Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: AQhCvlGaLgUrtmNKYsrk2hs/PhrBnodNV4Cv1ttMdOM=
Subject key identifier: 3A:B0:8B:37:70:F4:0E:AC:09:FD:24:03:A6:92:DE:62:99:EA:03:1F
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019E498E0F2A6317948A9AC82387BAB34743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0E01
Signing time: Thu 21 May 2026 08:01:46 +0000
Manifest this update: Thu 21 May 2026 08:01:46 +0000
Manifest next update: Fri 22 May 2026 08:01:46 +0000
Files and hashes: 1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: +RrK1aMsuzH82ELXeJaY0ngK728s7AG023bOm4iEK+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:8e:0f:2a:63:17:94:8a:9a:c8:23:87:ba:b3:47:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: May 21 08:01:46 2026 GMT
Not After : May 22 08:01:46 2026 GMT
Subject: CN=3ab08b3770f40eac09fd2403a692de6299ea031f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:f4:d0:c3:f7:d2:41:63:a2:7b:0e:e3:8a:
64:bb:56:ca:00:38:f6:c3:b5:bd:b6:64:a1:03:2f:
0c:e2:69:06:60:8b:88:cb:df:8b:54:54:ff:4a:1c:
cc:e4:07:31:99:24:a3:4c:d9:fa:ed:da:45:f0:61:
57:b6:8a:ce:06:88:ad:10:8b:8b:01:f8:9a:6e:d9:
c6:21:59:5e:80:e6:00:8c:f3:ef:41:7d:01:13:87:
e1:e8:b0:60:9c:a9:cd:f6:f4:6a:4d:22:f7:3d:0a:
1e:b3:82:6b:0e:3f:40:61:04:e2:23:12:17:f2:4e:
cb:e2:76:99:13:04:d9:09:f1:65:7e:4d:c8:8b:55:
fd:33:70:76:7c:2a:41:c0:28:8e:2a:35:08:45:26:
26:0d:72:b2:c5:de:fc:9d:4d:a1:8b:81:1d:59:fd:
2e:9b:88:7c:af:e7:f6:e5:04:55:7a:7e:2f:1a:f9:
84:6d:a8:25:c0:45:6f:7a:1d:bb:9d:bc:94:2b:af:
bf:a8:6f:30:8d:d9:b9:e1:44:33:d7:cc:af:72:26:
dc:55:28:45:d4:38:e0:fe:3e:2e:1b:bc:b8:72:21:
65:32:b2:7d:33:34:d7:c0:97:1a:3e:b6:da:a2:6c:
ae:91:bb:5f:30:c3:09:14:25:34:1d:4a:9b:f6:74:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:8B:37:70:F4:0E:AC:09:FD:24:03:A6:92:DE:62:99:EA:03:1F
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7f:b7:b6:4f:24:ec:77:c4:85:7e:6c:c8:a7:86:93:79:37:
28:c4:52:09:1f:10:0e:66:3c:ad:47:d7:48:74:42:3a:68:73:
8e:ef:bd:2e:81:4f:61:40:0f:7d:16:87:07:df:a3:97:94:92:
2d:b4:ce:96:e3:5a:0c:a0:1a:e0:50:50:d0:a7:04:65:29:c1:
55:d8:74:72:75:70:de:d1:71:9c:32:f9:a3:65:37:95:4b:0b:
91:ef:4a:d9:05:9e:b9:3e:e9:a7:d8:5b:ad:7c:de:50:c3:1f:
90:0d:6b:36:9d:9a:e0:ad:52:70:eb:ce:57:1d:3c:b8:9c:5b:
79:b9:09:18:12:a2:30:d8:20:8d:8a:3c:3b:f9:ab:36:8f:68:
a6:d8:9e:23:a4:8d:50:f0:47:5f:49:fa:22:4e:b2:a2:45:49:
96:bb:50:dd:73:6d:b6:d1:27:15:2d:1c:7c:bc:6b:58:30:ae:
a6:ac:44:5f:3a:aa:fa:35:9d:8b:1d:92:e0:7c:73:8a:d6:35:
ca:4c:04:23:18:39:14:81:7d:d4:7a:ac:c2:4b:15:17:27:f4:
71:26:a6:40:b4:a1:5c:e5:0b:16:43:14:07:16:d3:1d:eb:36:
64:52:28:b9:71:a5:d9:c9:90:38:6a:a6:eb:e9:fc:f9:1f:11:
49:0f:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:21:09 2026 by rpki-client