Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: WFzyDeDHcq5ILyCRy3SDYs7wJ6sRvq32bwHLzYBHrcc=
Subject key identifier: 4F:5F:2B:C7:BA:D2:B3:52:7F:29:E6:81:35:08:51:F7:BF:12:7C:D0
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019CAAC71F69D30A7CBFFD3813F39B673CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:01:42 +0000
Manifest this update: Sun 01 Mar 2026 19:01:42 +0000
Manifest next update: Mon 02 Mar 2026 19:01:42 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: 38oJD3XPGPjy6karl8VuQgn51dNY2sE3zf7CYp9rvT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1f:69:d3:0a:7c:bf:fd:38:13:f3:9b:67:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Mar 1 19:01:42 2026 GMT
Not After : Mar 2 19:01:42 2026 GMT
Subject: CN=4f5f2bc7bad2b3527f29e681350851f7bf127cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:85:0a:7d:8d:30:2c:02:87:92:23:b0:b9:
b5:21:d4:0d:76:6d:e3:32:22:9b:d5:b5:fd:e6:65:
96:98:06:08:06:53:a6:56:5c:96:cf:5d:a2:da:c4:
12:26:a4:8f:bd:71:cf:fe:4a:90:11:c6:f7:b9:ca:
59:3d:c3:bf:09:ca:80:92:c4:d0:8c:62:f9:5a:f3:
71:09:23:e6:2e:70:42:b8:29:bd:08:36:11:ff:68:
8b:e1:02:ad:12:da:9e:44:8d:c7:57:51:9a:c4:dd:
ff:2e:43:e9:a5:d5:52:9c:c1:89:d4:c2:76:3e:bc:
59:c1:d5:e6:bb:8a:fc:22:16:47:23:f0:0e:fd:35:
01:b6:f6:78:65:09:06:1b:e0:c6:e5:1a:d3:e9:f9:
52:49:c8:32:4b:30:95:bf:5e:76:4b:c7:5d:1e:c0:
f4:3b:df:85:1a:bc:97:bd:6d:a3:30:10:b7:b0:96:
1e:61:33:af:23:b1:d9:5f:8b:31:fd:da:bf:2c:73:
9f:fb:68:cb:ff:7a:2c:7a:97:18:18:a8:27:52:c8:
74:ff:8e:d2:9a:ac:c9:04:e6:1a:30:81:f7:77:9b:
b3:02:ea:0f:66:a3:e9:6c:cc:95:0f:74:b1:27:9f:
55:2e:48:c7:60:17:da:fb:24:b4:c2:3a:dc:65:b8:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:2B:C7:BA:D2:B3:52:7F:29:E6:81:35:08:51:F7:BF:12:7C:D0
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d1:72:dd:ce:9a:ef:2d:11:f2:78:27:ad:f1:c4:0d:f2:69:
0a:23:60:7c:3b:a4:c1:43:9f:a1:53:d9:8e:cb:e3:c8:bf:67:
8d:0f:46:bb:2b:16:29:44:fe:b9:5b:f4:fa:ea:7a:bc:0a:cd:
76:cf:82:a6:03:c7:cc:c5:79:88:f2:da:ed:eb:61:c1:f9:3b:
5c:2f:53:41:b8:e9:9b:2a:ba:2b:11:11:25:76:7f:47:41:23:
6d:8e:39:52:ab:9e:81:46:79:66:5f:5b:fd:5e:78:30:61:3b:
27:fa:ff:78:db:9b:0d:96:7b:b5:ce:53:d6:29:bc:38:43:8e:
1d:97:2c:9e:b9:ee:81:21:39:76:c1:33:1b:05:ff:d6:6e:1d:
cf:25:14:fb:d1:8c:41:b3:d0:74:28:e5:1d:57:32:53:1a:6a:
28:96:55:c7:3d:06:10:2d:09:ef:d4:7f:f3:67:31:1b:6b:50:
d5:1f:1a:44:da:2e:06:8c:df:0e:b5:4d:59:19:cb:cb:68:c4:
f0:cc:5d:c5:83:ff:8c:fc:87:18:fb:49:1e:fe:73:a1:e0:52:
f4:0a:f9:64:b4:3c:c8:89:02:8a:7f:5f:5b:57:9d:cb:1f:37:
2a:3e:69:d3:99:3f:3a:56:9c:f5:f0:a1:e5:24:72:de:a4:07:
3c:ba:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:37 2026 by rpki-client