Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: kGW39GtSQuYQ95y36qWbIa/rBu1QMU8ZgonHonsdpyk=
Subject key identifier: 28:6D:68:41:86:B2:37:C7:E3:2E:C2:65:F8:A2:5F:35:1A:18:7A:4C
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019FAA50C717210BB4033287752758C1B814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0C9D
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: GhN1qefGYq5rl7gFUYRg2J8+4zGpdGu+sPWeqnhnXyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c7:17:21:0b:b4:03:32:87:75:27:58:c1:b8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=286d684186b237c7e32ec265f8a25f351a187a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:c9:f9:c9:b3:aa:66:b6:4b:c5:81:f5:48:
66:7c:9f:f3:93:c1:86:71:1a:06:f3:8d:d0:5c:ad:
21:2d:c5:09:91:22:d3:14:40:84:7c:04:94:26:a8:
16:e2:54:37:d1:6c:29:ea:b9:c4:ad:d6:03:df:95:
50:95:65:d0:82:d2:27:01:bf:cd:28:39:96:72:ce:
bf:18:b7:6a:dd:07:6e:07:6e:1d:84:3b:43:07:3e:
90:05:10:2e:dd:11:b8:9f:fc:33:0a:93:fe:08:07:
b9:a0:f0:ea:2a:9e:03:7e:58:28:d9:d8:3f:c2:3f:
36:35:34:f7:0a:6c:a4:42:ea:5e:3a:cd:52:e4:ae:
f0:5b:0c:16:4a:ae:36:45:c4:49:90:9a:1f:aa:67:
06:ed:d9:cc:cc:2d:ed:00:91:16:c2:2f:e2:ad:f4:
25:5b:69:ec:18:3c:04:00:f4:77:5a:e8:6e:e9:aa:
6e:00:0d:c9:f5:42:22:32:ba:a9:73:3d:81:7f:ca:
b2:d3:e4:a9:c4:b3:1c:68:37:95:c7:6f:a8:de:e6:
18:c5:08:05:f1:f6:7d:0a:5b:ed:75:a1:8f:92:29:
4b:99:a0:39:c4:40:1b:54:17:75:d0:34:71:d3:10:
79:17:34:18:75:ea:52:94:c5:18:c8:48:d8:13:6b:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:68:41:86:B2:37:C7:E3:2E:C2:65:F8:A2:5F:35:1A:18:7A:4C
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bf:39:ab:fe:7d:09:fc:b1:dd:b1:71:59:95:75:00:eb:8a:
4f:d5:21:1f:fa:ce:a3:ea:d4:68:b2:3a:e8:82:16:ab:90:f5:
f1:50:47:f9:e1:9e:d4:30:dd:6a:d8:db:42:17:a6:ef:7d:e3:
c0:e3:c3:70:d4:31:57:58:19:e1:55:0a:c3:ba:8d:70:f4:16:
5b:b1:70:31:1e:fc:37:c6:f2:9e:67:b9:e4:37:17:6a:91:4d:
e4:b9:dc:c3:e4:2b:bd:93:49:21:a0:b1:59:23:05:47:3f:fa:
ce:76:77:b8:07:d9:62:52:32:87:c9:eb:bf:a9:8c:0d:f5:46:
50:95:b5:90:67:2d:34:31:b9:f1:fa:66:2d:87:a6:81:f1:a2:
e5:47:98:66:15:a8:d7:02:27:ba:3a:93:8e:2b:2a:1d:d4:2b:
0f:40:de:1c:f7:dd:87:f5:d4:8c:dd:3d:65:26:dd:18:33:07:
2e:d3:3d:20:69:e6:d4:ef:d9:8b:30:3d:c9:5b:16:49:8f:f3:
47:48:b1:28:c2:03:e1:f8:96:19:05:3b:5e:11:2b:5a:8b:40:
eb:42:9b:2f:85:5e:39:30:4b:be:ec:ee:ce:5d:ab:fd:db:ba:
a3:74:9c:ac:a3:29:8a:42:64:de:55:11:20:b0:00:04:68:24:
a1:8b:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:01 2026 by rpki-client