Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: ZKLkMgJkCJSMWINsVekuUI1gilJm6uQz0sAgQt99ZLA=
Subject key identifier: 87:30:A3:D4:A9:35:E1:92:E2:18:C5:8C:82:7A:48:32:F6:D1:11:D5
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 01A0DA5FD244963052343374602DA8FE7B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 14CF
Signing time: Fri 25 Sep 2026 21:01:47 +0000
Manifest this update: Fri 25 Sep 2026 21:01:47 +0000
Manifest next update: Sat 26 Sep 2026 21:01:47 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: jIZSd2Ed8WMGJ7je7SJzHwnCeypuN+mA5y1orG+UBs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:d2:44:96:30:52:34:33:74:60:2d:a8:fe:7b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Sep 25 21:01:47 2026 GMT
Not After : Sep 26 21:01:47 2026 GMT
Subject: CN=8730a3d4a935e192e218c58c827a4832f6d111d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:b5:7e:71:85:a5:bc:04:fd:79:42:cd:6b:
98:02:72:c2:25:7b:df:54:5b:cc:10:ba:c0:46:b3:
8b:cc:cf:62:96:30:41:e0:4c:70:28:d4:73:19:19:
b0:7b:ca:9f:94:6c:af:09:e4:9b:a4:e5:2c:42:59:
57:c6:0a:3c:29:02:99:27:54:a0:a0:cc:f7:d5:80:
46:a4:35:84:76:60:ca:c2:a3:15:03:f6:b0:13:f4:
aa:03:0d:af:3d:4a:de:f2:53:6e:80:28:78:ef:15:
3c:2a:bd:04:a0:a2:e9:84:be:a9:e4:2a:6f:d6:79:
8f:7f:c4:a5:d4:30:fd:f6:ea:ca:6b:ea:17:91:ba:
21:5e:70:2b:59:9e:46:1d:27:62:b5:b6:3b:dd:7d:
d3:cc:63:a3:a7:e7:c4:7c:84:e8:0b:cd:60:2a:d2:
21:fe:b3:3c:c3:12:1b:ad:f3:a3:01:8a:fb:0d:08:
6b:7d:fb:fa:7e:c4:62:d9:bf:d8:0a:e9:04:02:35:
cb:5d:a6:7e:d3:c9:22:ef:27:b0:9d:c7:80:44:74:
7a:4f:a2:10:d3:dd:70:d5:d5:5e:d1:fe:5c:0c:20:
22:e4:2b:9c:24:4a:cb:5b:b5:a0:73:31:de:98:76:
89:77:81:03:7b:9b:0a:71:b7:5a:01:5b:bf:e3:50:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:A3:D4:A9:35:E1:92:E2:18:C5:8C:82:7A:48:32:F6:D1:11:D5
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6a:69:41:7f:dd:bf:53:9c:76:61:d4:b8:bd:a8:a9:ed:ac:
bc:6c:0f:3e:dd:2a:2b:ed:c6:55:5d:a2:c5:38:00:6e:7b:a8:
23:42:5c:48:08:c0:8c:d6:6c:e3:bf:5e:00:c0:ff:45:f3:97:
a9:d2:8b:18:3f:29:87:16:f0:7c:8b:e8:7f:f1:af:37:38:15:
03:73:99:95:51:56:74:72:ef:b1:f5:7b:45:40:30:d7:94:41:
b5:ff:94:9f:64:26:a3:c6:67:16:52:1e:61:cf:ae:cc:1b:24:
73:18:86:4b:cf:97:ae:47:03:8a:57:93:2b:a8:d7:ee:fa:bd:
b2:4d:8c:04:eb:99:be:7a:c0:10:38:66:84:d3:b5:8e:d7:e9:
55:7d:18:53:61:98:95:98:08:ca:93:3e:95:ce:d8:38:b2:86:
04:c5:7b:6e:9d:ab:d8:7a:c6:d3:b8:9f:92:c5:84:06:1e:e1:
bd:08:ae:ea:b2:da:1d:e5:5c:6c:25:a5:d5:04:33:07:67:17:
18:11:e7:b5:a6:3f:23:81:c1:a7:65:2a:4c:d5:e4:b9:f9:1d:
c6:43:07:e4:24:5b:29:e6:5e:60:58:10:c6:0e:47:1b:e4:f4:
97:1f:74:c0:2f:26:08:03:11:2b:75:f5:c8:44:85:54:cc:33:
2d:9a:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:17:11 2026 by rpki-client