Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: hgKvpKboPQcWeKb7q4wfJwCq79+H7c/AFTJiBDlm3AM=
Subject key identifier: 89:FB:D8:94:96:1D:E5:64:5F:03:45:7D:90:41:AF:DE:1B:29:84:B0
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 019F11C0DAF563D353ABA695ED502529E4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0C4E
Signing time: Mon 29 Jun 2026 05:01:19 +0000
Manifest this update: Mon 29 Jun 2026 05:01:19 +0000
Manifest next update: Tue 30 Jun 2026 05:01:19 +0000
Files and hashes: 1: YkYmFRFQjRoPvU_hicebsQX8a8g.roa (hash: 4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: jRnGrksjzXB+iZEfsNXDufSfsR2UrMaqu7Dbhq23508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:da:f5:63:d3:53:ab:a6:95:ed:50:25:29:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Jun 29 05:01:19 2026 GMT
Not After : Jun 30 05:01:19 2026 GMT
Subject: CN=89fbd894961de5645f03457d9041afde1b2984b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:17:e1:4e:ca:ad:33:50:94:08:ad:e1:8e:
bc:83:13:22:2b:bc:13:fb:a0:cc:29:d6:db:c6:42:
61:6d:80:69:93:b7:19:6c:65:9a:33:d5:9d:e4:b7:
5e:dc:94:6e:8f:22:bf:55:8b:b6:66:75:19:ba:ee:
5b:4f:b2:92:9c:a5:1d:6f:bf:e0:63:76:d5:f2:dc:
d8:96:34:c9:99:01:47:7f:1b:3b:9a:79:18:01:fb:
c1:5d:98:de:66:be:46:a6:0d:b1:b4:60:ba:5e:bc:
e6:c5:ae:02:4a:4c:76:9c:1e:99:63:13:24:90:d6:
2d:af:62:9c:1f:8a:15:33:4a:f3:9f:24:ec:d8:89:
0c:16:d3:32:46:aa:82:3c:3f:23:7b:d0:00:0f:42:
ec:a3:62:92:cb:c5:5a:0d:f0:dc:3f:b7:d0:ee:e0:
7e:a8:88:e7:82:0a:14:e3:34:71:ed:15:68:1a:39:
cd:d5:e6:90:07:12:93:13:c8:c6:38:ba:97:af:b7:
82:42:6f:f6:d4:1e:b6:eb:4e:29:df:fe:8b:6c:4e:
58:f7:8b:d7:e1:12:29:b3:96:f7:b1:70:86:0a:15:
42:a1:c6:ef:26:05:00:5d:81:bd:7d:c7:88:67:88:
ff:cc:ed:5d:bb:43:03:c3:11:5a:c9:42:03:58:70:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:D8:94:96:1D:E5:64:5F:03:45:7D:90:41:AF:DE:1B:29:84:B0
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6c:c6:20:81:9f:91:68:e1:6a:52:dd:ad:54:6c:06:06:06:
3a:04:b1:75:01:29:59:0d:64:30:48:69:16:54:46:c2:a4:aa:
f0:ed:3f:11:e5:b8:89:0e:a3:24:19:c9:ff:01:8a:c7:74:45:
b0:f3:af:da:65:11:56:d1:8b:b2:82:60:f2:c6:6e:7a:a1:0b:
4f:0c:93:98:22:ac:aa:3b:f4:20:7b:74:04:58:b9:58:1f:e5:
5b:83:42:b0:b1:ac:98:37:c3:e3:99:9e:e6:dc:0f:44:d4:43:
bb:0d:9d:5f:06:86:d1:ff:82:b8:a0:61:ae:d7:6b:02:49:39:
3e:a1:b1:fb:66:19:95:dc:09:71:3b:59:6f:c4:a9:85:d2:d8:
38:a2:e6:26:65:7c:c3:1b:28:c8:ff:db:7b:1c:62:60:d4:2d:
bd:a5:53:0f:67:cb:1a:a7:05:6e:e8:ce:4c:0c:6a:94:08:d6:
83:6f:24:ae:5d:00:fd:7f:2b:bd:40:47:43:6a:63:84:21:45:
40:4c:10:68:ab:68:2a:e9:a2:c6:ea:87:54:85:a9:6b:6c:ba:
18:8b:b6:49:b2:f3:c7:6d:ed:ad:71:ce:63:f9:b0:e7:bb:27:
17:3f:92:85:11:46:04:0c:d4:cd:47:1e:82:9f:d3:a0:18:7e:
0b:49:c0:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwNr1Y9NTq6aV7VAlKeThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0
YWM4NjMwHhcNMjYwNjI5MDUwMTE5WhcNMjYwNjMwMDUwMTE5WjAzMTEwLwYDVQQD
Eyg4OWZiZDg5NDk2MWRlNTY0NWYwMzQ1N2Q5MDQxYWZkZTFiMjk4NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmIX4U7KrTNQlAit4Y68gxMiK7wT
+6DMKdbbxkJhbYBpk7cZbGWaM9Wd5Lde3JRujyK/VYu2ZnUZuu5bT7KSnKUdb7/g
Y3bV8tzYljTJmQFHfxs7mnkYAfvBXZjeZr5Gpg2xtGC6Xrzmxa4CSkx2nB6ZYxMk
kNYtr2KcH4oVM0rznyTs2IkMFtMyRqqCPD8je9AAD0Lso2KSy8VaDfDcP7fQ7uB+
qIjnggoU4zRx7RVoGjnN1eaQBxKTE8jGOLqXr7eCQm/21B62604p3/6LbE5Y94vX
4RIps5b3sXCGChVCocbvJgUAXYG9fceIZ4j/zO1du0MDwxFayUIDWHAFUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn72JSWHeVkXwNFfZBBr94bKYSwMB8GA1UdIwQY
MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt
MGE3NjhiMjQxMjVhLzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh
LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWzGIIGf
kWjhalLdrVRsBgYGOgSxdQEpWQ1kMEhpFlRGwqSq8O0/EeW4iQ6jJBnJ/wGKx3RF
sPOv2mURVtGLsoJg8sZueqELTwyTmCKsqjv0IHt0BFi5WB/lW4NCsLGsmDfD45me
5twPRNRDuw2dXwaG0f+CuKBhrtdrAkk5PqGx+2YZldwJcTtZb8SphdLYOKLmJmV8
wxsoyP/bexxiYNQtvaVTD2fLGqcFbujOTAxqlAjWg28krl0A/X8rvUBHQ2pjhCFF
QEwQaKtoKumixuqHVIWpa2y6GIu2SbLzx23trXHOY/mw57snFz+ShRFGBAzUzUce
gp/ToBh+C0nA/A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:25 2026 by rpki-client