Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: QcnGXFSKB+qEQTA9dn+o7ZP/DDAUv5ROz/7a19KR3SM=
Subject key identifier: DD:3C:D8:FA:14:8D:C6:7B:85:1B:09:8D:CC:4A:45:45:03:53:56:17
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019DCE638E78C4681405ED169F4E6BF9EE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 10:02:04 +0000
Manifest this update: Mon 27 Apr 2026 10:02:04 +0000
Manifest next update: Tue 28 Apr 2026 10:02:04 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: 2mmH7qIylWevP2dOf2xuAFHW0J7dn+7+GxGvYqkdnvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:8e:78:c4:68:14:05:ed:16:9f:4e:6b:f9:ee:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Apr 27 10:02:04 2026 GMT
Not After : Apr 28 10:02:04 2026 GMT
Subject: CN=dd3cd8fa148dc67b851b098dcc4a454503535617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:06:02:cd:6e:c9:57:fb:6b:18:09:db:5e:
2a:bc:cc:78:5d:13:a3:3f:c5:7d:96:79:8b:16:bf:
10:bb:5f:0f:ba:d5:b2:10:3f:e7:5c:01:ba:b2:fe:
a0:d1:89:70:54:ea:6d:6c:8e:95:7a:31:7f:c7:b2:
86:71:78:0e:22:ce:aa:be:ac:0a:1a:43:16:30:4c:
b6:d6:35:68:ef:70:2d:a8:87:9f:67:1b:cb:8f:aa:
58:b8:09:e6:26:d6:ec:9c:0a:14:06:1f:fa:63:9d:
38:57:39:97:e5:bc:9a:60:f3:30:74:8a:f7:68:2f:
4c:00:ab:ee:4a:00:c6:10:1d:0b:2c:4d:8a:21:2f:
ad:21:0c:88:ad:11:b5:39:00:b3:36:ad:5c:04:10:
9b:4d:5c:5d:2e:ab:7e:1a:5c:9d:e0:05:13:0e:63:
24:6f:ab:af:5a:36:5c:68:db:d2:88:08:ff:47:bd:
17:84:fa:e4:da:52:0a:0d:0d:ec:62:04:61:4b:98:
8f:a7:23:9c:e5:60:8e:ac:6e:8c:69:7f:00:07:0e:
61:19:83:37:c6:d7:6c:d4:0b:86:86:dc:6b:38:0f:
b0:a3:c8:28:cd:26:0d:26:36:27:63:33:33:21:8f:
b4:d3:89:85:3b:a8:24:1b:46:a3:16:db:b9:be:29:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:D8:FA:14:8D:C6:7B:85:1B:09:8D:CC:4A:45:45:03:53:56:17
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e6:09:1a:cb:cb:fa:fd:d4:5b:4e:e8:a1:cf:25:38:0d:5b:
6e:b8:c0:9c:ad:a8:6d:af:30:6c:06:f7:ee:25:a2:c2:b4:ba:
79:95:c5:d4:c4:d1:cd:7a:91:12:61:8c:89:7c:01:52:1a:e5:
2b:e6:1b:fc:eb:a5:02:45:78:f4:f0:62:5d:f1:84:ca:6f:cd:
13:7f:d9:93:15:06:0d:3c:d7:03:e8:52:6b:21:70:74:4d:73:
74:ae:db:37:0a:32:32:ac:4d:85:dd:f8:7a:5e:d8:6c:2c:76:
c2:57:ea:d6:56:d0:ab:0f:43:50:3b:d5:e3:49:ab:67:fa:56:
19:11:33:d5:d1:b0:c9:bd:b2:1f:be:48:08:8a:d9:56:15:c2:
50:4f:f7:89:05:95:fd:0c:09:6a:94:76:07:37:2d:39:d9:ac:
a6:e1:00:c0:bb:88:1a:0d:c5:1f:8f:cd:92:bb:4d:18:af:16:
08:94:c7:43:37:67:cc:fa:7c:13:f5:7d:94:c6:03:c5:66:97:
77:20:1a:fe:b5:50:a9:a8:61:53:00:ad:a9:10:9a:61:b3:d4:
a3:0e:2d:ee:ae:a5:1f:64:52:38:01:e8:1b:07:ff:8b:22:3b:
67:7a:7e:27:b2:2e:eb:f3:05:49:a1:3d:83:f3:37:f7:9f:ce:
52:56:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:15 2026 by rpki-client