Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: tMA7mvxuYj7Fy3sbkYcIb1XRKOO/wHC1m30KKERcGe4=
Subject key identifier: 52:AE:7C:87:C2:FA:BE:CC:D0:F0:D2:19:D6:8A:EC:97:96:F8:8A:4E
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 01A11F08F2EB6904B0805E05B8CD18EE47EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0F7A
Signing time: Fri 09 Oct 2026 05:00:42 +0000
Manifest this update: Fri 09 Oct 2026 05:00:42 +0000
Manifest next update: Sat 10 Oct 2026 05:00:42 +0000
Files and hashes: 1: 84BaEWLXK5pw_D2DqToKDMgWvVs.roa (hash: dXG357CuERL8U7sDCJftC3+XuIBlqAv2DDIdJ4Pdya8=)
2: lJQRlzBiSGl76D8ikxPAg08Ak8M.roa (hash: dV3fyE/KZeuQowu2MHQZCBNvC5TozfTLwnFBVZttKjs=)
3: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: 1/H8Igj8+MedZMqTNaLnlHHxuPZQsCyUlbIbhz97PBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:08:f2:eb:69:04:b0:80:5e:05:b8:cd:18:ee:47:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Oct 9 05:00:42 2026 GMT
Not After : Oct 10 05:00:42 2026 GMT
Subject: CN=52ae7c87c2fabeccd0f0d219d68aec9796f88a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:e7:6d:98:df:5b:de:f7:e8:f9:b1:9e:70:
aa:8a:26:40:25:24:1c:4b:1c:39:88:9c:b0:c4:b4:
50:ef:7f:cd:a7:ec:3e:ae:01:9c:37:53:96:49:ec:
aa:d7:0c:61:53:4c:9f:d1:61:b3:01:47:48:bc:58:
2e:d6:7d:98:ae:8c:a1:3c:23:24:44:d6:c9:b7:d2:
f2:e4:33:02:7a:14:07:dd:41:2a:62:a5:71:39:96:
3d:f2:52:df:ee:60:37:b2:74:df:25:20:ed:c0:3c:
c1:31:0d:4b:52:67:fa:e2:b2:46:80:84:2b:27:65:
8c:5c:d3:93:f2:61:ee:94:61:cc:b8:73:15:a6:9f:
fc:88:49:3c:46:f0:3a:e5:d8:23:9a:d8:e7:3b:e2:
6e:f6:54:48:52:ce:11:1f:ea:13:ba:86:82:59:8c:
e1:a4:59:27:81:4c:23:4f:ac:07:a0:6a:54:2b:8d:
c6:48:79:22:70:aa:8b:f8:f6:e0:37:9f:0e:63:4e:
67:91:2b:b5:80:b6:e4:c4:66:ba:56:ca:ea:81:4b:
fc:6e:1d:d2:63:69:91:a7:0a:32:29:ce:15:ae:61:
75:a1:73:f0:6c:d6:14:a7:9b:93:fa:55:5a:8e:0a:
a6:ae:ba:39:95:cd:e8:24:80:06:98:9c:7d:3d:30:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:7C:87:C2:FA:BE:CC:D0:F0:D2:19:D6:8A:EC:97:96:F8:8A:4E
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:53:0f:22:60:2e:c8:16:b1:d9:fd:20:0c:5b:67:93:5d:28:
b0:e9:82:2d:78:99:27:f8:86:72:0b:9e:ab:1b:0b:37:66:c5:
da:b7:f8:c8:b1:d0:5d:d1:11:5e:46:a5:35:b6:9b:b8:51:ef:
5d:8a:94:c2:9c:71:2d:28:79:d5:73:db:53:6d:55:89:18:c0:
44:cd:fd:94:c7:2a:64:1d:69:29:2b:8f:d4:28:3e:22:da:05:
1f:74:36:0b:49:a0:16:72:c4:18:25:5e:89:6e:c6:3e:2b:40:
81:0f:5c:fd:db:77:89:cc:d8:d2:1f:18:fa:77:d7:fd:9a:11:
8a:9c:d8:9d:14:cf:61:90:50:db:00:3d:2c:e2:48:1e:7d:1a:
16:89:21:4a:7c:53:5c:22:8f:82:d2:2f:7a:2c:61:32:d3:29:
14:c2:b2:08:42:1f:56:69:33:8b:d6:d7:3f:ee:53:19:f1:c7:
65:c0:40:cc:1a:3a:13:13:ea:6c:6f:cf:63:48:b6:b1:5c:8e:
62:9a:51:ff:a5:3e:d5:4f:0a:6c:f4:ca:c3:3f:c1:49:36:e6:
a0:25:d7:04:18:50:f2:d6:22:19:37:87:8b:6a:fc:c5:79:72:
a9:72:3c:4a:1a:97:d3:2c:0d:3f:55:ce:e6:e9:34:e1:a4:ba:
bb:8d:11:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:53:07 2026 by rpki-client