Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: ykQ3nGLptxgM50THEppbuQIfekFEB2HWBxeiwbarHIo=
Subject key identifier: 54:8D:7C:86:3C:4F:DB:41:4E:85:CE:BF:AD:05:F1:83:60:21:34:67
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 019D996290DBB4E640599B71E9012F3C1004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 1022
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: TLfjtBJO-gZAeaDXTY19Xr2ab50.roa (hash: UnJfONBjYtEh/fDBNx3j1DXpErEyTUKmrLW4TkMbnZM=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: juOZofmZzGit6q/daHInO/j4httay5+fffFQBTtBdNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:90:db:b4:e6:40:59:9b:71:e9:01:2f:3c:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=548d7c863c4fdb414e85cebfad05f18360213467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:fe:a3:33:a5:7b:76:f3:86:cd:d3:86:ce:
88:8e:6e:a9:fb:2d:7e:5b:0b:98:13:91:a3:ce:6f:
d7:2a:6d:34:f7:6e:49:10:36:2e:78:62:a1:7c:62:
e4:e8:4b:62:83:7b:d9:e3:e9:a6:ad:7a:66:c3:8d:
60:a6:e7:8f:94:ce:f9:12:61:c1:a4:1d:69:72:65:
ce:e0:26:8b:17:ea:ca:db:9a:b1:35:c3:ec:b7:c1:
5d:2a:8f:f8:0a:49:98:ab:cb:f1:a9:c7:67:ce:c9:
13:72:a3:f3:10:54:07:b1:a8:1c:92:33:4e:e3:b6:
83:71:07:6c:2e:45:95:e3:98:61:90:6d:92:c6:03:
36:ae:d8:bb:c1:fd:04:d9:73:38:6e:cc:84:9e:83:
a3:b3:23:f1:23:8f:f1:e6:7f:b1:86:82:c1:6b:75:
20:26:cd:b8:dd:ab:d9:b9:95:46:50:cb:1c:c3:ad:
8f:af:94:ff:e5:9b:21:f9:10:bd:dc:cc:fe:72:48:
fc:c7:e0:ca:66:5a:6e:96:f3:bd:24:b9:48:35:4d:
9b:45:e2:d8:6e:c6:ef:c8:72:fb:6a:a9:5a:f4:09:
b4:6e:26:34:22:ab:31:c8:2f:ea:9d:82:04:b5:c6:
1e:06:ad:d2:41:b6:69:eb:54:fb:c2:10:a9:2b:43:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:7C:86:3C:4F:DB:41:4E:85:CE:BF:AD:05:F1:83:60:21:34:67
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:84:b0:9e:5a:0a:00:74:68:87:98:23:1e:eb:be:42:5f:c5:
4b:89:a2:d1:fa:40:a4:f8:14:75:31:bd:4a:44:d5:05:d1:2a:
8f:b1:b1:64:0e:5b:cb:50:67:5c:67:b0:b6:c6:26:cb:ce:24:
2f:d0:a0:f3:b7:76:98:93:ec:7e:00:37:2a:96:c7:d6:6b:13:
34:f9:a5:a8:9a:ea:b3:cc:9c:a3:eb:fa:bd:e2:2e:bb:19:7a:
07:92:d2:ce:52:65:f8:7d:79:99:62:75:79:1f:7f:1f:82:94:
1e:03:31:0b:5f:cd:50:4e:44:10:de:66:84:9b:fe:2c:ea:27:
d3:5f:31:26:5c:65:ad:13:27:bf:2f:ea:1d:51:ce:30:30:2d:
12:5a:d2:2d:ba:94:3f:86:43:3e:95:85:f7:ad:2f:f2:40:5d:
01:30:e6:1d:c6:4b:87:59:4d:96:b0:10:5d:93:3e:01:15:4b:
7e:9c:95:01:f7:cd:5e:4d:26:65:77:79:70:0f:4e:38:84:1b:
b1:92:25:b7:53:a5:54:68:53:cd:48:84:b9:89:2d:1e:76:56:
26:f2:ee:a8:f5:0f:36:80:f2:d3:5c:d0:2b:75:27:5b:1c:14:
20:51:94:7f:d1:c7:ca:12:e2:7d:f4:9a:2a:e5:e8:2b:7f:eb:
7d:4f:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:36 2026 by rpki-client