Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: MnWDf7f8TJhwDH/dDhdWh/UCkr7w2cuigB9ubQNKq5M=
Subject key identifier: 09:A7:11:DB:B8:0F:49:9F:80:A7:9D:A8:54:03:33:B0:DB:A0:86:2F
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 019CAA8F956A25459EF6B4C66894EDE1A160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 12A4
Signing time: Sun 01 Mar 2026 18:01:02 +0000
Manifest this update: Sun 01 Mar 2026 18:01:02 +0000
Manifest next update: Mon 02 Mar 2026 18:01:02 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: Bjm93BDssLKmxVGx04lbH//q87+knl8oRi70BNis0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:95:6a:25:45:9e:f6:b4:c6:68:94:ed:e1:a1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Mar 1 18:01:02 2026 GMT
Not After : Mar 2 18:01:02 2026 GMT
Subject: CN=09a711dbb80f499f80a79da8540333b0dba0862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:5a:2b:15:83:13:77:c9:8b:f3:08:a9:7c:
51:14:fe:40:ac:5d:3d:19:13:db:7e:1f:1b:83:74:
57:0b:f1:ee:29:ef:5e:15:a8:a3:3c:84:d2:3f:a2:
f1:49:14:90:0c:10:11:3b:8f:d8:06:94:c4:43:2f:
0a:3c:5d:63:cc:67:0d:ca:c5:c6:5d:9e:98:00:0b:
e8:66:7f:f4:63:b5:76:53:fc:11:09:2f:1f:fb:cf:
29:92:d0:0b:50:d2:1d:d8:9d:35:7a:55:ff:ff:92:
c0:bb:4b:cf:0a:30:ed:09:e8:64:fa:02:e4:4a:93:
0f:c6:6e:bc:3b:75:81:65:ee:92:5f:a6:e7:64:62:
87:a3:58:f4:2a:c4:00:f1:5a:90:f1:e2:66:98:21:
b7:a0:32:4e:ec:e5:4c:96:49:0a:fc:99:6a:16:45:
f8:4b:3a:7e:2d:84:17:57:c8:e2:42:f0:44:2f:a1:
62:f7:45:44:5b:34:8a:39:ed:f3:70:1b:49:2c:89:
72:7b:f1:e6:8a:72:53:9c:c1:4a:cc:10:fc:1a:a7:
72:a1:ed:41:29:02:29:c1:ae:a8:2c:da:ca:da:a9:
7d:80:47:af:12:4f:29:e9:b9:f7:f3:03:9e:d5:e0:
f8:fd:30:1b:72:0c:8e:e0:19:dc:e4:40:b4:c9:64:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:11:DB:B8:0F:49:9F:80:A7:9D:A8:54:03:33:B0:DB:A0:86:2F
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:78:cd:1e:a4:9e:22:cf:11:40:ed:fa:70:2d:de:59:82:50:
b2:1d:3a:95:02:ec:7d:04:2a:4a:3a:4a:7d:f3:ee:d3:4c:c1:
ee:d2:a7:22:cd:b6:f8:0f:00:09:67:3c:7c:99:7b:c3:8b:73:
65:a0:b9:eb:e8:4a:52:e1:8f:ea:aa:4c:b5:9e:ac:db:ef:3f:
fd:5a:31:55:85:4a:b2:64:64:3a:65:13:3b:9f:c2:f0:88:fd:
f5:8a:57:7d:b6:7e:22:56:5a:1f:9e:b3:eb:79:88:0d:f9:fc:
39:6e:d5:04:e2:a8:3a:c0:4b:b3:6d:e3:4f:8a:7e:79:4f:42:
88:be:78:e7:13:bb:37:ad:d1:15:20:46:b2:2e:f0:14:41:21:
7a:63:ee:e4:7c:78:78:f6:89:e8:4d:fe:5c:e4:3c:28:28:2c:
db:6f:38:b0:4a:40:0e:24:37:4b:a6:a2:85:65:e3:a5:04:af:
e3:91:92:60:3d:07:7e:f6:f0:57:b0:06:63:e8:81:72:d0:93:
a1:f2:6f:a4:11:ce:31:23:eb:48:a3:ff:2d:2a:73:4c:89:d8:
52:74:19:5b:12:ac:49:64:e7:1e:0b:66:d3:78:84:fb:e4:e3:
c5:a0:12:c9:c0:ac:88:05:99:79:83:7e:0f:e4:e6:f9:9a:7d:
75:8e:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:02 2026 by rpki-client