Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: SUR1PcXZ52iXaz5tyjqRe0o+c+vStxBNH/qjz1RMxBA=
Subject key identifier: 08:BD:97:C5:C6:1D:CA:F0:8A:1B:2B:C9:67:2C:75:88:72:02:35:72
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019CE4B5B5EE411082902C933C30DC5B57A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1862
Signing time: Fri 13 Mar 2026 01:00:39 +0000
Manifest this update: Fri 13 Mar 2026 01:00:39 +0000
Manifest next update: Sat 14 Mar 2026 01:00:39 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: itlrP3TvElz8SvpVcJaADC1BuX9W8njJMrI1Kk+rfBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:b5:ee:41:10:82:90:2c:93:3c:30:dc:5b:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Mar 13 01:00:39 2026 GMT
Not After : Mar 14 01:00:39 2026 GMT
Subject: CN=08bd97c5c61dcaf08a1b2bc9672c758872023572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:f1:1a:ba:65:21:22:59:c6:0b:e5:d1:9d:
e7:88:b7:63:75:f9:99:1b:0b:5e:a3:bc:94:ef:25:
fb:da:74:21:16:81:67:68:e6:b3:82:c1:66:5a:8b:
f0:93:88:6b:84:e8:a3:34:c8:f4:f4:16:38:27:10:
ea:59:d7:f7:95:42:18:22:6b:c0:10:d9:dc:92:97:
16:46:11:cf:cc:f0:a6:34:91:b4:76:91:6d:ca:50:
dc:3e:00:ae:25:14:12:b5:0b:50:e2:59:13:ec:30:
a2:69:ec:d5:39:c1:2d:f0:e9:ab:4d:86:b8:fb:ee:
70:13:3e:d0:c5:44:58:b9:c4:01:a7:b7:2f:be:52:
98:0c:8c:ae:17:80:ab:da:6b:9d:4e:df:9e:ff:e7:
8d:1b:d7:66:bb:f1:7d:08:95:0d:de:1c:69:44:32:
56:16:58:91:5b:87:b6:6b:ee:52:1d:32:9f:51:19:
39:a3:1c:51:5a:88:56:b2:d9:19:24:09:05:7e:c0:
e1:98:20:e1:c0:73:02:2b:5d:9e:db:bb:9a:ca:10:
8c:26:9f:57:ba:92:96:be:21:37:41:ca:c6:d3:e6:
af:50:3c:ec:7c:87:49:4d:28:92:69:3e:1f:61:7f:
6a:ab:b2:e6:88:18:d5:83:e9:3c:1b:4a:6e:b7:83:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:97:C5:C6:1D:CA:F0:8A:1B:2B:C9:67:2C:75:88:72:02:35:72
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6e:00:c5:48:bc:80:06:a0:a7:de:82:26:7e:16:45:3f:37:
65:72:c7:c5:b0:af:c0:0f:52:7e:a2:ba:4c:7a:b5:66:61:de:
d2:f3:9a:d2:71:3a:2b:1d:53:32:e1:09:1e:3b:e2:32:01:f0:
9c:5c:ff:ec:73:d9:a8:1b:c8:47:f6:c9:9a:41:31:ac:97:bd:
48:e7:72:d7:80:36:02:ec:51:f9:c2:a9:31:b6:e6:e1:c6:00:
a5:c0:8a:9b:b1:53:3f:69:3f:a2:4a:96:eb:7d:67:4a:26:4e:
1c:6d:af:e7:26:33:aa:18:da:47:bf:a3:7b:f1:b8:c7:61:11:
49:7c:93:80:9c:a8:f7:45:32:18:08:65:1f:f5:f7:60:26:ef:
04:41:ba:1b:9d:70:b4:5d:73:86:e4:af:ac:50:66:72:19:91:
e7:f1:ee:e7:0b:1f:b4:c5:ba:70:71:48:37:e9:10:ab:e0:1b:
3a:26:b6:72:92:b6:8c:01:62:c4:d2:0c:e4:48:01:76:11:09:
d7:c1:36:82:33:83:2e:4f:b0:43:93:f1:c3:32:e8:19:c1:c4:
c7:f3:1b:25:f7:62:44:77:b3:b3:e3:ef:0b:fc:e2:3a:80:10:
73:48:ca:a4:8b:b4:01:50:37:a9:6f:96:5d:ef:e5:9d:39:1e:
95:4e:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:23 2026 by rpki-client