Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: qTF/hjmYoUvcfRao9+9q2z1Lcr463ATvz+yrFGrIF3w=
Subject key identifier: B5:D0:6E:07:8C:79:08:F5:BC:38:CC:6B:53:4E:DD:8D:B1:62:A4:5A
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 01A16AC797265B4C0925D723F2EE3FFA9C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 198C
Signing time: Fri 23 Oct 2026 22:00:27 +0000
Manifest this update: Fri 23 Oct 2026 22:00:27 +0000
Manifest next update: Sat 24 Oct 2026 22:00:27 +0000
Files and hashes: 1: D9w27obqocEFDTdBIPGTWc0hJYs.roa (hash: w/x4WJOjB+8CrMv8hDIJNBTxxZWB2vm/ke2sX5HhAl8=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: H9Q/yVq3UjNHw1cv4AretTvPfiN/KnN5YD94SW2UdD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:c7:97:26:5b:4c:09:25:d7:23:f2:ee:3f:fa:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Oct 23 22:00:27 2026 GMT
Not After : Oct 24 22:00:27 2026 GMT
Subject: CN=b5d06e078c7908f5bc38cc6b534edd8db162a45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:11:52:3e:fe:7c:ca:c4:58:c8:ba:a0:58:
14:ac:35:0e:cf:92:31:a9:41:0e:a0:e2:90:1f:24:
4c:11:2b:d8:01:65:ab:eb:31:05:27:9a:22:6f:b4:
79:f8:f6:50:2e:33:ae:7c:04:47:82:b2:c3:4a:3a:
23:c6:7a:03:03:70:9e:e6:4c:09:d9:39:ed:dc:d0:
59:3f:a4:3b:a2:db:83:cb:1a:85:e8:22:67:10:91:
cd:79:39:e1:bd:16:4d:66:62:7e:63:a6:10:65:25:
85:3e:54:e6:3b:b7:bb:0d:4c:32:7d:05:ed:e8:0f:
49:75:8a:35:7f:d2:c9:a9:28:cd:15:08:85:5e:65:
56:20:4c:38:e1:67:75:a5:72:bc:1c:27:82:65:e7:
fa:85:07:d8:3b:be:e0:22:30:eb:f0:21:36:e6:61:
23:c6:ea:cd:df:82:63:f4:f2:c2:5a:d7:10:3a:34:
86:24:6c:5a:1b:2a:3a:88:53:6d:69:1d:37:b5:86:
d5:b2:1b:83:6c:c2:c8:93:46:39:34:18:6f:56:d9:
74:5d:6a:49:99:7d:0a:9b:09:ac:37:28:5f:85:9d:
6e:59:f1:5f:66:b6:48:16:16:65:8b:57:6a:d7:92:
3b:c3:52:8e:53:ca:d6:db:10:e1:18:43:a8:d1:d6:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:6E:07:8C:79:08:F5:BC:38:CC:6B:53:4E:DD:8D:B1:62:A4:5A
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e2:b8:27:6d:31:88:0e:27:3b:d5:6c:b5:c2:5d:ff:c2:f7:
17:1f:0f:30:72:72:d9:16:98:6b:42:a2:89:2e:5d:5b:38:6c:
60:d1:0c:bb:49:4d:15:0a:47:3b:b7:52:39:86:bf:19:58:55:
c9:21:f7:57:f3:13:d9:dd:ff:6d:b8:a7:a6:a0:11:27:77:1c:
1d:2e:67:7c:39:71:bc:31:ac:c9:ab:b7:cb:b2:b0:33:17:61:
ae:9a:94:8b:3e:36:1d:d9:39:9a:d5:a5:74:b8:64:dd:db:05:
b1:ab:52:1e:f0:15:3b:cf:14:d9:88:b2:0a:f1:3a:d2:9c:2b:
41:fd:d0:52:2b:59:79:44:97:9b:54:7a:50:51:4f:34:62:02:
6c:48:d6:09:c8:18:2c:5b:d0:ff:6f:e5:63:08:b0:59:41:a8:
e8:6d:e4:18:4b:52:c1:72:67:a3:0e:8b:e6:56:a8:08:ca:10:
73:13:55:48:56:4a:2f:04:51:f2:a3:55:41:35:64:59:71:84:
76:27:72:e0:6a:c7:30:3f:9d:2f:b8:ef:9d:ae:f1:74:30:0e:
ea:31:4d:d1:ac:80:66:48:24:31:b2:1a:ff:3f:e4:e0:bb:69:
2b:f8:59:ec:f0:01:35:12:a4:0b:9c:af:1e:64:46:f2:22:2c:
86:ab:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:44:27 2026 by rpki-client