Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: +C+YKtU92Ov0eofsIdCfN3Xj4xnECSZ5Z39v+yOLihk=
Subject key identifier: B1:1D:BB:DF:4F:E2:11:B9:3B:BD:36:E4:65:4C:44:EF:8F:3F:B2:F2
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019F860D3C4A09A5777649B087F68C5FDBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1891
Signing time: Tue 21 Jul 2026 19:00:42 +0000
Manifest this update: Tue 21 Jul 2026 19:00:42 +0000
Manifest next update: Wed 22 Jul 2026 19:00:42 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: e/tKeqMhcZafZNfQ8b+9f/N+qXtqHzNdZHCUP3MKz/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:3c:4a:09:a5:77:76:49:b0:87:f6:8c:5f:db:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jul 21 19:00:42 2026 GMT
Not After : Jul 22 19:00:42 2026 GMT
Subject: CN=b11dbbdf4fe211b93bbd36e4654c44ef8f3fb2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:aa:06:03:52:2d:b3:8d:66:a7:73:ef:6b:
90:10:4b:13:2f:14:10:4c:cb:52:f1:07:b1:61:5c:
80:8c:fe:b1:bc:a5:5c:31:04:b2:f6:3d:cf:cc:7b:
4c:76:ed:52:b9:da:66:c4:39:f2:ca:fe:ba:1c:47:
8e:54:04:90:0e:7d:6f:2d:5b:70:c7:ed:d8:73:dd:
9a:c8:4b:6b:a8:1c:57:73:28:83:0a:ec:bf:c0:a5:
2a:28:2d:60:03:90:bb:1a:2b:d8:52:69:f8:74:6d:
29:d6:ed:e9:f4:7d:68:71:e8:e2:5e:19:d8:67:ff:
3d:65:db:e3:0e:e0:1f:57:96:4c:ff:5b:74:f9:46:
b8:f9:ef:cf:59:93:f7:af:c6:17:fa:c5:40:b4:e3:
33:3d:c8:3b:b5:7a:bf:92:90:72:11:ea:4a:2b:77:
9b:20:59:63:78:f7:4d:41:29:ae:25:55:58:ba:f5:
0a:61:d1:61:e6:79:7d:10:e4:af:35:dd:b4:84:dd:
6a:9b:8b:e9:f3:4e:46:46:1e:8e:ac:44:f5:e8:32:
65:eb:78:61:84:4e:59:9d:35:6c:32:56:61:ee:4e:
a8:7b:41:19:01:65:8d:21:22:48:c8:59:07:a9:d9:
33:10:13:84:80:e2:a0:53:85:39:af:b9:53:0a:6d:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1D:BB:DF:4F:E2:11:B9:3B:BD:36:E4:65:4C:44:EF:8F:3F:B2:F2
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:14:a7:ce:9c:40:1c:a1:8f:b8:04:57:1d:11:ac:81:d1:
ff:d4:d1:ed:18:16:13:d5:dd:79:99:2a:95:3c:27:f5:d5:28:
4e:6e:b4:f0:66:e7:79:af:ea:fb:83:93:84:31:12:03:fd:61:
af:46:ff:56:7f:91:aa:9d:05:57:86:17:e5:59:72:16:4d:a2:
96:55:c9:6c:28:12:5c:aa:3d:d1:3b:98:8d:95:74:d7:9d:51:
67:c7:d2:25:ff:cb:a4:fc:40:d7:53:15:da:67:21:15:08:9f:
9c:31:32:15:b3:e3:ec:01:aa:17:41:14:ca:37:01:22:d6:b9:
f1:66:63:75:33:e7:fe:ea:d1:71:5f:d9:65:a4:00:b4:e0:b9:
55:a2:f8:d1:fa:e9:a2:26:ec:e0:c4:0a:7f:19:ac:d8:c0:73:
f8:3f:1a:70:e7:c8:05:3c:e3:7c:48:de:c1:f3:7d:31:b7:06:
8c:b4:a2:ff:cb:67:0a:52:73:44:e8:63:e5:4a:c7:34:d6:97:
e3:f6:9f:0c:1e:0c:de:da:4f:0a:cb:16:ae:4c:07:29:0c:84:
2d:ea:8f:ed:c7:ad:54:f6:29:fd:aa:32:64:ea:ba:85:1b:01:
cb:7d:57:57:da:89:72:78:e8:6e:4a:ce:f2:e7:5a:03:f2:9d:
a3:ca:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:33 2026 by rpki-client