Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: ecgyKu0tyVc6hLuHruFIAXM530zZECfbP7MglKZ4tAo=
Subject key identifier: 04:34:78:B5:36:7E:82:AC:8D:69:2D:CA:9A:E9:37:69:1B:30:5D:D1
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019D38D324C8EF3B5BA81B8A4029FE8F45B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: cnujIYeujthpeF4vc16z//8a+oFeao1TisPgFzOcoGU=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:24:c8:ef:3b:5b:a8:1b:8a:40:29:fe:8f:45:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=043478b5367e82ac8d692dca9ae937691b305dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:ff:9e:08:69:e3:44:e0:c6:f1:8c:b6:3e:
f0:11:f1:80:37:c8:95:d4:2e:38:f2:cd:03:7f:d8:
9a:8c:c2:b5:3b:49:f6:24:38:53:02:b9:4e:03:4e:
60:5d:82:9e:65:27:c2:f8:19:19:67:b8:95:86:be:
04:92:81:eb:a8:ff:8c:c2:b8:62:d9:a2:c1:12:c3:
8d:d7:52:b5:b0:31:cb:b2:2f:b8:dd:63:e8:7f:f3:
72:fc:aa:5f:e5:94:f2:04:02:14:5c:ad:f5:08:ba:
25:72:58:e2:b3:82:aa:76:64:65:ca:9e:a1:10:90:
7c:14:db:7c:68:69:ff:9f:b0:30:c4:d4:9f:05:a7:
1b:2c:e0:22:7f:da:82:8a:95:af:9e:12:e8:1f:09:
00:18:ee:21:3e:83:d5:68:ed:f3:d8:63:88:19:4d:
81:45:14:80:1d:a3:bf:f1:ce:f9:35:c8:6e:86:f8:
f1:c7:7e:65:ce:2a:ee:51:25:4a:c5:45:a9:a4:9e:
a1:ad:de:ce:54:b2:9c:14:d5:e5:e7:bc:64:0c:d9:
80:4a:ec:0b:8c:cc:2f:d6:f8:e4:39:4d:ce:a1:d0:
62:29:5e:02:69:24:8b:3e:16:f3:c7:ef:c2:56:7c:
19:f6:c6:28:bf:9f:d0:a6:96:0e:99:1f:87:84:2f:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:78:B5:36:7E:82:AC:8D:69:2D:CA:9A:E9:37:69:1B:30:5D:D1
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:35:3b:cb:85:a5:3c:8a:c7:bd:95:31:a9:d5:b4:57:3d:1f:
92:41:85:18:93:9d:72:18:60:a9:78:3d:27:8e:3e:6c:23:33:
0b:e5:b3:34:e5:4b:c8:8e:0d:ed:b0:c0:22:29:56:30:1a:2b:
40:22:9f:01:38:72:4e:43:48:3b:d8:7c:25:cc:eb:de:15:0a:
a4:48:b7:ce:34:6a:8d:48:c8:75:a1:4f:aa:68:5a:0a:38:c3:
26:9b:60:07:11:87:30:01:d7:ca:cf:b9:42:55:a0:28:25:12:
a0:84:5a:87:55:e9:d6:c8:b4:7a:44:ca:7e:36:ad:d7:b4:7c:
b5:e7:e4:39:31:d0:9e:a6:c0:74:97:2c:2a:35:75:f3:7a:69:
e6:ca:9a:43:07:ce:02:e0:46:88:9f:a7:06:5e:06:cf:20:f5:
11:2d:31:e4:1a:cc:65:36:cd:b6:45:47:d6:d8:ab:17:4e:c8:
f7:05:d3:f9:f9:4b:ea:58:e1:53:a2:fc:2a:d9:8d:77:5c:ee:
72:b6:73:27:24:2d:63:01:d7:b4:12:00:8a:fa:13:7c:ab:95:
fa:75:88:51:d6:1b:44:5d:6a:c0:2e:9f:09:46:51:31:2b:99:
6d:0e:7d:14:90:6c:cc:ea:32:17:c0:d8:93:0d:83:97:52:0a:
68:4d:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client