Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: L3DrfjDWf0lDOWoBv/tYTCkaFDpVEfCB9CVkObfQ1PU=
Subject key identifier: 5A:A1:29:55:55:2A:DC:E4:30:D7:2C:AA:19:12:C0:1C:AB:4D:58:97
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 019D9818B557C765F3F24432DA1ECCAAA553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 131F
Signing time: Thu 16 Apr 2026 21:00:48 +0000
Manifest this update: Thu 16 Apr 2026 21:00:48 +0000
Manifest next update: Fri 17 Apr 2026 21:00:48 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: utnEVOZinDycFYg+a1nuC0f1AihwLOIU6cZ4gpRtjHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b5:57:c7:65:f3:f2:44:32:da:1e:cc:aa:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Apr 16 21:00:48 2026 GMT
Not After : Apr 17 21:00:48 2026 GMT
Subject: CN=5aa12955552adce430d72caa1912c01cab4d5897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:f4:db:5d:83:7c:18:9e:7a:a9:fa:6d:cc:
37:2d:3e:e4:61:56:65:1a:89:82:e2:b0:c0:02:8d:
07:e8:c5:da:a8:ec:af:b2:6a:60:f9:98:c3:16:7a:
e7:70:a1:9d:10:50:29:37:84:c5:a2:bc:a6:15:38:
54:d6:20:cf:ae:d7:a5:6c:9b:36:9d:7f:a8:8c:16:
ec:33:77:6f:c0:f8:e0:87:4d:9a:ae:1b:c5:8e:fb:
1b:44:5b:55:f6:79:87:2c:3c:03:4f:d4:7a:82:3d:
c5:ba:e6:02:0d:20:ac:58:93:25:f6:ed:2b:61:aa:
1b:0c:52:7f:ac:38:4e:d3:2a:a9:d4:d3:7a:df:3e:
df:99:cd:29:c5:3c:4a:d5:60:e0:c2:5e:e7:10:0a:
3d:49:0d:d1:37:b3:f5:21:80:b6:bc:9f:42:55:9a:
ae:47:fe:77:f6:4e:4e:ea:1b:be:c2:4b:a0:e1:9e:
47:eb:41:54:ac:fd:d0:ec:4c:7f:fd:ec:96:27:86:
82:bb:42:c3:30:e8:5c:10:6a:3e:39:83:8c:6d:4d:
20:59:d1:f2:f5:30:54:07:10:9f:cc:c6:35:2d:39:
7f:cc:84:ce:45:bf:79:71:d0:e3:0d:d1:e4:a0:c5:
1f:e8:0e:53:cf:b0:4f:18:1a:16:85:03:eb:4a:db:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:29:55:55:2A:DC:E4:30:D7:2C:AA:19:12:C0:1C:AB:4D:58:97
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:21:82:5c:1d:3d:a0:4f:29:40:ee:1d:67:1b:54:8b:38:3d:
bc:36:c7:72:b7:2d:57:de:5f:f2:c2:c7:ef:2f:45:04:78:a3:
95:8b:3e:23:95:51:1c:ae:23:01:b3:ae:13:8a:34:7d:56:42:
03:ff:2a:df:05:6d:9e:1f:4e:24:a4:3d:65:96:fe:f9:68:63:
0c:64:60:0d:c0:63:d0:c6:63:4c:7a:8b:90:09:11:6a:a4:ce:
7a:6a:19:5a:58:7a:73:77:46:69:c0:c1:1c:ed:3c:39:41:31:
ba:1b:02:42:a2:6a:71:51:04:2e:7a:77:a9:71:c1:3d:be:c6:
e6:77:9e:84:44:9e:d7:10:af:2c:6d:18:80:c0:a3:3f:29:03:
4b:9f:d0:11:e3:fb:95:73:59:6f:11:a1:b8:db:ef:18:9b:9e:
90:b4:50:74:d6:7c:08:a8:73:af:d7:c1:78:f3:98:bd:ae:13:
a7:80:18:38:50:ee:dd:ba:71:6c:d3:39:12:6a:02:fc:54:5f:
b1:4b:fc:e3:f4:a8:fd:95:20:ae:69:b8:ca:97:1b:97:f2:f8:
06:b1:44:46:81:0f:8d:3d:07:60:57:a5:47:73:dd:10:5c:31:
91:36:99:88:d3:37:59:47:46:0f:9b:8d:11:e2:c1:e3:16:87:
ac:0d:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:17 2026 by rpki-client