Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: 4rYc5kDObeG1LXTR37/h8rnZNU7P3vuxS7P5b3SlfeU=
Subject key identifier: 21:2F:5F:57:14:5A:B3:F1:68:4B:2F:19:46:22:9F:51:FE:3D:CE:89
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 01A129C45255A9259E2D1902FED6B90A04DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 07:01:34 +0000
Manifest this update: Sun 11 Oct 2026 07:01:34 +0000
Manifest next update: Mon 12 Oct 2026 07:01:34 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: oqReceAQ9zklneh4fXAE8RHULF3AoC3fFOYqBUerEVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:52:55:a9:25:9e:2d:19:02:fe:d6:b9:0a:04:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Oct 11 07:01:34 2026 GMT
Not After : Oct 12 07:01:34 2026 GMT
Subject: CN=212f5f57145ab3f1684b2f1946229f51fe3dce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:39:c7:ef:17:d4:d4:56:0a:3f:32:75:b5:
d4:c7:64:8c:7d:ce:1f:c8:7e:12:30:e2:dd:58:5c:
a7:e8:41:0b:41:80:5c:21:f5:b1:8f:c5:3a:ab:b0:
1a:96:d9:6c:b6:84:5a:f9:58:62:cd:a2:dc:be:85:
9e:24:26:88:89:ea:51:47:42:10:7f:ed:09:ce:5c:
25:a4:36:91:46:0e:fd:e6:1f:e3:16:90:59:bd:1b:
43:13:56:a0:fd:a0:ef:98:c3:ac:cb:64:8e:a9:24:
0a:ca:9d:ce:d5:3a:ea:00:51:97:01:0a:ea:00:1e:
d8:c7:5c:fd:0e:6a:7e:a7:bb:be:c6:a8:4e:ef:82:
72:2f:10:54:ae:bc:33:9e:9b:bf:3d:31:69:18:93:
e0:6d:91:b1:48:ce:41:d7:44:b2:2e:1c:de:e0:a9:
50:a6:f0:3a:15:9b:00:4a:02:a0:f9:82:db:53:a7:
ff:4a:95:21:1a:ce:cb:19:1b:60:34:56:34:34:7a:
1a:2b:b6:f0:e1:c2:ea:09:f8:c7:fc:45:82:d8:64:
a6:4d:73:e7:ee:f3:ec:f3:96:69:9b:e1:cf:25:74:
3d:7f:1f:97:c6:d8:15:8a:0a:3b:a0:c0:17:40:3a:
19:50:37:38:5e:5a:b6:d8:a5:9d:77:b4:3a:17:68:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:5F:57:14:5A:B3:F1:68:4B:2F:19:46:22:9F:51:FE:3D:CE:89
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4a:4a:6d:35:55:de:17:43:e4:19:56:37:5c:ad:e0:4e:ce:
c9:18:7c:97:ef:54:54:13:36:8a:c9:cb:58:37:c6:6c:f6:70:
c4:5a:92:63:77:b7:8c:43:e6:05:7f:20:c6:d1:57:ea:76:dd:
18:da:fb:c7:a1:1e:3b:db:da:06:ea:ee:d4:4f:19:2d:c5:2a:
20:f6:0f:03:5c:43:f6:4f:71:af:07:5c:1a:a3:7d:23:b7:df:
1e:7e:d0:59:36:4d:9b:97:3c:76:c6:40:37:e1:84:ce:16:1b:
f5:12:f6:04:e2:8a:b4:2d:bd:8a:00:9b:c9:7e:4a:bd:ae:73:
2f:2b:ac:01:1a:1b:69:6b:28:99:d9:1a:e5:02:8a:d1:d9:6f:
8f:16:c7:79:45:a5:27:88:a6:b6:ce:d0:da:23:1c:f8:f9:26:
8e:71:27:5f:c2:8e:00:0e:b9:43:28:ee:61:52:9d:7e:c1:d9:
97:fa:82:d8:ff:5d:2c:c7:80:bc:cf:bc:2e:7e:18:74:de:55:
c5:28:2e:bd:29:a1:06:3b:bd:b2:73:03:67:74:e1:b6:3f:77:
fb:c6:39:37:ad:a9:ee:63:70:5d:81:ad:f9:dc:bc:57:c3:16:
c0:81:73:4b:26:c5:f8:94:d5:b6:4d:fa:6f:a1:1f:eb:63:64:
2d:ac:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:59:25 2026 by rpki-client