Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: MyglGPabqWbCg7wG2o/hhcTaqUHpowRhv+CP5DIdTbc=
Subject key identifier: CF:F8:EE:8C:3C:8B:B6:5A:D5:6B:39:3F:6E:4E:06:84:BD:9D:16:CB
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 019D37F7655B58272CE0954A5F709951E2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: NhJ6vdwMryrhpGOR8KKqWfDyEKE.roa (hash: 4pFWV2mpeu3iq5Hwo5/8aDs6PTomZFrJ08QxozJPsuY=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: RqCAVlHHNgpJLcjdDQnrkBbpSCSZ7hbQP3NkY4M/nG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:65:5b:58:27:2c:e0:95:4a:5f:70:99:51:e2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=cff8ee8c3c8bb65ad56b393f6e4e0684bd9d16cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:a8:0c:4c:62:89:79:43:57:82:67:eb:af:
b5:84:ec:ee:7a:ec:2f:8f:3c:10:13:c5:b6:e2:15:
d3:41:bb:55:ea:04:ec:f9:5a:cc:48:59:5c:dc:09:
9d:d1:14:c2:9b:ce:e8:29:82:62:58:46:4e:20:d2:
25:e3:49:79:64:9f:a4:54:9c:33:9e:c8:ff:b8:32:
81:6b:8d:c2:4f:80:fc:11:d3:72:f3:4a:4c:7d:eb:
8a:e0:b4:4c:f3:c4:0e:e9:1e:12:0a:03:64:fc:2f:
a1:06:f2:eb:7e:9b:3d:8e:ae:2f:33:67:83:0e:29:
a1:ed:a2:76:29:2b:53:ac:31:fd:c9:b5:f9:b7:cb:
5f:3f:bd:54:2e:7b:c2:ed:eb:0a:38:40:0f:f8:08:
f8:69:87:34:1e:ea:df:10:4f:b0:82:a0:71:b3:f3:
be:6c:c5:7c:06:79:3d:d8:b7:13:6d:a8:a3:d7:85:
09:df:3c:77:d6:9a:6a:94:09:49:a4:66:25:2f:20:
4a:b2:3f:70:06:a5:90:6c:4e:ff:b4:89:46:20:3e:
0a:6f:19:fb:2d:8f:21:50:ee:d3:c6:b2:a4:79:4b:
13:55:ef:25:16:4b:bc:94:46:2d:63:e3:fd:9e:12:
76:55:c3:68:41:3e:fc:0a:b6:61:10:4a:bd:ba:c6:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:EE:8C:3C:8B:B6:5A:D5:6B:39:3F:6E:4E:06:84:BD:9D:16:CB
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:58:cb:36:08:ca:f7:98:ad:8f:2d:08:ff:00:a6:a7:35:
3b:c6:6b:f6:98:33:be:7d:58:c8:2f:21:4e:ea:73:2a:ec:d3:
2d:97:05:66:c1:9b:9a:07:f0:d3:44:c7:cc:64:3c:52:80:a5:
cf:56:16:3d:45:58:03:d5:62:14:f6:fd:fe:3f:6e:ce:91:31:
a9:1e:a7:ca:58:06:ba:08:f8:e6:14:b6:ee:b9:9f:90:13:13:
0f:50:da:a2:52:37:c8:7d:7d:bb:6e:e8:8b:f4:92:5b:6c:46:
da:a2:b4:47:9e:1c:32:e2:8f:d9:7c:fd:91:8e:84:8e:c3:ae:
f5:9a:8e:3b:8a:89:dc:9d:53:98:07:c0:ce:02:44:86:e7:1c:
7e:53:28:a9:1d:88:45:e2:7b:c4:b3:ba:85:6a:37:ee:2d:19:
b8:02:0c:89:a5:fa:ab:3d:4a:4f:d0:9e:ed:92:33:92:ea:54:
a7:b2:7c:04:ad:ec:5d:1d:a5:62:4c:af:06:df:71:0a:90:e7:
3b:df:84:22:f3:e7:0a:f5:01:dc:49:cd:6f:a2:61:b7:94:16:
87:d3:61:0f:8e:d1:8a:3f:9e:c3:cd:0a:7c:9c:db:e6:b5:69:
79:cb:a1:92:73:4c:54:97:51:e5:fb:62:b8:61:af:64:b4:3b:
7f:0b:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:37 2026 by rpki-client