Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: kvJbEehbLHEmi+1onCIOAd8QJBpSAhTZEKwNvyinIUg=
Subject key identifier: B4:D6:CA:BC:1A:6C:38:B4:6D:3F:1A:80:E0:3E:E0:08:8C:71:00:98
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 01A184510B9F43E09A8E71EF7D14BA8FAC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 1527
Signing time: Wed 28 Oct 2026 21:01:06 +0000
Manifest this update: Wed 28 Oct 2026 21:01:06 +0000
Manifest next update: Thu 29 Oct 2026 21:01:06 +0000
Files and hashes: 1: h3sE5dxGeAbRDxvt7OESDDknJfw.roa (hash: o8FzyZkryMLyMcYf+Zp1JhuP+yJeZt+99zqw52fdpd8=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: Btgs0a6UMOxfs8yUS/7coqha2HabZR8GVI4nwQqObYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:51:0b:9f:43:e0:9a:8e:71:ef:7d:14:ba:8f:ac:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Oct 28 21:01:06 2026 GMT
Not After : Oct 29 21:01:06 2026 GMT
Subject: CN=b4d6cabc1a6c38b46d3f1a80e03ee0088c710098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:26:9c:f2:a9:71:7e:a9:18:d3:7a:48:74:
f6:dd:e5:23:45:ed:53:8d:a2:59:58:cc:13:cb:6c:
47:17:b5:0e:d0:67:52:0b:02:65:af:18:38:e0:1b:
81:f7:a4:e9:73:ca:cc:e7:f5:5d:70:46:55:51:d7:
c6:09:d9:3b:58:27:00:f9:a6:7b:9a:d7:66:72:1c:
13:6c:56:bf:37:17:6a:ed:71:c0:a6:10:87:95:9d:
b6:30:b2:e6:93:b8:2d:5c:d0:97:02:b5:95:99:d0:
dc:b5:39:0f:f8:51:0a:e5:df:15:bd:52:1e:69:58:
92:23:70:8e:cf:00:2e:23:30:bf:80:67:f7:c4:1a:
dd:b9:d8:67:ab:c3:4f:d6:65:11:7d:8f:d6:2b:ac:
2e:57:f4:e9:30:80:d6:14:8b:61:bb:5d:f4:5c:5b:
4d:b3:aa:b7:41:48:ca:bc:ff:a2:92:f8:54:7a:44:
3d:67:fb:2c:8d:10:1d:1e:8e:94:10:21:05:30:60:
37:8a:48:d9:7a:1e:a1:27:13:53:c7:82:a0:f0:32:
91:6a:07:de:28:df:dc:6c:7d:b8:34:7d:86:4a:e9:
d7:c2:85:bb:11:0c:78:e6:cc:51:d3:e1:8c:0e:26:
e5:64:7f:fd:b1:c5:d6:33:75:56:48:2a:47:6e:8e:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:CA:BC:1A:6C:38:B4:6D:3F:1A:80:E0:3E:E0:08:8C:71:00:98
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:a8:bf:01:10:d5:bc:bf:24:07:b5:7e:07:67:c2:bc:d1:
fc:40:64:65:0f:82:e4:8d:f6:9d:b4:0d:1c:90:c7:5d:00:60:
3a:07:be:f4:3f:b6:88:d4:9c:5f:74:cd:01:96:73:a0:51:08:
12:40:3a:e7:ff:0f:b8:fc:48:96:60:85:72:d1:74:43:bc:ac:
a0:79:ea:b9:ee:86:fb:49:60:07:9c:96:e4:82:a2:73:f1:1c:
e3:f4:ac:ff:98:89:2d:b5:f2:37:02:80:e0:0f:9f:34:42:b2:
6f:f9:a0:60:26:3f:dd:86:6a:1f:ff:4a:c7:79:e2:b7:58:82:
48:0a:d4:bb:73:93:0a:3e:1d:08:01:27:7c:33:d5:21:59:56:
00:c9:1c:08:a9:d3:e6:ef:29:75:67:76:01:8c:fe:a5:3f:b8:
3c:fd:0c:be:fe:2c:3c:37:ee:26:a1:a4:fe:1e:7b:db:fd:d3:
29:43:8f:a6:a3:b8:bb:21:0a:46:91:99:a3:9c:db:cf:aa:6c:
c3:b7:c6:76:28:67:2d:63:69:2d:08:e5:f7:44:86:fc:4c:c2:
ec:e9:cd:64:a4:b1:ab:89:93:77:63:d4:8a:4e:c8:a9:e6:1a:
43:12:cc:c1:14:e5:11:51:ee:13:55:c9:04:e8:c6:32:21:65:
9b:df:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:42:19 2026 by rpki-client