Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: QQBxbkWn51NJjWz07fZBx4dl2Cd+ouxrSbejjGsZb9g=
Subject key identifier: 40:62:B6:5A:E7:55:76:51:83:FE:EF:8D:F5:91:C4:02:20:0D:EA:3A
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 01A0D9835C41620012B4B3CF89C453961F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0D3A
Signing time: Fri 25 Sep 2026 17:00:59 +0000
Manifest this update: Fri 25 Sep 2026 17:00:59 +0000
Manifest next update: Sat 26 Sep 2026 17:00:59 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: wfzyXjv21PqtK0ojpXxBd2yxBxbK8N2meRNwoFF1MqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:5c:41:62:00:12:b4:b3:cf:89:c4:53:96:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Sep 25 17:00:59 2026 GMT
Not After : Sep 26 17:00:59 2026 GMT
Subject: CN=4062b65ae755765183feef8df591c402200dea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:5c:d7:85:9b:b0:29:7d:76:bd:30:8f:f9:
34:75:fd:23:23:ce:b6:cf:94:0a:40:c0:2a:ed:4e:
64:9e:b7:a6:4e:43:83:46:a2:ff:f1:31:19:82:73:
67:19:5a:10:d8:c9:d4:fe:7d:43:0b:f5:c5:f2:5b:
0f:03:e6:b5:66:62:7c:0c:e9:16:0d:fe:43:17:7e:
e8:16:d1:19:59:d4:04:c5:3e:d7:bf:83:6f:97:94:
95:07:7b:6c:74:a3:b8:1f:c7:68:cf:3b:aa:d8:07:
b1:5a:c4:f0:54:9a:ea:e3:f2:8b:4e:aa:51:db:50:
56:b1:3c:a7:6a:1a:90:67:ec:33:71:e4:86:d3:de:
72:1f:82:bc:d3:27:0c:35:69:4a:cb:4d:ba:d8:21:
78:03:03:34:de:30:e1:0b:21:45:84:6b:49:40:34:
a8:f7:01:8f:c3:12:a8:a5:c6:d1:c5:be:8e:c2:55:
99:25:89:dd:68:fc:09:37:54:92:76:c5:fc:03:fc:
50:c4:d2:1a:2f:4a:24:55:c0:e2:ab:f5:1a:3e:6c:
fc:50:c8:ba:80:7e:e3:8f:5c:28:07:c7:fa:03:a2:
20:2f:e4:7b:a6:1d:90:18:53:5f:88:ca:53:65:04:
b7:9c:2c:ea:1d:36:9b:46:21:f1:f6:e8:ee:b2:b0:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:B6:5A:E7:55:76:51:83:FE:EF:8D:F5:91:C4:02:20:0D:EA:3A
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b4:4b:35:f9:4c:bf:d3:5a:55:d6:4c:c2:13:d2:f1:36:e9:
8b:03:88:c0:eb:8b:a2:df:71:58:57:f5:ed:8d:50:9a:0c:9f:
43:c6:68:26:5b:d5:9a:3b:5a:93:db:79:e8:cc:ab:55:a8:06:
d4:64:f2:d1:67:98:df:3b:8a:e1:5b:3e:4c:56:ed:28:67:c4:
e8:2b:a1:5f:3e:a8:1d:d1:57:87:22:ae:b7:b7:65:84:c5:a2:
18:a5:b0:12:d5:49:0c:ad:a5:a4:52:fe:32:d4:8c:11:2b:93:
6c:04:bb:ef:9e:56:d7:9c:0a:ea:2f:de:f9:92:a3:9b:7d:f0:
da:48:c9:9d:dd:fa:c5:d7:d6:0a:27:b7:74:ae:93:44:f0:1c:
7b:6b:3e:11:a4:a1:93:7c:68:7e:42:3b:51:ea:cf:0a:2c:15:
8b:af:79:b6:db:cc:49:36:d3:a1:87:7a:be:3d:c4:9d:c6:43:
f6:5d:a3:c0:32:de:a6:09:9b:02:d2:01:49:f5:d7:f3:fa:b6:
a4:d8:e7:bf:f3:81:75:ec:35:c8:ae:33:2b:7b:3a:55:15:28:
28:15:23:16:5c:05:84:74:7f:78:62:e0:4e:9c:f4:35:81:2c:
2e:31:2b:12:3e:f7:df:eb:60:33:c7:f8:b4:ba:ed:3d:ab:4a:
65:2c:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:13 2026 by rpki-client