Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: 9I8Z8NUXpAjKrV6tWiGH6m0BqDXQS+jJKssA+gFiW0A=
Subject key identifier: 6C:18:79:BD:38:32:4C:07:2B:4B:0A:0A:F5:67:C5:1D:72:43:59:7D
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 019D37C0E2AF0BA48FAE19947234AA2C040D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: yWNV0WbBL2bpgN3Tp09ny3tAgwsRFTByOh5iH1Urp04=)
2: lqVBKhe9BI1k73opGPRpRu7Tjm8.roa (hash: ANewMCPdr9EPXxV8b7rhqmy3E65gN7TANy2BLw8Q6mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e2:af:0b:a4:8f:ae:19:94:72:34:aa:2c:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=6c1879bd38324c072b4b0a0af567c51d7243597d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:97:b7:83:5f:15:bf:23:28:60:55:f2:7e:
42:66:e4:43:66:68:d4:ef:f4:24:ba:62:f7:39:e8:
30:e7:be:b1:22:d1:ec:b5:03:45:6b:0e:04:25:e7:
36:77:9d:91:03:95:e4:6e:dc:b1:e6:77:09:17:79:
4c:d6:1d:63:9b:84:ed:bb:73:9d:20:a3:7e:1f:88:
9c:3b:02:2c:2a:b2:a1:f2:49:0d:67:81:95:5c:6b:
0e:ef:7b:be:be:25:8a:9a:22:5e:ae:25:6d:0e:2f:
85:80:ee:41:46:4a:e6:ca:5c:04:df:ce:d2:8c:28:
10:6a:f6:5d:c2:c6:c2:fd:1c:12:23:f6:19:c2:7d:
c5:cb:d9:50:f7:c1:69:88:81:f5:9b:34:5a:95:ee:
70:aa:f0:37:55:c3:78:e9:02:cf:7b:23:55:ab:fd:
39:12:66:da:66:22:3a:18:bc:6d:b3:14:b8:94:7d:
64:c5:a4:d7:a1:dd:ec:c1:9f:0e:79:7a:f9:40:65:
d6:34:40:f7:9d:f8:64:4e:96:b5:32:54:8a:85:95:
8f:18:6e:40:22:20:f9:10:3e:e5:cc:a7:8b:cc:e1:
a0:8b:44:75:63:79:dc:45:dd:d0:bf:d8:e4:fd:e7:
06:93:9a:61:7e:0a:27:71:2b:65:33:b8:af:91:98:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:79:BD:38:32:4C:07:2B:4B:0A:0A:F5:67:C5:1D:72:43:59:7D
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:30:fe:fc:39:d5:be:45:3c:93:bb:34:1c:bc:8b:a9:bf:ed:
1a:79:94:83:97:5c:8e:83:d0:d5:27:74:27:c6:93:b7:85:36:
84:e5:72:c1:e1:89:a8:3d:b0:a2:75:12:d9:71:fb:1a:52:6a:
57:82:82:38:7b:65:b7:14:02:e6:9f:ef:60:59:c8:6a:91:11:
ba:30:fa:f9:ad:de:82:e1:1d:ca:f2:9d:b7:a0:f0:21:6a:05:
39:ca:6d:cc:88:92:f1:d2:f5:ca:a2:e4:1b:cb:e4:c1:80:26:
59:da:da:11:28:13:a7:6e:ce:1f:86:5e:a8:ef:05:d4:69:6f:
de:ff:70:19:25:85:7f:0f:a7:cb:22:c1:c1:0e:ed:ac:2d:da:
af:f3:20:47:39:39:04:24:b7:18:68:b7:36:a4:fc:c6:9f:36:
74:f1:64:8f:d3:a8:de:1f:d1:af:2c:13:88:1e:53:86:16:7d:
21:27:4d:e4:0d:fe:2f:68:90:35:c4:0f:be:99:e7:51:d1:9f:
d0:37:0c:fd:3e:ba:ac:3f:92:9c:99:48:65:1c:b5:ed:56:ce:
f3:72:c7:22:62:94:bb:00:16:90:d4:df:87:be:47:8f:16:21:
8b:1f:88:44:d3:a0:76:5f:93:b4:d2:4b:03:13:59:c2:d8:ac:
6b:a6:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:32 2026 by rpki-client