Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: lho3CXoMPmgmFrWzMGFz+SOU9oHVR+opJTAOlL1e62E=
Subject key identifier: 9B:89:F1:50:2B:E8:56:3B:30:45:9E:ED:E5:D7:31:A2:56:B9:48:EB
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 019FAB2C69722E0A5BBE2984F31DB17260D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 1432
Signing time: Wed 29 Jul 2026 00:00:42 +0000
Manifest this update: Wed 29 Jul 2026 00:00:42 +0000
Manifest next update: Thu 30 Jul 2026 00:00:42 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: BHbPu16JPpcUMaTOkCMzuGpOoFGfs3UesNfyjKoglAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:69:72:2e:0a:5b:be:29:84:f3:1d:b1:72:60:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Jul 29 00:00:42 2026 GMT
Not After : Jul 30 00:00:42 2026 GMT
Subject: CN=9b89f1502be8563b30459eede5d731a256b948eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:f7:ec:45:36:4a:96:8b:aa:86:6b:ca:47:
f0:5b:84:2a:bf:d8:7f:63:51:b6:a0:b6:20:3f:a0:
80:01:6c:d8:bf:66:7b:77:53:31:1d:32:d9:91:26:
e8:4a:7f:93:d4:5b:34:82:0f:56:4d:0c:81:3d:ca:
95:4e:7c:52:9b:d7:08:2f:07:d0:23:28:94:de:8a:
80:47:ae:7e:e4:d6:ea:17:d2:e6:df:9f:43:b1:ab:
3e:0f:1a:1d:3c:86:fd:ca:f5:61:04:dc:c3:68:33:
7b:1a:df:d7:68:57:6c:c2:ff:63:81:11:3a:68:45:
56:bf:c0:75:5e:c6:b0:81:a9:7e:97:15:2c:04:39:
11:31:9a:18:a9:e0:8e:c1:be:31:3e:fe:2e:6d:39:
78:1c:1a:10:ef:a1:32:8a:39:38:32:26:d6:08:4b:
72:a9:ca:ea:0a:aa:a7:9f:68:27:55:b4:f9:af:25:
1f:56:92:cd:c6:06:d0:5a:10:06:e6:cb:ba:ce:86:
d5:43:cd:9d:41:07:d6:55:99:1e:6b:d5:d6:53:69:
6f:9b:49:57:ca:e4:96:94:dd:0e:d5:59:e6:ce:5b:
91:14:ff:6d:f1:3e:3f:e2:32:64:04:38:90:7c:83:
4b:b8:4f:6c:d9:df:fc:be:03:e8:bc:3d:fe:2c:56:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:F1:50:2B:E8:56:3B:30:45:9E:ED:E5:D7:31:A2:56:B9:48:EB
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f0:a5:62:62:e8:3a:6f:c4:72:2f:31:34:c3:28:25:2c:48:
07:45:e4:c9:d8:7d:6d:a7:15:d0:7e:ad:d7:64:4a:7e:13:00:
c2:5c:e7:f0:6c:b9:f1:db:5a:42:9f:c0:7c:55:2b:90:6a:21:
fb:5a:04:e5:22:5f:a8:91:cc:f8:f8:f0:af:3b:5f:7a:e5:fc:
dc:e3:36:89:e5:fd:cb:a5:c5:db:57:ac:0f:d6:e3:26:a7:49:
94:2f:9a:28:1f:25:43:f6:f6:df:a1:0f:cc:c6:f1:e4:cc:ee:
11:05:05:17:8f:bd:93:19:d2:01:18:81:a1:f0:f1:08:12:a4:
86:f7:1d:1c:5a:5d:c7:1d:d5:e2:40:b4:42:c5:08:cb:90:6d:
ec:b1:93:3c:06:da:3f:53:b2:d5:e7:97:e6:66:01:2a:06:09:
f6:c9:05:04:18:f6:92:51:48:50:6d:57:83:ca:b7:19:de:0f:
95:74:8f:51:ed:49:dd:9c:a6:ed:ab:c4:61:ac:0c:32:40:e2:
47:1d:82:f3:a9:3c:64:5c:b9:e8:aa:38:ee:c0:b4:b3:1b:99:
98:a4:d9:a5:12:90:5c:4c:99:63:da:d6:ca:dc:1a:af:f7:e4:
3b:b6:60:e9:09:a7:55:9b:26:07:36:28:8d:79:ea:66:3b:bb:
68:5c:74:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLGlyLgpbvimE8x2xcmDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWQyMjY0M2MyZDk3YmQ3MWY4YjYzNGZiOGQxZDRmOWYw
MWY0YTcwHhcNMjYwNzI5MDAwMDQyWhcNMjYwNzMwMDAwMDQyWjAzMTEwLwYDVQQD
Eyg5Yjg5ZjE1MDJiZTg1NjNiMzA0NTllZWRlNWQ3MzFhMjU2Yjk0OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvP37EU2SpaLqoZrykfwW4Qqv9h/
Y1G2oLYgP6CAAWzYv2Z7d1MxHTLZkSboSn+T1Fs0gg9WTQyBPcqVTnxSm9cILwfQ
IyiU3oqAR65+5NbqF9Lm359Dsas+DxodPIb9yvVhBNzDaDN7Gt/XaFdswv9jgRE6
aEVWv8B1Xsawgal+lxUsBDkRMZoYqeCOwb4xPv4ubTl4HBoQ76Eyijk4MibWCEty
qcrqCqqnn2gnVbT5ryUfVpLNxgbQWhAG5su6zobVQ82dQQfWVZkea9XWU2lvm0lX
yuSWlN0O1VnmzluRFP9t8T4/4jJkBDiQfINLuE9s2d/8vgPovD3+LFYpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuJ8VAr6FY7MEWe7eXXMaJWuUjrMB8GA1UdIwQY
MBaAFLCtImQ8LZe9cfi2NPuNHU+fAfSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUt
MDc0ZmZiNDIzYzEzLzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zMGIzZmYtNzAzNi00YTJlLThlYjUtMDc0ZmZiNDIzYzEz
LzEvc0swaVpEd3RsNzF4LUxZMC00MGRUNThCOUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPClYmLo
Om/Eci8xNMMoJSxIB0Xkydh9bacV0H6t12RKfhMAwlzn8Gy58dtaQp/AfFUrkGoh
+1oE5SJfqJHM+PjwrztfeuX83OM2ieX9y6XF21esD9bjJqdJlC+aKB8lQ/b236EP
zMbx5MzuEQUFF4+9kxnSARiBofDxCBKkhvcdHFpdxx3V4kC0QsUIy5Bt7LGTPAba
P1Oy1eeX5mYBKgYJ9skFBBj2klFIUG1Xg8q3Gd4PlXSPUe1J3Zym7avEYawMMkDi
Rx2C86k8ZFy56Ko47sC0sxuZmKTZpRKQXEyZY9rWytwar/fkO7Zg6QmnVZsmBzYo
jXnqZju7aFx04g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:23 2026 by rpki-client