Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: U5qKHPgI++WQwPu7gzmPdI6iiHMc8b/quRHWbnsXI3c=
Subject key identifier: 2D:EA:4A:0B:A6:1D:D7:58:3F:6B:D7:67:78:83:8C:29:9E:E6:C1:FF
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019FA1BB3149F04C2BF93EE292CAC597E573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 04:00:27 +0000
Manifest this update: Mon 27 Jul 2026 04:00:27 +0000
Manifest next update: Tue 28 Jul 2026 04:00:27 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: c7Mprfr8nmNM+joSNo515YGAjfxaDKGtcde7+u1icO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:31:49:f0:4c:2b:f9:3e:e2:92:ca:c5:97:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jul 27 04:00:27 2026 GMT
Not After : Jul 28 04:00:27 2026 GMT
Subject: CN=2dea4a0ba61dd7583f6bd76778838c299ee6c1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:03:2c:45:22:f9:95:30:aa:1e:cc:4a:a1:
bb:4e:39:0a:1b:32:75:f7:fc:b9:8f:87:22:da:70:
d7:f1:35:b4:a3:bc:59:e5:53:a7:56:29:14:d5:26:
c2:c2:2f:87:5e:54:ed:c2:6d:c0:e1:f4:27:cd:e8:
e6:8f:4b:66:77:f9:da:4d:17:c1:64:82:d4:46:ed:
c4:01:27:a4:72:d8:13:ce:61:6c:26:0e:58:d6:35:
7d:aa:6c:f2:d7:b8:f4:84:c9:0f:36:cd:76:ca:9e:
ec:52:5b:a7:7f:87:4e:02:5f:eb:a1:e2:e1:90:42:
02:93:36:cd:9d:fa:29:a8:f3:1f:62:a1:d1:de:c7:
20:46:75:5d:ec:17:e0:ce:e5:e1:07:b4:ed:b8:83:
4a:a9:7d:c6:8a:1c:37:21:d8:c5:32:67:71:71:d3:
c1:2d:6f:2d:bd:22:bf:2d:96:3d:05:ee:08:5d:71:
21:e2:a3:17:34:64:07:e0:af:83:a7:28:cb:0a:e1:
65:e7:a6:17:ed:8f:4d:bb:b1:7d:f9:42:ff:17:f8:
49:ee:68:00:9b:32:19:e4:a5:e9:6f:89:c6:78:2c:
43:47:ff:2c:7e:2d:2b:41:2e:dd:ba:70:66:38:e2:
e7:6a:5c:5e:2e:0c:47:ef:4c:f0:38:99:00:a6:0f:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:4A:0B:A6:1D:D7:58:3F:6B:D7:67:78:83:8C:29:9E:E6:C1:FF
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:cc:3c:c6:6e:5c:12:a0:65:a9:88:b2:c1:8d:f3:2b:25:
f5:81:5b:cb:04:50:15:ec:d7:04:54:e9:2e:00:1a:34:a1:32:
ee:86:f6:18:7d:4c:e7:a6:df:63:d6:97:fa:29:bf:90:ee:90:
ec:14:b2:75:24:42:fb:a9:3d:97:66:a4:9a:94:4d:f8:af:88:
85:79:fc:61:92:31:c9:8d:d0:80:f1:44:ce:42:68:28:08:d6:
16:7e:57:aa:4f:bf:b1:0e:48:28:b2:8e:14:ec:6d:40:e6:67:
11:fa:25:9b:dd:95:98:4f:11:d7:c2:e8:ba:59:31:30:63:5d:
d1:85:cc:38:df:11:30:e2:28:ae:4a:b7:d5:d7:51:91:bc:87:
94:65:a2:5f:19:e4:9f:e7:d9:11:f0:7c:c5:d0:9a:60:56:c6:
77:49:8e:1d:3f:3e:ae:7d:74:9f:f8:73:fa:90:e8:9a:d8:7b:
24:cc:d0:0d:fd:23:00:94:79:67:e7:0d:18:a9:c9:1c:37:63:
ce:77:36:50:cf:bf:8c:1b:71:65:8d:8e:a1:c4:21:9a:fc:25:
d2:d9:e3:e6:87:bd:39:a4:89:2d:6b:32:a2:d3:06:90:69:0e:
6d:d1:49:58:65:21:64:49:f6:72:56:2c:4b:85:a5:09:7e:d6:
38:9a:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:34 2026 by rpki-client