Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: 29dkh40I0IOPqvxErefFosvIEJxqzHcY2V1c+c3mlsI=
Subject key identifier: A2:77:E8:04:1C:5F:C4:E6:2E:96:D2:C7:52:03:B7:74:39:EE:16:AE
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 01A08B685C4526BE69ED64EF84E971969934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 13:01:07 +0000
Manifest this update: Thu 10 Sep 2026 13:01:07 +0000
Manifest next update: Fri 11 Sep 2026 13:01:07 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: WkmqvXNrNEAIoXC9Y0Qghs1zLWQq49kgttgawLd67FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:5c:45:26:be:69:ed:64:ef:84:e9:71:96:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Sep 10 13:01:07 2026 GMT
Not After : Sep 11 13:01:07 2026 GMT
Subject: CN=a277e8041c5fc4e62e96d2c75203b77439ee16ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:f6:a2:7f:79:7f:c8:a8:72:22:fb:c9:02:
48:39:b6:41:03:7e:74:1a:ee:02:ef:0e:bf:66:75:
94:12:68:19:40:f0:6d:a3:f0:f9:c4:04:15:a8:10:
8f:af:92:73:ae:45:fd:6e:4a:a3:da:19:37:57:94:
2e:f1:00:de:43:ad:54:c9:28:f0:10:f6:f1:76:8d:
6a:a2:78:96:34:e5:ae:f1:1a:d2:50:5f:4e:02:91:
1a:8b:fb:d9:7f:3d:bb:5b:9a:76:14:cb:6a:26:b1:
0d:a3:7c:8d:8f:ac:e7:dd:e2:bf:36:10:31:c8:07:
a9:12:c3:5e:44:73:8a:92:d2:86:f3:20:89:55:97:
ac:55:68:e4:3f:cf:3f:cf:43:4e:b4:96:ae:b6:be:
3b:89:2a:19:4f:54:05:bb:40:e6:fd:1f:b8:23:c5:
b5:73:43:68:53:de:ca:f5:98:c9:ab:86:fe:a9:c4:
8f:0c:4d:7b:85:4c:79:43:be:b0:32:04:c2:4c:78:
b4:c4:ab:9e:af:9a:53:6b:1f:66:03:a3:2b:3f:6e:
03:61:14:a9:80:f5:33:0a:24:b9:02:15:f3:8f:29:
82:65:dd:93:fc:2f:2c:2b:cc:95:6d:35:88:00:26:
59:59:ae:80:d0:56:93:eb:46:f7:4d:75:37:05:50:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:E8:04:1C:5F:C4:E6:2E:96:D2:C7:52:03:B7:74:39:EE:16:AE
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fa:03:7e:5b:a6:9c:6e:e4:fc:d4:83:6b:c8:57:68:cd:80:
48:f5:b5:d4:ff:19:c9:73:f5:f5:78:e4:70:6b:d6:f8:c9:f0:
f1:a6:9d:e0:98:2c:41:5d:36:9d:7b:68:21:6f:ad:0b:44:1d:
4f:57:c1:7c:a0:89:c2:23:ed:72:b2:1e:4e:1f:7d:80:fc:98:
ef:e6:4c:5c:d3:4c:c9:fd:8a:06:3b:b2:7b:c5:ed:aa:bf:d6:
9b:58:ab:df:26:a8:95:e6:f5:a3:5d:44:72:60:92:b6:b5:23:
b4:80:8e:47:1e:af:67:ef:39:f9:52:f0:99:0d:f7:c2:e0:9e:
ce:68:4e:03:d0:cf:d0:5b:2f:14:82:b9:30:bf:59:22:d4:b2:
d2:ab:d2:97:81:0b:4e:1f:b4:53:95:3b:be:f5:31:02:da:2c:
d5:37:63:b9:c6:77:0d:17:0a:da:78:8a:d8:c9:34:09:8b:1d:
0a:2e:ab:2e:6b:57:4e:c0:cd:d9:0b:65:92:ef:6c:31:27:51:
84:60:5e:0e:a2:7f:2c:54:28:72:85:75:84:4e:3d:d5:a6:1b:
b2:a5:bd:a4:82:82:a9:94:2e:9d:f8:74:97:5d:7b:03:90:67:
6c:54:9f:c5:f3:0a:e3:ad:a4:e7:b9:5c:17:a4:d3:02:20:81:
c3:fe:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:19:52 2026 by rpki-client