Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: IRobMd7PlKO6m/uIfQczUy++OdpMNVVbtpWLCJeGtWU=
Subject key identifier: 3D:C5:FE:11:87:A9:3B:A1:8A:9E:07:4E:1A:2E:95:94:A0:E0:E4:05
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 019CACEB75B96D8C963667F10FE117976A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 05:00:37 +0000
Manifest this update: Mon 02 Mar 2026 05:00:37 +0000
Manifest next update: Tue 03 Mar 2026 05:00:37 +0000
Files and hashes: 1: NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa (hash: 4pFWV2mpeu3iq5Hwo5/8aDs6PTomZFrJ08QxozJPsuY=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: 8LMTStIV9vE9vY/wkHA7PrJvP1ZG/um/CZBvgTO3O6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:75:b9:6d:8c:96:36:67:f1:0f:e1:17:97:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Mar 2 05:00:37 2026 GMT
Not After : Mar 3 05:00:37 2026 GMT
Subject: CN=3dc5fe1187a93ba18a9e074e1a2e9594a0e0e405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:dd:bb:6f:0e:a2:3a:32:c3:f4:27:c4:cc:
33:b8:15:ac:aa:5a:ba:b4:90:c3:9d:65:74:cf:1a:
90:29:fc:52:7c:60:ea:2f:c6:f4:bc:c1:88:cc:16:
73:29:ed:08:46:cd:8e:11:1b:fd:69:98:09:7b:05:
96:65:07:33:c8:20:c0:99:9b:f4:df:7f:29:11:51:
86:a0:59:37:fc:97:18:89:b5:cb:d6:59:c2:02:60:
f8:f9:ca:b5:48:9f:d3:2a:a4:e4:c1:28:ef:a3:3b:
f0:ae:0b:ff:4c:c0:f3:bd:15:13:9c:6d:04:62:9b:
fd:7e:3c:60:54:01:81:aa:4f:5d:92:5d:61:77:86:
7d:7c:25:14:9e:95:1c:67:45:24:cf:88:db:86:b4:
86:81:4c:fe:b8:49:d3:38:41:09:bb:f1:dc:47:55:
60:99:32:d7:07:0a:a3:c9:37:e6:cc:63:8f:88:59:
44:ed:8b:bd:a5:7e:77:a1:a4:b4:9e:b0:56:1e:df:
cb:b6:c5:60:03:97:7c:7b:79:17:a4:e0:b6:69:05:
75:1a:9c:76:67:61:dd:f0:0a:53:09:98:48:0c:22:
64:cf:aa:05:78:e0:d3:73:15:58:5e:18:37:14:cf:
da:39:94:77:86:13:4d:72:8a:7b:cb:45:02:49:90:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:FE:11:87:A9:3B:A1:8A:9E:07:4E:1A:2E:95:94:A0:E0:E4:05
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bd:54:1b:0d:c8:72:37:45:75:ca:29:bc:2e:2d:c3:5f:24:
bd:b4:dd:f6:ca:2c:91:76:93:c2:98:16:02:18:1d:18:54:a2:
17:68:99:0e:66:47:17:d2:15:aa:26:13:55:5b:eb:54:48:6d:
5f:9c:e6:a7:fc:10:b8:dc:69:38:3f:a6:a7:f1:1d:12:5b:1a:
9b:2a:9a:e6:ec:5f:9e:67:cb:71:70:af:04:63:ec:0d:d4:2b:
20:99:df:1a:bd:84:2a:53:36:92:40:3a:e5:64:4b:2f:d7:c7:
24:ee:80:56:11:54:f0:78:f5:3e:6a:f0:11:2c:f8:9a:3d:c1:
fb:a8:aa:7e:33:57:2e:99:e8:7f:de:0c:84:8f:cd:ef:e8:04:
cb:98:c6:9d:a4:b9:ca:c4:df:59:d0:cd:69:04:24:29:23:c8:
82:37:9e:99:74:14:5f:ff:63:94:71:69:f9:86:2c:d4:b5:43:
15:6d:85:48:d0:7c:53:1a:4e:2d:3c:54:09:cd:08:22:81:af:
ca:22:30:ac:84:c3:0d:ad:aa:7d:6a:80:cd:ba:92:0f:ec:6f:
e3:33:a6:5d:16:4c:65:6f:67:68:1b:c0:75:89:df:60:cc:67:
48:4b:b0:0a:21:9e:cf:e9:10:1c:96:41:6a:6a:e2:00:0f:90:
dd:ff:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:15 2026 by rpki-client