Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: 6LFIpH3B9I0UypOUk9xlEPoqOuwx8x1cXGUhWud7JSI=
Subject key identifier: 1F:C0:8C:9A:84:EE:F4:4A:3D:92:CA:FF:F3:91:A7:4E:CF:4F:8A:B2
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019FACACF526D8DFDF0AD6DFB4AE8745BF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 18A5
Signing time: Wed 29 Jul 2026 07:00:43 +0000
Manifest this update: Wed 29 Jul 2026 07:00:43 +0000
Manifest next update: Thu 30 Jul 2026 07:00:43 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: GzJrnoHnoEDh7HW/BrwwojZBa0EbS/2K0ABjg7tw4V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:f5:26:d8:df:df:0a:d6:df:b4:ae:87:45:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jul 29 07:00:43 2026 GMT
Not After : Jul 30 07:00:43 2026 GMT
Subject: CN=1fc08c9a84eef44a3d92cafff391a74ecf4f8ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:a0:9f:4f:f1:f8:50:43:55:69:25:04:cc:
12:fe:bc:c7:74:9b:3d:55:50:f2:f2:aa:e1:6b:4a:
1a:54:6d:09:93:84:6f:0b:ea:2d:69:da:d2:11:2e:
6d:15:95:4b:f4:b8:78:2d:85:ad:3a:6d:c1:c8:26:
eb:2a:64:39:01:ed:66:1e:39:cc:03:bd:b7:8a:56:
24:63:4c:da:70:91:55:32:42:34:4b:5d:9a:e3:fa:
4d:82:68:12:31:11:65:26:ad:5c:45:6b:9f:c9:a5:
15:f6:6f:2b:79:d5:1e:57:b5:9d:8e:26:16:2f:09:
84:af:99:d9:e8:74:34:9f:65:ae:e8:ce:4c:44:1e:
68:19:f7:69:d5:84:ca:d5:e2:7b:e2:22:34:92:38:
fe:b6:8d:67:c7:ac:0a:6d:ac:16:ac:91:7b:9c:0b:
0f:08:7b:ac:11:96:48:a2:e2:c4:57:3c:0e:bd:a4:
15:ea:4f:de:43:36:10:b0:f4:77:6c:4c:96:ac:8e:
66:f2:e3:bd:e8:04:ec:6f:c9:48:42:eb:73:54:9d:
b8:ca:a3:de:30:8c:98:9c:75:c6:a9:df:2e:07:a1:
b0:cc:a6:41:56:82:6c:fb:55:92:92:a1:c6:9e:e4:
88:d9:53:d9:2f:78:68:0c:00:3e:bb:04:25:60:07:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:8C:9A:84:EE:F4:4A:3D:92:CA:FF:F3:91:A7:4E:CF:4F:8A:B2
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:1b:4d:de:96:01:f5:26:90:1b:ac:cc:74:dc:6e:cb:18:
87:63:35:56:cb:32:d0:78:a6:18:09:fb:b7:79:84:6e:b2:40:
30:47:71:51:50:b5:1e:0e:fe:26:b3:4b:59:a1:f6:a4:54:fa:
e3:c7:80:e4:13:bf:3f:0b:ba:c8:08:e5:84:30:45:54:a6:ad:
3e:d5:55:0d:8f:1a:2c:58:59:aa:8b:c6:ab:71:44:fe:25:70:
24:68:01:f9:b7:d1:e0:32:5e:48:a3:29:f4:34:63:da:ea:c1:
4c:3e:14:57:a2:96:d5:b4:34:4a:3c:aa:7a:f2:db:03:db:f8:
e4:eb:0a:5c:de:f9:6f:7a:36:3f:01:b1:29:bd:2e:27:62:37:
98:69:e3:21:ab:de:ce:cb:fe:6c:a2:f8:2e:22:16:c3:7d:ad:
15:e1:91:9e:81:c3:25:c8:a7:76:58:ec:f6:fb:1c:26:c6:a3:
ce:df:ce:88:1a:1d:26:4b:59:ff:ed:ed:f0:ef:2f:b2:1c:2d:
cb:be:26:88:26:36:a0:77:94:f6:16:bd:45:3b:6c:9a:e9:54:
46:bd:a2:89:f1:4c:34:ea:13:32:9d:27:61:dc:91:73:05:1f:
34:fe:5a:27:df:d9:7e:45:93:8d:2f:ed:13:29:62:9e:0b:b4:
5c:01:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:31:13 2026 by rpki-client