Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: qwBJcZxuAQGKUelMOoAKZOWlAZyGR4noYYoohsnXHzk=
Subject key identifier: 61:25:26:BF:5E:CC:79:93:2D:EE:9B:80:FE:96:55:DC:84:2C:79:89
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 019D3940E7DA75DC0672931833005FDE0AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 1189
Signing time: Sun 29 Mar 2026 11:00:47 +0000
Manifest this update: Sun 29 Mar 2026 11:00:47 +0000
Manifest next update: Mon 30 Mar 2026 11:00:47 +0000
Files and hashes: 1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: ocNVE/72daOP65I/BGJ4JKn8dh8MCDEYh0Ee1bNKjO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e7:da:75:dc:06:72:93:18:33:00:5f:de:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Mar 29 11:00:47 2026 GMT
Not After : Mar 30 11:00:47 2026 GMT
Subject: CN=612526bf5ecc79932dee9b80fe9655dc842c7989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:41:79:b9:12:fc:41:ad:28:50:f0:66:8a:
11:c3:7f:0c:17:61:f1:22:e6:09:8f:b1:db:dc:d7:
3b:b6:d5:35:8d:25:d0:85:00:84:a4:b9:c1:65:29:
34:37:ba:fa:d6:c7:0d:72:7f:ca:96:84:ad:d7:7f:
46:ba:8f:e6:f8:8e:a1:38:26:f7:46:44:21:3a:14:
d5:42:0a:4f:76:d1:e0:d7:4e:1b:05:96:26:93:eb:
b1:92:f8:48:de:e2:a0:61:12:e0:dd:41:db:af:72:
c2:e0:e1:13:96:a3:b9:86:50:09:54:c6:5c:66:99:
c8:ea:41:12:04:28:74:57:58:22:39:53:7f:83:9a:
03:09:db:ce:84:90:cb:9c:83:0f:18:52:bc:1b:da:
3b:75:a6:e1:4d:3c:9c:91:f9:aa:69:27:c7:00:a1:
85:8d:00:b1:4b:c4:d7:29:65:ad:ba:59:80:8b:90:
7c:95:98:d0:17:6a:fa:ef:40:5c:68:2c:33:37:f9:
b5:6d:eb:bd:4e:14:1a:1d:a2:38:98:00:43:af:72:
9e:d8:11:c8:e7:8c:0c:25:f6:81:e9:f0:8d:de:a8:
6e:d3:18:d2:ac:e7:ee:9e:1f:b8:bf:b9:9a:c7:7c:
92:46:4e:64:ac:a2:f2:7e:d3:a7:04:d1:b2:3a:a1:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:26:BF:5E:CC:79:93:2D:EE:9B:80:FE:96:55:DC:84:2C:79:89
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:73:46:d3:36:b3:f3:94:5f:9b:69:63:86:73:ea:6a:f2:03:
2c:35:21:79:f8:80:11:c6:e5:90:48:ff:23:02:01:99:54:79:
6f:33:90:0a:4c:18:68:a8:7a:de:e7:03:f8:fc:a4:e1:ec:18:
ba:5f:d2:71:a3:8a:fa:89:f6:ee:22:4e:f4:79:b9:08:00:aa:
f7:1b:9b:d2:20:47:d5:06:3b:98:48:42:cb:7e:a3:83:73:5c:
49:92:df:76:b8:04:7d:a4:cd:1f:31:49:05:8c:0d:38:77:37:
c9:df:8e:66:51:02:4a:2a:63:bf:ba:07:ff:02:65:4e:0b:fa:
71:b9:3e:7c:ac:c6:c4:ed:b8:2e:34:a4:12:9e:e5:ec:5a:cc:
75:ab:3e:36:e5:93:58:44:9c:e0:d8:c6:fc:5a:a2:3a:61:1b:
67:58:40:4b:b8:92:1d:21:ca:62:66:46:84:89:7a:a5:14:b2:
27:3c:f1:18:97:c4:35:96:d3:1e:77:61:dc:40:ec:b0:cf:4e:
c3:0c:8a:45:c2:dd:72:b9:4e:4d:e6:0d:be:61:d3:11:f3:3e:
d4:8a:24:f7:42:9d:7a:5c:66:e5:62:87:48:d8:de:22:cc:ba:
58:c4:9c:43:b4:9a:7f:a5:9e:09:99:f2:68:6d:d8:22:56:a6:
9b:be:a0:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOfaddwGcpMYMwBf3grlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YTQ2OTNiMWRjY2M0OWVlNjYwNWE3ZDMzOWUxZDg0N2Vm
MGFkOGIwHhcNMjYwMzI5MTEwMDQ3WhcNMjYwMzMwMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg2MTI1MjZiZjVlY2M3OTkzMmRlZTliODBmZTk2NTVkYzg0MmM3OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/BBebkS/EGtKFDwZooRw38MF2Hx
IuYJj7Hb3Nc7ttU1jSXQhQCEpLnBZSk0N7r61scNcn/KloSt139Guo/m+I6hOCb3
RkQhOhTVQgpPdtHg104bBZYmk+uxkvhI3uKgYRLg3UHbr3LC4OETlqO5hlAJVMZc
ZpnI6kESBCh0V1giOVN/g5oDCdvOhJDLnIMPGFK8G9o7dabhTTyckfmqaSfHAKGF
jQCxS8TXKWWtulmAi5B8lZjQF2r670BcaCwzN/m1beu9ThQaHaI4mABDr3Ke2BHI
54wMJfaB6fCN3qhu0xjSrOfunh+4v7max3ySRk5krKLyftOnBNGyOqG8owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGElJr9ezHmTLe6bgP6WVdyELHmJMB8GA1UdIwQY
MBaAFEikaTsdzMSe5mBafTOeHYR+8K2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4Yjct
YmUzYmI2Y2QyZDUxLzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85ODVlZmEtOGJlZS00ZjczLTg4YjctYmUzYmI2Y2QyZDUx
LzEvU0tScE94M014SjdtWUZwOU01NGRoSDd3cllzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHNG0zaz
85Rfm2ljhnPqavIDLDUhefiAEcblkEj/IwIBmVR5bzOQCkwYaKh63ucD+Pyk4ewY
ul/ScaOK+on27iJO9Hm5CACq9xub0iBH1QY7mEhCy36jg3NcSZLfdrgEfaTNHzFJ
BYwNOHc3yd+OZlECSipjv7oH/wJlTgv6cbk+fKzGxO24LjSkEp7l7FrMdas+NuWT
WESc4NjG/FqiOmEbZ1hAS7iSHSHKYmZGhIl6pRSyJzzxGJfENZbTHndh3EDssM9O
wwyKRcLdcrlOTeYNvmHTEfM+1Iok90Kdelxm5WKHSNjeIsy6WMScQ7Saf6WeCZny
aG3YIlamm76gHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:47 2026 by rpki-client