Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: /9BMOrXSbQpg6/QtrfxPI1Z2Ojn8jJ7tyBCYfoZHbm0=
Subject key identifier: DD:3A:BC:30:9F:70:28:43:D7:8D:AC:8B:0B:D3:65:DB:C6:2D:1B:FC
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 01A18D5392DAF2EF8665D744DC0DC646737C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 19EB
Signing time: Fri 30 Oct 2026 15:00:26 +0000
Manifest this update: Fri 30 Oct 2026 15:00:26 +0000
Manifest next update: Sat 31 Oct 2026 15:00:26 +0000
Files and hashes: 1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: gQSh+/VuHRpbtBzrMWbaBIq9Xo7gEZpYFYQwqTz+LIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:92:da:f2:ef:86:65:d7:44:dc:0d:c6:46:73:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Oct 30 15:00:26 2026 GMT
Not After : Oct 31 15:00:26 2026 GMT
Subject: CN=dd3abc309f702843d78dac8b0bd365dbc62d1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:1e:32:2a:9f:e0:5e:22:ad:db:fa:19:c0:
c4:ae:f7:1e:b9:eb:2e:0a:ba:ce:be:ff:09:4a:a1:
cc:1f:53:af:8c:6f:b4:aa:59:af:59:0e:8e:f1:45:
c0:3d:1e:c4:c8:d2:c4:cd:a3:f8:56:38:d3:39:bf:
32:9c:97:98:44:f8:92:0c:05:f7:ba:a3:d4:5f:05:
d1:5f:81:04:83:0b:1c:c6:7a:77:69:1f:ab:23:c3:
ca:16:0d:7e:19:3d:f6:22:63:94:ae:7a:61:81:15:
4e:2a:5c:ca:35:4f:31:1f:c3:72:b1:85:4b:f6:92:
e7:65:2d:73:a0:ae:90:d2:d0:bf:e4:21:79:31:24:
81:45:d7:06:5c:8f:94:8f:11:16:b7:d6:2c:42:93:
ad:a7:fb:92:e5:8f:bc:d8:f2:21:19:8e:e0:e6:f9:
f3:75:5c:86:88:4a:58:15:0b:4d:69:14:51:e6:1a:
9c:31:0b:0e:05:68:32:89:16:92:95:da:ad:96:a0:
3f:b4:8f:d6:38:5f:3e:e7:99:d1:90:f1:68:94:a7:
09:37:63:64:9f:15:4d:18:85:ff:0e:4f:9c:37:ac:
ef:a3:9a:77:30:ea:de:5d:01:e0:5f:7b:14:3b:52:
44:9f:d2:36:10:f1:22:7f:e8:24:54:96:a0:fc:ef:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:BC:30:9F:70:28:43:D7:8D:AC:8B:0B:D3:65:DB:C6:2D:1B:FC
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:1c:90:ae:c4:01:0d:1b:d3:b2:af:d5:d0:d5:3f:5a:c7:
86:68:34:10:02:44:32:22:c7:99:0d:8d:66:e5:73:61:31:79:
07:d1:cb:2a:d9:37:ce:22:66:80:fa:8f:64:07:1c:a8:74:66:
b4:e1:f6:a8:6e:c0:6e:2f:69:ac:70:be:7d:2e:f8:c3:62:c1:
4a:57:95:68:b3:5c:d7:74:c9:15:90:c1:67:5f:eb:17:4f:e9:
50:b8:3b:b5:68:a7:d1:bb:4f:7b:fd:9a:13:39:be:8c:60:ff:
14:80:39:10:6a:20:a9:1c:16:ac:59:0b:5a:7d:19:bf:59:60:
19:dc:0f:26:57:73:bf:e7:12:94:86:99:17:09:2d:72:41:4a:
0a:b6:67:5e:a6:03:44:8a:9a:a2:0c:dc:e7:14:ab:f5:28:f1:
3d:af:77:19:a5:60:b2:57:a3:7d:11:b2:38:03:4a:ea:72:cd:
f0:94:88:8f:aa:7a:ea:d4:40:2d:2f:36:49:c9:8e:3b:5c:4d:
30:42:42:08:58:f3:1d:60:07:a7:c1:ef:a0:85:b6:d5:e9:2e:
76:33:43:76:02:e3:98:e6:d6:2f:88:01:cc:79:36:af:64:fd:
41:bf:fc:19:c2:d1:14:44:84:69:39:0a:a8:d8:d3:84:c3:00:
2f:cd:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:36 2026 by rpki-client