Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: pxa2UqgjadVxFXDOdFeonBs+oRxvZvnnmbjv0dG9sWU=
Subject key identifier: 40:EB:AB:0D:A4:EE:A2:DE:EF:14:A9:7A:DD:F7:B2:97:CC:67:3B:E9
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 01A178F18848C1FFA3D30F31A25BCD1DCFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 051A
Signing time: Mon 26 Oct 2026 16:00:57 +0000
Manifest this update: Mon 26 Oct 2026 16:00:57 +0000
Manifest next update: Tue 27 Oct 2026 16:00:57 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: jvpLoT/u5+QjryvxtBmJGL/4RZqJzCkEY29N9A4GDYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:88:48:c1:ff:a3:d3:0f:31:a2:5b:cd:1d:cf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Oct 26 16:00:57 2026 GMT
Not After : Oct 27 16:00:57 2026 GMT
Subject: CN=40ebab0da4eea2deef14a97addf7b297cc673be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:85:3d:a4:bd:8c:69:56:61:bd:83:58:2f:bf:
ae:b5:14:d6:3c:d8:55:ad:b3:85:67:80:a2:78:69:
1c:78:59:4a:25:96:44:9b:32:1c:d3:80:0b:d1:ff:
bb:ba:fe:61:79:9f:0e:90:75:42:06:86:65:df:c3:
64:e0:7c:f5:34:42:06:36:32:05:ac:2e:14:ec:f0:
12:6e:15:a6:4a:99:19:50:c4:2d:ca:02:8a:ba:b2:
63:43:bc:31:d1:f0:f0:d3:bf:dc:ea:14:cb:54:67:
0b:a5:66:bf:ee:54:b8:1d:fe:99:b5:a2:d8:73:21:
3b:37:c1:75:a6:c5:f2:4f:fc:d2:d6:59:39:3c:37:
e9:5f:c4:86:ab:70:93:63:f3:54:7f:a8:f5:72:7e:
d2:55:59:27:52:b4:35:93:41:e1:e7:5b:65:68:ef:
84:5c:60:7d:34:1d:93:f8:c2:84:26:d5:af:e0:6f:
39:e5:7b:d0:c2:b3:c2:ee:e3:c3:80:01:3d:b8:c5:
51:c2:70:91:2d:81:7a:d5:c6:05:28:b3:22:cf:46:
c6:ec:c7:5a:14:b2:43:92:ae:7a:3e:04:0d:07:7d:
08:b1:73:bc:61:b3:9b:25:c1:c3:77:55:27:ac:9a:
3f:d0:f4:74:5b:0e:a8:c3:ee:7b:f1:87:33:07:20:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:AB:0D:A4:EE:A2:DE:EF:14:A9:7A:DD:F7:B2:97:CC:67:3B:E9
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:bd:39:e2:2d:30:70:be:2e:4e:27:cb:7d:0f:a4:35:61:
28:5e:10:24:18:ab:00:a8:28:0f:4c:71:f7:f7:60:94:ee:7e:
b8:3c:71:55:69:1f:17:ac:2c:46:e6:03:45:69:a5:64:46:37:
e6:ca:18:fa:46:be:af:5b:8e:c7:61:80:b4:e1:3e:47:d9:b3:
9a:57:f7:ad:19:91:dd:83:1c:ac:db:dc:8e:50:10:b6:31:44:
da:c6:6e:eb:91:91:87:4c:3a:76:d3:a4:57:ef:cf:41:ba:81:
74:0f:8f:9f:1a:07:12:ca:d8:ab:c5:62:38:67:4b:20:8e:5c:
5d:68:0b:20:e5:78:b4:81:47:62:ab:bd:1d:9b:f2:bb:0c:54:
9d:c0:da:3e:70:73:97:47:94:1b:e1:0b:17:31:b9:ab:ab:a8:
35:11:60:3f:31:60:0e:a8:5f:85:ef:11:6c:28:f4:34:09:4d:
38:43:0f:46:f4:3b:e0:ef:74:93:1b:54:a5:ae:b4:5c:28:1e:
0c:95:1d:b9:6f:86:1a:5b:8c:45:b6:fe:62:de:af:6e:f1:80:
72:10:8e:eb:d8:13:6c:23:03:54:c5:85:85:df:31:0f:9a:51:
02:eb:54:14:6b:28:61:60:45:eb:da:31:94:5a:a4:23:68:4e:
be:77:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:06:33 2026 by rpki-client