Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: 7hoZiNEVp7oMi9viUqqqjIZXoJo1HNeBXnekIBskrPs=
Subject key identifier: 32:85:4D:55:9E:E2:AB:53:E5:A1:2C:17:7C:EA:F0:36:B8:FF:8F:F1
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01A0D9F13751758C888F56934B18874A5A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1941
Signing time: Fri 25 Sep 2026 19:00:59 +0000
Manifest this update: Fri 25 Sep 2026 19:00:59 +0000
Manifest next update: Sat 26 Sep 2026 19:00:59 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: oguhXt6FEP4d6l3cDUcGf7XCYq2hyGucYu0//1YNjc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:37:51:75:8c:88:8f:56:93:4b:18:87:4a:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Sep 25 19:00:59 2026 GMT
Not After : Sep 26 19:00:59 2026 GMT
Subject: CN=32854d559ee2ab53e5a12c177ceaf036b8ff8ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:78:c5:37:a8:da:06:90:e3:f7:00:5c:ee:
b3:19:ec:81:4f:dc:ad:90:2f:93:0d:0a:8f:8b:29:
c4:ca:4c:2a:b9:ba:93:e0:34:b2:36:c8:67:b7:ba:
1b:99:4c:97:46:5e:15:ad:bd:0f:a6:1b:39:95:25:
1b:5e:cd:de:14:61:78:f2:1e:53:70:a4:72:ac:79:
2f:91:e6:b2:7a:06:08:36:d6:a8:4a:8f:ef:50:aa:
c1:a7:78:74:5d:54:29:24:10:82:bf:57:51:56:70:
86:cc:59:19:a5:14:a0:60:2d:b9:7d:ba:7d:80:af:
dc:c1:dd:a0:c5:25:40:e7:51:1c:ac:d7:af:7d:aa:
d5:45:cf:32:b2:6c:ed:44:60:b0:a0:50:34:2a:8b:
26:68:fa:5f:37:0b:e2:2a:d3:53:c6:96:78:c2:2a:
db:2a:b1:82:bb:dd:63:0c:d4:98:c3:e2:52:b1:81:
ac:37:a2:51:61:43:e3:f1:72:c0:bd:6d:24:a2:b6:
0e:bc:a3:64:88:3a:23:2e:1c:64:d4:74:8d:07:e3:
58:33:fd:1e:a3:a3:7a:78:bb:87:7e:6f:f5:9e:1b:
45:4f:f5:28:cf:97:05:24:69:75:2d:7c:c5:37:96:
24:c3:55:43:10:3b:87:d8:0c:ca:14:ae:0a:cb:a5:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:85:4D:55:9E:E2:AB:53:E5:A1:2C:17:7C:EA:F0:36:B8:FF:8F:F1
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:83:8f:24:0c:14:26:fb:47:5a:e7:c3:62:39:97:78:22:6c:
31:21:1f:c8:79:2a:24:9a:29:16:f7:4a:db:62:7c:08:b4:1b:
cd:40:bf:5f:85:fe:40:c1:5b:37:38:b6:b7:e3:66:f9:7c:af:
2d:15:fd:e7:2c:b4:7b:b8:e9:61:ab:f0:23:ae:eb:48:51:8f:
8e:a0:03:37:1a:c5:2d:26:9a:e6:23:a6:99:0d:c7:57:13:a2:
cd:a7:c1:b1:a5:b8:bd:c3:dd:1b:44:ea:9c:38:c5:b8:be:c8:
ce:69:21:ed:87:36:a8:25:f5:20:44:4e:1b:02:4f:be:f5:5d:
cc:d7:26:03:28:0a:4e:32:e7:9e:32:ba:8f:ad:e0:37:54:78:
5f:05:54:7c:9a:ef:b4:af:11:2f:62:e6:54:02:f5:7b:af:b6:
4b:68:f7:6a:eb:ce:88:29:ae:99:15:62:fc:ca:a9:b0:ed:8d:
16:31:b5:b2:cb:55:5a:26:28:ed:11:e0:b6:1f:0c:e6:7d:e1:
6f:40:9a:cd:5f:ca:b2:ee:d9:9f:73:26:b7:64:64:ed:b2:4f:
b3:87:82:7a:29:15:70:b7:29:03:db:e6:8c:91:7a:d8:49:6f:
3f:34:ff:3d:f1:8f:8c:27:07:36:52:db:c8:00:6c:a9:93:89:
02:8c:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:18:20 2026 by rpki-client