Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: r6d6MI7AMWbBy8PbV6xezHCwN9nWIfUZTA5WIziV6Sg=
Subject key identifier: 2F:D8:00:68:E4:80:0F:1D:C1:C5:70:45:18:16:2B:0F:70:4B:6D:F3
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019D992B38A2E71B6E44A87E551EA3FE2D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0B8B
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: aDUNz6au4A6Yzra5GZErDQawFpBsm1e/zqYuJcc9hsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:38:a2:e7:1b:6e:44:a8:7e:55:1e:a3:fe:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=2fd80068e4800f1dc1c5704518162b0f704b6df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:02:a2:8b:ae:80:99:ee:e6:b3:4c:60:09:
7f:03:41:f6:3f:28:62:b2:22:fa:96:15:19:4c:62:
e8:f2:68:51:f6:4e:c8:98:4d:f6:21:b4:0e:ca:1a:
ec:f9:4a:ae:06:2c:a3:5a:e6:91:84:59:c5:33:c1:
3b:e2:88:a6:21:42:02:2a:a1:1d:e1:76:bb:76:a8:
42:ee:86:b5:99:21:55:74:ac:48:57:db:43:69:e0:
0b:ad:96:1e:81:a3:0e:76:ef:d7:3e:3c:9e:21:b3:
b1:64:a6:d9:6b:1f:b7:ff:66:48:1e:02:95:aa:27:
78:cc:39:80:6d:20:ec:26:99:56:aa:97:7c:0c:20:
fc:55:8e:97:95:ce:c6:af:36:05:6e:54:0f:85:57:
30:e3:9d:0a:3b:cf:9d:ad:a2:c4:7a:15:9b:15:ef:
e5:aa:6f:1a:c4:bd:6a:19:47:c2:cc:f1:11:45:5a:
09:6b:ef:af:94:f5:b6:95:da:72:24:0b:68:7e:e2:
f3:6b:d8:60:96:3c:6d:9e:4b:35:3c:70:c4:c0:73:
ad:4e:76:03:0d:28:bc:4d:10:64:1e:a4:29:29:31:
74:23:07:23:13:b3:4c:b1:fb:99:f7:a7:a2:0c:ad:
0d:6c:ce:8c:a8:1c:e0:59:c9:7c:98:14:56:16:44:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D8:00:68:E4:80:0F:1D:C1:C5:70:45:18:16:2B:0F:70:4B:6D:F3
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:3d:11:31:63:00:53:37:56:df:0a:ed:4a:51:e9:19:c7:
c5:c1:18:06:0c:8d:da:38:cc:e6:bd:3f:b8:a9:c7:7a:9d:59:
8a:8d:73:88:98:7e:c5:d9:6f:2c:46:26:fc:63:51:e8:f1:c8:
4a:32:e0:bc:c5:9d:b6:19:ce:d3:2d:57:16:12:b0:22:33:7f:
82:be:b4:16:c1:7e:38:05:63:14:eb:32:da:14:13:76:42:d1:
bd:5b:23:2a:dd:4f:7d:17:91:ce:fc:39:a6:86:39:0a:59:64:
cc:a1:20:42:b7:fe:59:a7:d2:b7:32:8b:c3:4b:df:6e:5a:fe:
61:a9:cf:33:fc:96:fa:a6:ab:34:4f:b0:d6:3c:af:c1:ac:44:
3e:6f:ae:81:9e:b1:4f:fd:9d:93:b4:92:a1:bf:b6:f6:ee:01:
7a:7e:14:3e:3f:66:c9:43:92:44:94:86:ba:7e:c4:d4:90:d0:
19:43:ca:98:e0:e1:c3:99:6c:6c:8f:ef:2c:40:81:08:00:f1:
bd:c8:ed:cf:7e:34:73:c3:9e:ef:48:74:c5:1b:f7:01:10:4a:
0b:2e:93:62:9b:1e:6d:3c:52:1b:af:67:a3:45:60:0a:7b:65:
24:7d:71:a3:50:b2:bd:61:c6:a5:21:f7:78:b8:08:20:56:fe:
8a:05:73:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:14 2026 by rpki-client