Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: fThFHkLwoVap9bzVImqz/oyF2qfZKf7t9fTRIX2MG/U=
Subject key identifier: 39:A8:C4:24:3A:53:C8:41:3D:18:8D:C4:BA:4A:9A:3A:74:0B:6D:18
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019EB80F42BFDD501F9BAFF5FBB3D2F8C22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 19:01:08 +0000
Manifest this update: Thu 11 Jun 2026 19:01:08 +0000
Manifest next update: Fri 12 Jun 2026 19:01:08 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: jSqlksTEyUGPBO+aujRFnTUki1JAdNYaPNwnqtx80ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:42:bf:dd:50:1f:9b:af:f5:fb:b3:d2:f8:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jun 11 19:01:08 2026 GMT
Not After : Jun 12 19:01:08 2026 GMT
Subject: CN=39a8c4243a53c8413d188dc4ba4a9a3a740b6d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d9:f2:d2:f7:d5:cd:16:4c:46:46:25:e8:cc:
ea:83:1e:40:0a:e7:1c:88:5c:2b:3a:95:7e:4b:47:
8c:8e:60:b7:d3:1a:df:26:64:e1:ed:23:df:e0:49:
90:4e:09:80:d4:71:56:56:66:c5:b9:4e:be:9d:01:
fa:a5:ed:d7:75:c8:e7:bb:ad:eb:ca:c8:68:4d:66:
72:b1:d4:18:31:bb:87:f7:eb:42:d7:9a:ab:fd:0a:
5d:4e:6b:e6:88:22:cc:4a:01:70:1f:d4:3d:ba:6c:
de:f5:66:a6:03:ac:b4:f5:fd:23:00:b9:d2:0f:fe:
9e:79:7b:4a:99:4c:df:d6:48:fb:df:43:cd:80:cb:
2b:b9:b4:b9:c7:63:eb:65:18:6a:70:e8:f7:ae:ff:
98:eb:ab:38:0b:01:6c:81:36:cd:2d:64:18:d3:f1:
9c:79:b9:f7:e8:2d:f2:69:bf:bd:9c:ed:2b:1d:74:
3e:45:1f:57:97:65:98:f5:a1:5f:08:af:83:b0:1b:
ac:92:31:e5:4f:fc:0f:c4:8a:e3:d5:60:9d:c2:82:
1f:41:c3:08:c3:d3:5c:1b:d2:c4:01:b6:b0:f8:cf:
91:19:59:68:01:10:8f:39:85:6a:78:3c:05:f8:40:
13:7c:28:7e:a8:86:d6:35:97:da:51:09:50:aa:ad:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A8:C4:24:3A:53:C8:41:3D:18:8D:C4:BA:4A:9A:3A:74:0B:6D:18
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:27:4c:4a:d5:46:71:8f:4a:de:81:66:6f:7b:59:f6:ea:b5:
a5:03:0a:77:af:5c:9b:f6:6f:2a:c5:99:66:c6:46:0a:1c:b6:
62:68:fe:79:ba:0e:d5:d3:75:60:34:34:1a:3d:d1:27:4e:75:
00:74:5d:5f:16:55:63:54:22:0a:20:92:15:08:b5:63:ae:24:
47:d0:ad:ae:67:75:b4:ce:17:98:d2:2d:88:0b:89:1c:29:41:
7c:43:67:a2:0f:0b:f8:16:81:fa:76:f3:2d:ce:26:06:e6:45:
6d:65:dd:0d:68:b6:1d:77:bb:18:67:b5:c3:be:33:23:d6:87:
07:98:ef:ac:c0:46:e5:c1:f3:ba:80:98:15:25:c5:d5:e6:a5:
65:89:a0:e4:dd:ef:d5:3a:65:e5:af:d9:2d:29:be:6f:02:5b:
39:ee:2a:12:37:e7:51:ec:4a:07:97:8a:fc:c3:7c:4f:3f:0f:
78:01:71:eb:ae:5f:a1:f7:5d:c1:cc:e0:a9:aa:3f:27:cd:4d:
92:6e:5a:ff:fa:bc:c2:d1:48:57:bc:5d:22:54:29:b8:d0:bf:
44:97:07:1d:11:74:3a:66:3f:0b:1a:78:22:b6:c4:03:cf:a3:
80:9a:a2:cc:a8:39:6f:ad:cf:05:0c:28:16:fd:3e:c1:20:c5:
98:50:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:14:56 2026 by rpki-client