Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: CZNePsqex4PfLrenthiFiJpXRNJfPN++aI9iqOoW6c0=
Subject key identifier: 0F:9C:AA:F4:48:00:BE:95:4A:3E:39:7D:AB:EC:EC:EF:68:20:9A:05
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019F1B9FAB733E73CBF62BEF99F4C69A9A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 198F
Signing time: Wed 01 Jul 2026 03:01:16 +0000
Manifest this update: Wed 01 Jul 2026 03:01:16 +0000
Manifest next update: Thu 02 Jul 2026 03:01:16 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: tXkeSVYN/oDHbA91J+A3jDOlCFzrluvrStzuwyPa5QU=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:9f:ab:73:3e:73:cb:f6:2b:ef:99:f4:c6:9a:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jul 1 03:01:16 2026 GMT
Not After : Jul 2 03:01:16 2026 GMT
Subject: CN=0f9caaf44800be954a3e397dabececef68209a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2d:82:9f:cb:b6:63:98:96:67:b1:46:c4:c5:
fe:4c:fc:cc:7a:e9:30:b6:aa:3f:6b:29:ba:50:26:
84:d3:0f:27:63:af:ef:13:4f:09:52:0f:6f:17:55:
e7:e1:43:57:48:1a:62:b3:ef:1f:8e:21:67:f3:2e:
db:c2:9e:22:df:9b:5a:87:49:9b:f0:d8:b0:12:10:
53:ce:b5:4c:43:40:94:06:18:d3:4b:f1:68:44:56:
fa:ef:6d:8a:1f:bd:8c:24:e8:f0:1a:20:85:95:a7:
0a:04:e9:63:40:2d:5b:bd:46:ef:57:e0:e8:ce:c6:
b1:cb:80:6a:7c:e3:9d:87:75:a5:cd:9e:c7:ce:15:
75:66:3f:6c:6e:aa:50:c9:26:f4:8e:cc:3a:65:7a:
50:da:e8:1f:64:1d:04:65:bf:23:07:3c:da:14:78:
5a:72:a3:18:2d:18:da:2d:d8:30:ef:bc:82:a1:02:
fa:ea:03:fa:8b:74:b2:a1:34:9d:53:1c:de:2c:34:
d6:8c:80:c5:74:ae:26:1a:b9:5b:a0:01:ee:e6:9b:
30:88:2d:b2:7e:4a:78:e4:e4:71:88:96:8c:7d:09:
15:a8:10:93:ce:30:b7:cc:bc:5d:ef:f7:d8:56:d2:
3e:7b:06:fc:72:5b:be:11:cf:05:24:ba:7b:ce:78:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:AA:F4:48:00:BE:95:4A:3E:39:7D:AB:EC:EC:EF:68:20:9A:05
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:86:0c:45:8d:ea:06:92:71:15:9b:97:87:28:22:22:7d:ef:
95:f0:dd:e1:f0:4f:09:43:54:bd:14:73:c0:ef:62:61:90:81:
2f:a2:d1:52:2c:af:89:89:93:b4:f6:2e:87:d3:52:2f:96:14:
cc:e2:70:cb:c4:35:bd:c4:3f:0c:b1:43:69:26:66:3e:1e:b4:
b6:72:7c:fe:75:dd:6f:73:b4:d0:2f:d5:ef:ef:b8:75:73:1d:
6c:8c:a8:43:40:93:dd:9c:04:96:dd:02:57:68:cc:86:0d:0f:
15:5a:4d:ff:5a:9d:9a:ec:27:59:e2:94:61:76:de:b8:8b:4d:
0d:fd:70:49:b2:a7:ba:2c:d8:cd:53:e4:12:a2:2a:31:d4:0d:
b6:f0:c5:aa:f8:79:98:b9:0e:e1:17:c9:c1:e9:33:66:6d:d4:
3a:2b:04:a5:88:85:9e:d1:80:83:78:67:3e:77:33:83:f0:9d:
2c:56:a3:20:44:ef:4e:12:b7:73:1f:48:10:79:c4:18:51:26:
81:a5:c8:d1:7e:92:8e:d2:11:76:ca:55:ef:2b:f2:c8:fe:e7:
39:eb:da:05:00:89:a9:23:cb:27:52:6a:51:42:12:d8:e7:f2:
98:17:93:70:52:f0:67:9f:ae:1d:1a:ec:e7:c6:e4:98:4e:ae:
95:22:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:47 2026 by rpki-client