Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: JF59AJXkriaySNUz6HmbO5T5ZzF/cAtEP4kTF4SmbT4=
Subject key identifier: FB:AB:2F:43:43:1F:FF:31:E0:7B:13:22:25:DA:89:47:DB:5E:78:F1
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019D390A303ACDDC6515BBD2902702EA0C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 1144
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: IB9SPKJf1hxrd2KSGuACyZN7uFc.roa (hash: NYU4ucu/KEWsCULDRDB8CckdRivWVvULbQ16Mgwuhpk=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: ESMxoH4eaN5PCqLazgOXEpbNVEnr6R/lOPxoB/BDQ2U=)
3: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (hash: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:30:3a:cd:dc:65:15:bb:d2:90:27:02:ea:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=fbab2f43431fff31e07b132225da8947db5e78f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:a1:ef:19:46:6f:ce:59:bb:8c:49:f5:f8:
35:21:21:70:32:42:7f:6f:6d:10:7e:6d:10:96:2a:
8f:07:02:a5:5a:3d:57:00:e9:c4:e2:53:87:d8:cc:
68:59:4b:8d:1b:30:f1:36:64:0b:d2:b4:05:21:79:
23:15:50:0b:f3:66:a3:be:80:d2:28:3e:59:02:ca:
f2:78:ff:f7:32:0d:ba:13:c1:c3:fb:f6:ae:51:8f:
85:a1:f5:de:e2:78:5c:da:17:cc:6c:f2:6b:95:a6:
b6:eb:7a:58:37:d9:54:ae:d1:9b:3a:f6:f0:c6:03:
b0:7d:88:67:69:e5:87:a0:41:88:9f:24:92:e9:39:
e0:48:42:07:d4:2d:40:72:74:0a:41:73:e7:89:26:
f3:64:3b:8b:5c:eb:64:0e:c8:16:15:7c:b5:1e:7f:
33:0f:39:cc:da:a3:fc:fd:b5:84:97:cf:f2:9e:ad:
d1:4e:60:d0:24:1a:67:d7:83:cc:94:18:c8:20:35:
13:cc:de:98:25:b4:87:07:1d:1c:5a:c8:90:ea:e9:
83:ca:b9:ec:72:6c:d2:d4:70:47:36:17:cc:0d:43:
03:cc:17:b6:a7:83:9f:2e:be:d7:d1:97:5a:9a:19:
21:d0:c1:ab:53:48:f7:24:4d:59:b3:06:51:e0:46:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:2F:43:43:1F:FF:31:E0:7B:13:22:25:DA:89:47:DB:5E:78:F1
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a0:9e:7f:5b:3d:56:77:92:de:c3:61:a1:68:6b:01:ba:40:
4d:62:43:5d:df:73:94:7c:32:5e:c4:7a:5a:4f:9b:42:85:e4:
40:7a:d4:2c:0d:62:95:ee:63:59:84:42:20:cc:7d:07:f0:14:
f5:d6:0f:3a:6a:8a:77:80:c0:25:55:ed:0c:36:0e:eb:34:15:
40:2e:c5:19:c1:fa:10:d4:d6:b2:e5:41:d1:0f:ad:14:83:a1:
b1:fd:a9:71:b8:dc:7d:13:3c:a9:f7:d0:24:ef:f6:5a:40:13:
89:32:2a:4f:63:85:3a:9d:6b:39:46:c9:61:e7:80:5a:db:59:
11:80:65:d0:55:57:50:18:b2:84:f1:e0:99:f9:46:4e:23:ff:
5c:73:a7:23:50:dc:6a:ee:f1:fd:b4:15:f0:67:38:92:c9:5e:
c7:1d:c1:e5:46:ba:8a:37:6b:03:32:e5:63:3c:f9:4a:65:d0:
55:05:07:44:b9:6a:e4:0b:d2:2f:f3:61:cb:e6:a9:fe:49:a4:
ee:01:d8:8e:da:1d:c8:c7:3f:46:3f:5f:47:13:0f:35:c1:91:
1e:85:30:19:9c:62:4b:76:2e:3a:24:58:67:23:7f:e8:33:18:
75:bc:75:b3:b0:84:7e:96:ef:6e:c1:c6:02:48:fe:c4:73:00:
d0:9f:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:13 2026 by rpki-client