Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: hKKxrKjj4RqFEpk6S5WzJe00lppmc90NZP57WBB58Es=
Subject key identifier: 69:A3:88:8E:7D:49:47:13:FF:D7:B6:35:31:CE:8E:31:3A:64:02:62
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019CEDB8C30A65189AEC9B1C879CA613C15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1739
Signing time: Sat 14 Mar 2026 19:00:34 +0000
Manifest this update: Sat 14 Mar 2026 19:00:34 +0000
Manifest next update: Sun 15 Mar 2026 19:00:34 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: adYgbA+vCdZtnyCUC4zKaDo8dWvr2wi9RDQv11T1w0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:b8:c3:0a:65:18:9a:ec:9b:1c:87:9c:a6:13:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Mar 14 19:00:34 2026 GMT
Not After : Mar 15 19:00:34 2026 GMT
Subject: CN=69a3888e7d494713ffd7b63531ce8e313a640262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:ca:77:b3:b5:a2:2f:3e:c3:38:47:2f:33:
60:b9:b7:31:b9:90:f7:b7:e2:8d:74:8c:66:44:af:
df:9e:ea:a9:4d:f6:2c:dc:35:12:3b:e6:61:4b:e9:
9f:98:75:c9:b6:a0:b6:a4:f8:e0:30:5c:f0:0a:c0:
e9:ac:40:fe:64:d1:2f:11:45:54:77:73:30:c2:f2:
fa:f6:79:3f:60:ee:7e:a1:ba:b6:65:4d:a8:65:15:
ca:6d:88:d5:38:61:87:26:66:a5:4e:f6:e2:7e:fd:
c0:01:b5:6a:12:b0:5d:1a:ed:4d:3c:a5:96:e0:78:
5b:e3:d3:be:42:ea:ff:81:17:ed:50:c4:7f:1c:11:
3f:45:08:63:58:44:85:97:3c:25:b9:e9:26:e1:d7:
87:75:c8:5e:ed:e0:e2:56:b7:8c:94:42:b4:e8:eb:
07:24:cc:78:03:52:58:30:d0:d1:2b:c8:f8:a8:42:
25:ba:d3:b4:95:8c:a4:ee:3c:d8:7f:a4:fe:18:8a:
91:39:31:44:8d:13:c0:fc:e0:3a:e5:76:c9:37:31:
e9:cb:76:ec:4e:f2:f6:30:49:63:81:a0:f8:38:91:
9d:9b:33:5e:bf:45:4f:ba:f7:6c:db:ee:f9:57:93:
65:77:a6:bf:81:70:95:5f:f3:a3:f9:3d:67:0f:b3:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:88:8E:7D:49:47:13:FF:D7:B6:35:31:CE:8E:31:3A:64:02:62
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ad:fc:3a:e3:a7:84:51:7b:5c:fe:89:bb:1b:2f:e7:38:72:
f4:f8:b2:03:ea:83:bd:40:bd:f2:6f:20:d6:0b:01:e7:3f:ba:
be:97:58:92:7e:80:09:c6:d4:f6:76:d9:9a:4c:f8:19:30:50:
c7:87:cf:50:28:65:4a:e9:3c:28:b6:87:56:c8:59:d4:1f:4a:
16:7b:a5:65:9e:44:5b:15:8d:12:33:e8:ce:8a:ca:e1:18:06:
6c:be:fb:7e:ab:48:4d:ef:72:13:d0:3d:d6:07:70:13:15:9b:
1a:43:7a:1b:19:83:e9:bc:20:76:28:61:bb:4d:b8:91:b5:1b:
a7:26:93:33:ea:70:56:10:5b:9c:d4:e4:72:ab:1b:1e:94:58:
35:f0:ca:66:be:78:79:5a:a3:70:0e:54:ed:86:bf:2f:b7:18:
c5:d5:33:12:58:b4:e9:b1:4f:52:c3:2f:38:e0:e8:58:13:46:
33:d1:31:0c:2e:d2:47:2d:40:15:44:31:85:a0:61:30:24:cc:
13:8f:a1:9b:6b:8c:f2:78:6e:4e:b4:62:29:36:92:68:8a:ef:
32:8f:b5:53:b6:a5:8c:38:02:c2:5e:4a:ad:de:f6:fa:bd:32:
c9:c2:70:5a:05:25:4e:ff:13:95:06:75:e4:72:8a:01:97:5e:
9a:87:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:47:08 2026 by rpki-client