Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: v8hZMeXibrQ8490YGR5009Aivhx8+NNdd8eegR208Ws=
Subject key identifier: B2:C4:BC:E7:72:5F:09:B6:B1:D3:EF:91:41:52:00:34:59:65:0D:08
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 01A0DC4D9C38BF07065648815F97F1A93691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 14D0
Signing time: Sat 26 Sep 2026 06:01:08 +0000
Manifest this update: Sat 26 Sep 2026 06:01:08 +0000
Manifest next update: Sun 27 Sep 2026 06:01:08 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: gxPEejfQsSb1QKxRBx0ALWj6e0sjjQg9PmXN0XA+HYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:9c:38:bf:07:06:56:48:81:5f:97:f1:a9:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Sep 26 06:01:08 2026 GMT
Not After : Sep 27 06:01:08 2026 GMT
Subject: CN=b2c4bce7725f09b6b1d3ef914152003459650d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:bd:17:43:69:34:20:3d:09:78:af:83:6e:
37:07:92:09:e7:1c:dd:9f:66:1e:fe:4b:67:e2:e4:
b0:c7:65:ed:9d:df:0b:e6:82:cb:ee:4c:0f:76:2b:
4b:3f:5e:cd:27:aa:b5:c6:24:0b:cb:f0:f9:1a:d5:
85:e7:84:73:08:a0:04:ce:76:4f:64:c2:38:6b:ef:
7f:dc:0b:af:7a:c9:d3:4d:3f:53:f2:60:5c:53:e6:
dc:97:23:1e:d9:8c:38:7f:7b:b4:cc:76:5b:68:01:
fa:94:bb:9f:79:d8:74:ae:0d:33:65:27:47:2e:33:
44:5f:4d:d8:35:87:17:84:b9:f3:23:71:95:17:f8:
07:4e:24:90:1a:54:89:09:79:3c:74:c1:53:8d:0b:
90:6d:b0:f7:20:64:41:4f:e0:d4:15:e1:d2:95:35:
6e:1b:fd:16:d4:1a:88:31:30:3e:c9:e2:de:56:20:
5d:2b:56:32:8c:f4:17:5f:98:ca:5e:af:4b:72:c7:
5f:4b:5d:41:e9:17:b2:64:e9:fa:3b:59:41:a1:79:
15:a7:3b:f8:b6:16:fb:e9:25:51:fb:b3:df:1a:03:
d7:be:85:ad:58:40:c7:e6:65:34:17:a9:e9:29:8d:
2f:35:83:9b:c4:e9:92:72:e0:48:52:40:4a:89:9e:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:BC:E7:72:5F:09:B6:B1:D3:EF:91:41:52:00:34:59:65:0D:08
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:39:43:07:b7:05:fe:16:f2:0f:d9:ac:cc:56:68:9e:9a:50:
f8:5a:4f:5d:65:e4:46:33:3e:c8:1e:69:d1:3c:9a:73:b2:bb:
ab:bb:d2:53:05:b9:27:c7:87:83:14:33:99:48:22:2c:6d:a8:
3d:c7:ad:0c:fc:3a:7a:14:83:14:ba:4b:56:f8:e6:8d:f7:00:
6d:e0:80:ab:59:49:cc:b2:79:39:78:47:d1:c1:2d:ca:01:b6:
0d:a6:dd:8d:70:14:0c:53:86:93:f5:8a:5f:20:64:6d:83:16:
55:13:9b:e0:a7:ce:b3:c2:53:a0:a5:21:af:90:e7:9f:e8:66:
7b:10:49:03:6b:38:b3:be:65:d1:81:db:86:f2:c8:d8:f7:f4:
5d:9a:e1:03:3b:a5:af:22:f0:7a:37:ee:82:1f:78:2e:02:92:
5c:62:f1:32:63:0a:c4:d8:ed:43:2b:e2:8f:66:d9:ba:a7:12:
f0:08:f2:53:17:ed:3c:21:79:03:6d:7f:09:0f:5e:e5:2e:d8:
10:a7:c9:30:3c:e2:99:d1:4b:03:70:05:49:67:d0:75:ef:5b:
bf:c1:84:fd:75:0d:f2:40:7c:c0:1d:0b:06:b4:7b:ef:f3:f3:
ef:7c:fa:cb:d8:54:50:a1:ee:76:05:71:65:d9:1b:1d:cd:94:
7f:ad:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:05 2026 by rpki-client