Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: 9kEra4lxNgljXijEdBJhaWT6i/vt3FXdQCy6X4DwPwk=
Subject key identifier: 49:71:AF:02:C7:67:BC:9D:BC:5F:82:49:13:F7:D9:E7:C9:89:4F:65
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019D3941365E743FDC56B2C71BF0272688D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0D74
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: 3bGt8YQjSwHCG0tgwwmhKgLO/EkpghUP/NtrYGkBQio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:36:5e:74:3f:dc:56:b2:c7:1b:f0:27:26:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=4971af02c767bc9dbc5f824913f7d9e7c9894f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:68:c8:e0:e9:44:63:2c:15:a6:ae:8f:d3:
1b:23:b8:39:8e:39:21:04:d4:81:17:00:94:e8:3a:
f4:37:49:3d:cf:1b:f8:f6:96:03:1f:a6:ff:c8:45:
1d:96:5e:91:56:2c:43:bf:62:77:88:2b:4b:dc:ad:
23:3f:5b:de:d4:a3:9b:38:b4:0c:25:0e:43:99:cf:
fe:07:48:86:01:34:0c:4b:90:c7:68:11:5c:4a:dc:
97:a6:4c:69:ba:74:1b:06:3b:0b:51:39:53:3a:92:
ef:8f:78:75:4a:bc:a2:6b:52:60:df:c9:41:0c:e0:
38:ea:de:b1:a6:b6:04:27:57:a3:b1:e3:6e:d1:eb:
d7:f2:19:38:f6:e2:69:1b:7d:42:fb:68:c0:63:75:
57:92:00:89:fb:d0:e5:4a:2e:25:be:54:91:4b:53:
ed:4c:fe:23:dc:84:02:93:b6:3c:34:4a:d1:9c:5a:
6d:de:6c:0c:ac:17:cc:2e:ce:72:3f:56:7b:6b:f7:
06:19:64:bc:ca:ed:9b:44:e1:19:70:b2:d6:5e:c8:
aa:f2:36:73:7f:dd:c7:2a:8a:f0:b0:46:ac:1f:9a:
32:82:07:63:f6:3d:6b:ec:b0:03:c9:59:0f:4f:a5:
16:8a:4f:b2:93:d5:72:81:74:1f:36:59:eb:28:21:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:AF:02:C7:67:BC:9D:BC:5F:82:49:13:F7:D9:E7:C9:89:4F:65
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c5:11:ae:0f:bd:66:d6:12:11:eb:fd:71:c6:7a:f5:10:7a:
ab:6a:9c:53:6c:18:e1:9b:5c:f1:4d:b6:f9:4a:0d:66:a1:b6:
27:04:07:ac:75:08:ab:1f:36:56:87:f1:57:ed:cd:89:1d:f7:
cc:07:d5:2a:e5:f7:6b:7b:51:2b:21:af:07:e0:5d:04:bf:af:
a7:be:01:76:86:a1:0a:65:80:21:81:11:10:ed:40:06:d7:f3:
c9:f9:d8:2e:01:c3:b1:87:74:1c:10:a7:ef:09:cc:42:55:be:
94:6f:36:14:27:3e:c6:22:b1:fb:69:09:17:91:7b:67:af:62:
65:bf:3a:dc:69:17:f7:1a:cc:36:29:5c:f1:21:fb:ff:e1:40:
22:a9:1b:89:0a:bb:6d:5a:7a:f5:93:7b:0b:00:40:f7:6a:53:
99:4e:a7:0c:c3:e0:44:93:7e:99:e3:57:c0:5a:f0:65:b0:cb:
88:6c:4c:c8:07:24:33:0d:df:30:17:5a:d1:82:6d:e0:ce:6e:
76:af:f1:cd:17:ef:a4:fb:a0:81:fd:0e:a7:94:00:2e:d8:c0:
95:23:d9:88:49:b8:e3:4a:b5:c0:65:82:db:85:35:ef:47:b4:
be:59:d2:09:48:86:ec:be:cd:74:67:15:fd:d8:86:cb:73:20:
ff:59:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:40 2026 by rpki-client