Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: zgjbdFMu9ZNmZjZbc9thYLox0XKhkC6o8dCT/T0271Q=
Subject key identifier: B8:60:B5:49:BF:7A:FF:D7:6D:15:F6:F7:CC:3B:F5:AA:FD:F1:92:94
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019DA3E623A537403DC019103B5317A4C5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 04:01:01 +0000
Manifest this update: Sun 19 Apr 2026 04:01:01 +0000
Manifest next update: Mon 20 Apr 2026 04:01:01 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: fhYQzihAS+ppY5FQBiXRrIp166u5Xcvlul3l+wDF5HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:23:a5:37:40:3d:c0:19:10:3b:53:17:a4:c5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Apr 19 04:01:01 2026 GMT
Not After : Apr 20 04:01:01 2026 GMT
Subject: CN=b860b549bf7affd76d15f6f7cc3bf5aafdf19294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:83:cf:f5:59:03:1a:d1:31:87:bd:b0:57:
ec:9f:c6:1e:b4:4c:f1:4e:66:5d:55:f3:96:c8:51:
97:a6:fa:76:ab:9b:1e:76:33:8b:6a:43:77:41:a6:
6b:ce:da:d2:3d:6a:56:95:e5:cd:2f:1f:61:59:86:
98:8c:83:5c:92:e0:68:d2:9b:52:f0:73:3f:76:35:
4e:ed:cb:36:1d:0f:df:60:52:16:61:13:a5:52:21:
75:f8:15:08:87:ba:44:58:7e:c5:07:87:c6:10:70:
e8:4a:dd:29:10:51:37:e0:1f:67:12:2b:b8:ed:37:
3a:7c:7d:14:22:93:41:66:56:e8:25:a9:50:27:0f:
4e:a4:77:e7:e9:2a:40:6b:dd:b9:84:4e:ce:0a:df:
fd:94:6a:37:3b:65:58:9d:ab:c8:42:9c:fa:cf:7f:
80:e4:8e:9c:2d:4e:c8:0c:48:bb:91:c3:58:66:2b:
f2:ee:08:7a:79:6c:1e:f4:07:51:92:5f:12:17:43:
45:81:24:07:43:12:33:1c:f0:ee:cc:ae:07:31:41:
34:78:c6:fa:57:bc:2f:b7:4d:c3:b3:94:a8:28:12:
29:96:9b:69:bd:2b:3b:c9:b8:08:d9:57:3c:b2:2c:
df:72:18:0f:35:e9:74:04:bc:25:18:0d:0e:3c:f7:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:60:B5:49:BF:7A:FF:D7:6D:15:F6:F7:CC:3B:F5:AA:FD:F1:92:94
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c4:c4:0f:b0:70:f9:4d:b8:af:ad:ca:53:49:70:76:18:32:
49:65:a5:45:9c:1b:7d:f3:a0:9f:ca:16:17:11:8e:ad:33:ac:
1a:64:34:ac:fe:85:49:0d:99:39:4f:71:43:07:25:5a:3e:5a:
c4:d8:e7:66:20:9a:b0:5c:b5:cb:54:ed:94:e1:9c:1e:46:6a:
5c:bf:5e:30:4b:af:f1:b3:17:17:3b:c0:2f:37:c4:83:11:5b:
6c:03:a4:99:f0:7e:d1:da:b4:90:7f:e2:3f:83:64:e3:8f:94:
ff:7a:8f:02:b2:e6:ca:41:9a:b8:ce:9b:57:f1:32:96:a6:e2:
f7:d7:48:f0:ea:0b:16:33:f9:e6:f7:5a:c8:0c:6d:71:4c:de:
96:95:2a:b3:1d:2e:b7:26:5e:64:f7:4e:80:cc:c7:5e:97:56:
76:84:ae:17:20:8e:e1:ed:67:27:dd:e7:be:a9:0e:d4:88:fb:
ff:dc:eb:26:4f:15:e6:f3:94:8f:26:b3:42:45:cf:fa:b5:3a:
47:ad:bc:2f:08:29:b1:26:e8:14:a6:78:04:f7:9e:d9:de:cc:
a8:b9:56:b6:0b:8f:32:8d:de:72:09:a1:6e:eb:48:74:91:d1:
49:f0:36:ba:8a:a5:bf:5a:df:48:ef:29:66:69:e7:97:34:e8:
c7:b4:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:56 2026 by rpki-client