Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: JjCupJDT161KBE2/msihUCMEayG0tegmBftfkQ0IQZY=
Subject key identifier: A6:C2:35:EA:75:8C:44:39:A4:60:D3:D8:B1:71:33:16:34:46:B9:82
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019D37C118FF4FB9B2DF377D88E3D3FA1039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 02E6
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: 5xbc7DZsCoMi5Fu7WoIKuoFQ2rRjJmM0/UG+azecgFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:18:ff:4f:b9:b2:df:37:7d:88:e3:d3:fa:10:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=a6c235ea758c4439a460d3d8b17133163446b982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:32:5b:bc:8a:bd:bd:27:90:a7:df:a1:54:
ef:85:06:50:3e:89:bb:46:0c:5d:8b:00:15:03:3e:
2e:06:43:04:8c:e5:cd:56:5c:3f:5e:0c:6f:a3:39:
87:24:80:2e:4e:9d:4e:87:55:7d:0f:67:1d:5f:9f:
e0:43:62:b2:65:01:56:86:f2:1c:b1:34:98:e0:84:
d1:a3:51:1c:9f:cb:9a:c6:0b:1c:22:c3:1f:30:28:
2c:72:02:0f:42:e0:eb:12:2a:f4:1f:71:c3:39:0d:
5c:62:c5:c2:01:d6:1c:ff:22:bc:a7:35:60:70:35:
3f:27:c2:22:a6:1d:57:b1:b5:fd:32:62:e9:da:ae:
90:61:1a:18:72:5f:4b:ff:50:ef:06:5e:a6:95:c0:
4c:58:69:50:c6:9c:5a:2d:4a:f4:8f:db:39:ed:3e:
0d:ad:a7:c4:ec:34:10:30:8a:69:ce:93:a3:83:d3:
5d:bc:1e:5f:9b:36:39:91:ab:a3:df:ad:b3:ad:6a:
92:b6:d7:b3:4a:3c:ad:d3:f9:d9:22:ef:4a:5b:d5:
7e:b5:ca:f7:cc:4c:a5:94:6a:6a:81:6b:6f:0d:55:
05:0f:6f:82:be:ef:da:8c:90:fa:ef:51:17:3f:cd:
e6:17:90:82:54:98:a8:4b:3f:75:24:40:57:af:3f:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C2:35:EA:75:8C:44:39:A4:60:D3:D8:B1:71:33:16:34:46:B9:82
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5f:ff:a0:bb:6d:b3:19:0d:e3:ba:87:3d:cf:5a:3d:43:cd:
ad:16:b0:cf:e9:c6:2e:28:78:df:1a:62:a2:be:ae:9e:27:49:
c5:20:64:13:f9:d3:a9:0e:88:d6:4c:f8:86:b8:7b:30:ad:83:
d9:96:c7:a1:69:18:8e:33:66:2c:52:13:b2:c9:86:a1:31:34:
51:c0:e9:b0:25:52:4b:2b:96:0a:06:54:24:0c:7f:11:5f:e4:
04:d5:2d:ae:37:63:be:c3:30:9e:98:71:12:81:14:9a:70:fe:
61:86:d7:e8:ce:8e:79:54:14:d1:2f:bd:2f:29:bb:50:bd:66:
58:f5:e3:03:5b:5e:1b:42:49:ab:2c:ec:87:e4:cb:da:81:71:
c0:63:9a:24:97:b6:61:04:38:31:4b:0a:c6:b1:59:6c:9b:d9:
58:b7:9a:ef:17:c3:99:06:af:95:4e:f7:bb:48:99:0b:6e:0c:
18:2f:2e:13:97:d6:51:48:5c:b6:14:ce:aa:43:ba:ad:12:7c:
09:ee:49:78:94:b1:77:13:fa:eb:16:ea:93:4d:c9:30:64:98:
90:2b:b6:03:d4:5f:fd:94:e4:8a:0a:0f:20:c1:db:0d:3a:39:
a4:2c:c2:50:20:83:21:04:f3:b1:63:ee:dc:14:12:8a:f5:ba:
c0:51:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:47 2026 by rpki-client