I2yRj4aouX5KWYlSOwSL1TXcWlfB9zxDmDU8AI/n
L1bt24Gfj1w55RLLhWTCxfaa0k6IwXyEfFCdkWd5tOtfsoa6+YMiE4V7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5y4h0zkMAmhv40WHMqnrq/LBC0MB8GA1UdIwQY
MBaAFLCtImQ8LZe9cfi2NPuNHU+fAfSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUt
MDc0ZmZiNDIzYzEzLzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUtMDc0ZmZiNDIzYzEz
LzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAj8DR7p
a/ZwHJ/yVpc+hdwpEoN4a3dAXWE70rO4LrXvu3i57G8DawgwUPpnkedyRmKIsRMU
0h5jSzYN5uayllml/mRpylvhHYyztvV/mDqduyQ9Xt1HSEMwvfiEqXZP5AeRVt9X
7DfZoelyKDdpaVDeIRwnsyYcMi1tO3CcGQorQMGO6IW6ltcKbQi0jBSyb8Q2tnP1
iYzjAlYk+UbnBvuS/GS59kBocNc0YYYXTVlCtzwCZVnu+zran04HqAvRLS/XAWLc
Em1t6iaYDSRg07ZiuYGJOCE3kWDMDlVrkm9NJKmyWuBhKW6+2uKSoCZKddmmzhdw
NUEOMdN4auxrCA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:39 2026 by rpki-client