Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: zDlvd7+unr/Cg3SM+ZVW28Bf6fTHu0wc4J7A8Da/7cU=
Subject key identifier: 7A:AA:F8:F9:24:2D:C9:29:08:50:5D:25:5C:BF:E7:5B:CB:76:53:E8
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 019D375272ED95DB4CDF1E6EDCAB5ABEDB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:43 +0000
Manifest this update: Sun 29 Mar 2026 02:00:43 +0000
Manifest next update: Mon 30 Mar 2026 02:00:43 +0000
Files and hashes: 1: KmK468VUGFPUo7JfDhMsvIpIqq0.roa (hash: cCrY/FIccEUQ7wqZOlDpct0+9wnpRcWkBHCPotLe8Cw=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: BwbrEArb1RFkNF3W0jO12ntPgMBD7NR2qvWqWIXd5o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:72:ed:95:db:4c:df:1e:6e:dc:ab:5a:be:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Mar 29 02:00:43 2026 GMT
Not After : Mar 30 02:00:43 2026 GMT
Subject: CN=7aaaf8f9242dc92908505d255cbfe75bcb7653e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:4a:aa:74:62:85:ef:04:5b:8c:8b:29:00:
e8:99:03:f4:77:a5:7e:72:f2:2f:8b:a5:31:18:31:
75:c1:a4:b7:40:89:40:57:49:4c:13:c9:53:d0:e0:
36:d7:03:0c:f3:4c:fc:12:0d:51:08:04:5e:11:7c:
fa:ac:10:14:68:69:e6:e0:f4:8b:31:c0:e0:ff:2e:
ea:6e:3e:6c:b4:a4:4f:b6:c5:aa:d5:dc:81:bb:d9:
74:2c:ab:05:fa:62:9e:44:05:e1:ed:73:89:d8:2f:
25:3b:dc:3a:fb:32:2e:71:ea:4b:df:67:47:32:31:
70:86:e1:0a:80:76:db:91:11:3c:f7:16:65:ce:82:
9a:21:b8:d2:d0:d3:c2:4f:e3:49:8a:3d:86:87:f2:
9c:60:c9:19:4f:7d:0f:37:99:e8:46:8f:e6:16:b0:
61:d9:db:db:bc:c0:6c:43:44:e0:f4:13:be:b8:d2:
8f:21:0d:47:ca:24:16:1b:84:4c:0c:38:c7:72:4a:
ad:55:17:9d:bb:35:26:78:bc:f6:96:fb:f4:b9:73:
05:7a:68:e4:97:88:64:34:c1:c2:f2:a0:65:8c:53:
8d:71:b5:39:12:a8:9f:49:aa:ff:6f:ee:76:43:eb:
3b:3e:7c:e8:09:d1:f7:dd:f3:02:a1:8f:f9:08:61:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:F8:F9:24:2D:C9:29:08:50:5D:25:5C:BF:E7:5B:CB:76:53:E8
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:98:8e:ca:7e:85:5b:51:e6:ae:f8:84:64:a9:cc:1f:91:e4:
29:cd:a3:7b:f1:54:05:92:ef:b9:9b:e3:af:e2:7c:59:6a:f1:
23:6e:d3:3e:58:79:8d:4d:36:88:02:8f:af:36:90:13:3b:11:
f8:30:4b:9c:c1:8b:e4:f9:07:cb:10:c0:df:29:34:b8:d3:b8:
cd:ff:d1:d6:1c:f3:49:44:d5:db:d5:a2:b3:39:0d:db:54:36:
8d:9c:58:31:de:5e:1e:a3:4a:51:58:66:48:6c:90:23:8b:4c:
08:59:1c:32:28:77:e6:3c:22:1c:5b:8c:f4:53:8e:e5:29:d5:
03:1e:f3:68:d3:c3:69:41:47:85:63:1b:be:a1:e2:13:86:e5:
f3:85:cf:cd:8e:5b:14:3b:57:b3:54:c4:d0:a5:58:05:d7:b7:
3f:6e:5f:10:61:d2:5e:3e:47:64:6c:68:b1:70:3c:db:a8:9e:
63:b2:b0:cb:ac:52:ac:ca:2c:3a:6e:f6:ef:be:ef:7e:88:58:
c8:39:ba:f0:b4:1c:91:a1:d3:85:7d:b5:99:87:ac:0c:31:5d:
a6:30:0f:28:8b:c7:87:69:5d:41:86:db:3a:06:9d:8e:95:0e:
3b:bf:eb:58:ea:eb:64:1a:e5:35:bf:de:11:f1:72:84:20:1b:
28:3d:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:27 2026 by rpki-client