Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: cuAiVpFlFk4Y+VsVkp4YDbDifYsW+T8B+PPBYbDG1l4=
Subject key identifier: 16:0C:1A:66:35:D5:BD:36:7F:FE:00:80:8C:81:EA:1E:06:25:59:25
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01A15176CA48C838288A7720F49BF97CE9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 1AB4
Signing time: Mon 19 Oct 2026 00:01:41 +0000
Manifest this update: Mon 19 Oct 2026 00:01:41 +0000
Manifest next update: Tue 20 Oct 2026 00:01:41 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: WgXNAbobGO6ksXgyNEhZ4MLoaoOvqX8FM05ZzXSkigs=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:ca:48:c8:38:28:8a:77:20:f4:9b:f9:7c:e9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Oct 19 00:01:41 2026 GMT
Not After : Oct 20 00:01:41 2026 GMT
Subject: CN=160c1a6635d5bd367ffe00808c81ea1e06255925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:9d:64:e2:87:52:a5:f9:13:5e:56:2a:d0:
8c:8b:2e:69:ed:d9:a4:70:f8:22:4d:6b:09:93:c1:
d7:b2:c5:14:99:06:5c:62:54:f5:65:45:07:6a:75:
56:0a:58:e0:fb:1b:52:a7:68:76:c2:e6:0f:46:1a:
30:6c:2e:27:e7:d0:7a:80:95:98:66:23:a5:70:d0:
2b:b6:67:42:90:81:88:be:25:93:ab:bd:26:8d:13:
8c:f5:03:41:e6:26:80:92:b8:c1:2c:8c:f3:74:e7:
91:fa:fe:4e:24:da:0d:7d:b9:da:5f:70:9d:5a:61:
83:44:86:02:d5:a2:86:a7:bf:ea:50:58:77:0a:9a:
90:13:f4:c0:f6:de:68:2d:d7:dc:16:d4:33:a6:39:
db:09:c6:0c:2e:1e:c9:85:05:df:d8:b5:d0:dd:ef:
c3:a3:80:f9:34:bf:e5:bd:9c:e0:6e:3b:51:bf:03:
93:89:ce:72:e3:fe:ad:6c:bf:f3:35:eb:54:05:34:
b1:15:5c:9d:56:74:ef:43:bb:be:fd:63:15:dd:09:
d3:25:85:b6:a7:43:9f:c0:42:9b:0e:aa:c1:98:a1:
f6:a8:78:06:96:ff:be:2a:df:46:06:12:83:77:34:
bd:3f:cd:8a:30:64:7b:44:3a:28:9a:85:5e:e5:83:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:1A:66:35:D5:BD:36:7F:FE:00:80:8C:81:EA:1E:06:25:59:25
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:e2:7d:6c:4d:a1:58:38:29:3d:5e:d6:5d:85:8d:58:19:
ea:8e:c7:c8:5f:7a:7c:e3:ba:00:53:f1:52:20:e5:18:db:dd:
01:db:5e:a3:6d:6a:96:2b:fc:64:64:3f:38:30:d0:ef:12:11:
99:f3:a7:5e:9f:c9:9f:5c:93:1e:23:97:c5:ca:99:d5:97:7a:
a3:85:e7:c3:bf:61:73:d3:b8:59:95:b2:f4:be:b3:72:fa:de:
b8:78:6e:e3:c3:d2:ec:46:8c:78:24:d3:80:7e:e9:3c:e1:96:
59:66:53:44:50:53:80:6f:12:b8:22:f8:79:af:d8:ea:c2:91:
87:82:97:b8:85:0a:ed:69:21:6b:38:ed:36:92:15:0d:c3:87:
85:26:ac:6f:3f:07:6c:ea:03:0f:d7:2c:d8:21:18:b1:3c:cf:
cd:68:1c:c8:0d:cc:7d:eb:bb:ff:f9:40:ed:ed:33:fd:cf:d2:
02:69:46:d7:66:ae:ad:77:f9:50:60:17:da:7d:f9:f5:2e:1d:
5c:c5:0a:e2:e8:ba:36:9a:59:34:5d:c8:84:69:f1:78:a5:4f:
69:16:07:1a:12:5e:97:d0:8e:15:f8:3a:ae:a1:7f:05:d1:96:
1d:26:52:12:90:77:1c:39:13:e5:89:2d:18:69:3f:87:54:2c:
db:5e:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:55:47 2026 by rpki-client