Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: PJbylNVHYEj36yN35XFEbzKgRHNBFUtdwjGCPg2FWZQ=
Subject key identifier: 6C:A9:65:88:85:75:98:52:96:CD:2F:FD:6F:6D:2E:3D:B6:6A:F6:6D
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019CABA1C0FF8D8BC8685DAC8E9BD05AC922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0B10
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: ETL5UKPQ9wEvVa/1xW7tW/NR2dez9VUVz3aqxFl05SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c0:ff:8d:8b:c8:68:5d:ac:8e:9b:d0:5a:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=6ca965888575985296cd2ffd6f6d2e3db66af66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:58:de:8f:2b:00:77:fd:83:41:de:4a:59:
29:d3:69:8d:c0:3c:11:c5:70:a2:da:0c:13:2e:4a:
20:a8:f2:75:ab:43:06:a3:20:5b:bf:19:b1:2f:4d:
46:0a:8a:6a:57:b8:fe:02:6a:15:df:cd:ea:3d:5f:
82:cb:77:36:29:e4:f4:bc:24:dd:78:72:70:25:b4:
63:3a:db:5e:f6:a2:04:c6:b5:5e:14:4b:11:cb:98:
46:dc:70:f9:00:ca:51:72:8e:da:39:3b:fe:87:80:
29:62:2a:96:2b:b4:27:4f:41:c1:2f:b8:92:d1:78:
bb:7f:90:30:90:7c:51:de:c5:fb:e0:9b:bc:6c:4d:
1e:85:ae:2b:ca:03:ab:17:75:40:99:58:71:b8:43:
63:50:a1:7b:56:d9:32:6b:30:26:6b:32:78:76:ff:
26:d5:6c:19:6b:21:2b:e2:23:31:04:9a:31:35:cd:
aa:08:28:7b:0f:a1:91:b3:2c:d9:9d:ce:7c:10:c2:
ba:43:7e:e4:ed:b9:bf:98:9f:ec:6d:17:ee:a9:47:
4a:e6:0d:fb:5a:ac:bf:00:48:01:18:12:8d:9a:a1:
d7:93:e3:76:83:7d:5a:1f:b4:cb:a7:6c:7b:19:00:
ed:0b:07:f4:ca:15:0f:e0:b4:24:66:a2:41:79:87:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:65:88:85:75:98:52:96:CD:2F:FD:6F:6D:2E:3D:B6:6A:F6:6D
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b4:2e:41:b4:66:d1:30:64:90:8c:db:1a:65:34:df:ac:f3:
d9:f4:ca:97:28:61:c1:a1:9a:a5:14:e5:48:6f:c6:ae:48:fd:
44:ac:02:1b:4d:25:22:06:31:c5:93:bc:67:5f:7b:d0:b6:06:
50:52:8e:d7:68:ba:7d:6d:46:8c:96:37:4e:59:ed:b2:8d:e9:
e5:55:78:b8:28:97:fa:d4:82:96:74:ec:74:da:86:bb:46:f2:
70:14:c9:ad:78:80:04:c5:fe:45:de:48:30:2d:44:78:34:0f:
d1:1c:e9:c8:69:e6:fa:c5:11:a4:82:9e:07:0e:f7:79:5a:66:
34:7c:34:0b:3f:66:42:5a:b0:5d:2f:79:2d:1b:67:80:ef:e2:
23:d6:21:24:29:c9:5b:5f:cf:c3:19:d1:eb:91:33:32:f1:3d:
bc:66:d0:91:74:3f:ce:29:27:f0:2d:8b:73:4b:52:68:17:d6:
e6:35:a6:05:4f:92:54:7e:b2:a7:7b:60:cc:73:79:0a:6b:f1:
0a:1a:00:ac:7f:a9:68:80:d1:a6:f3:28:2b:75:a6:a5:66:29:
fe:54:96:7a:bb:c6:e5:5c:d0:b4:59:fb:69:0a:09:63:42:8a:
68:af:71:9d:08:80:f1:3a:2b:05:ef:c8:4f:79:4a:d9:81:0b:
04:f4:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:50 2026 by rpki-client