Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: bsZxjaxTzAaqBv/LzvjWLzwv/Vlpx/OsxHunK3tpYI8=
Subject key identifier: 6B:E7:E3:39:6A:5B:1D:32:6B:70:3B:F2:BE:F5:D2:D3:46:C3:31:D2
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019D38D2E1082379BDBE6A1E58F0AAD55E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 17AD
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: M2fqa2GQcp5z5xAi6I38LzeZ1FfZvpcVswlhqQig0EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:08:23:79:bd:be:6a:1e:58:f0:aa:d5:5e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=6be7e3396a5b1d326b703bf2bef5d2d346c331d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:7c:a2:da:0a:90:7d:fa:fe:a2:12:14:47:
ed:40:80:18:7d:4f:8a:90:3a:9f:68:7c:48:58:b2:
51:1c:47:8e:5c:34:15:89:4e:a9:01:f3:39:96:1e:
44:a3:3a:48:17:cf:92:e7:78:1c:26:7a:ad:3d:7c:
7b:f3:86:cb:46:7a:28:3f:4e:73:6b:38:c1:2f:2a:
c7:4e:49:15:0c:ab:db:82:f5:99:d4:ab:9d:84:81:
76:c1:06:87:40:e1:c5:64:06:de:8c:85:66:9a:00:
df:71:cc:5d:e5:6d:62:da:ac:1b:55:7a:aa:04:26:
96:03:11:d3:ae:42:f3:22:1b:82:5b:c8:66:71:31:
ff:10:1e:cc:9d:ff:c9:07:6c:94:48:a7:36:b9:f1:
79:bf:5a:b8:8f:10:7d:d0:c3:0a:9b:ba:55:3d:92:
bc:83:ba:76:ab:26:ac:03:1c:9a:80:29:68:96:3b:
bc:3b:79:5e:e2:e1:9a:e1:dc:cd:f9:ab:b7:91:ce:
fc:24:b5:0b:78:9a:78:0c:ec:9c:30:57:01:14:be:
0c:29:4d:2e:a6:4a:d9:ed:2a:65:76:a8:40:45:25:
3e:a9:27:4a:8a:71:20:6d:fd:71:8e:95:ae:dc:61:
50:5c:59:6a:62:37:72:62:28:a3:19:15:63:84:f4:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:E3:39:6A:5B:1D:32:6B:70:3B:F2:BE:F5:D2:D3:46:C3:31:D2
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:53:b9:d4:b2:4f:30:33:f5:0f:ef:2e:40:aa:29:14:43:b5:
db:f7:a1:6f:f6:38:f5:fb:28:c9:2f:37:2c:66:b7:d5:ee:0b:
84:bc:d7:8a:d5:08:84:bc:68:f8:e9:ac:cc:cc:7d:70:2b:ff:
ab:73:2b:31:fc:49:c5:2c:e2:de:2d:b8:62:43:d5:13:25:f2:
ad:5b:7e:61:07:11:4b:fa:06:d7:60:12:60:4a:bf:97:6b:6e:
b8:e7:81:c7:fd:20:90:06:ac:23:92:ce:78:87:91:2e:37:94:
98:b2:62:15:50:8d:2e:37:23:ce:42:a1:2f:3b:f3:33:57:ab:
55:38:c8:e4:2d:a6:ee:85:d4:d4:09:a2:c9:52:1d:e2:ca:39:
c0:bf:65:af:e0:85:1b:9a:07:c2:c7:03:3c:1e:90:71:70:45:
5b:ab:76:5f:39:0c:79:9a:e0:d2:ac:5a:fd:3c:3f:a7:0f:42:
8f:52:e0:db:3b:e3:f9:2e:4d:b4:73:6d:be:d4:b1:01:3d:be:
0a:0e:a6:50:3e:ec:dd:3b:6a:88:c3:56:2d:38:05:1c:18:f6:
ba:c3:89:85:73:01:ff:7d:2a:62:ef:bc:6a:1f:8b:1e:14:84:
68:c6:6e:f5:0e:5e:76:d6:7d:eb:69:da:af:8b:7e:66:d5:49:
a8:a5:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:27 2026 by rpki-client