Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: RElSFXoZtfrh75/9HxBxI5th03WZeneN6p4nch8u3lE=
Subject key identifier: 4E:41:9E:20:C5:E7:0C:EB:B5:07:9D:01:CC:A9:3F:70:0E:59:4E:A5
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019EB62055AE5DFA8697C636816F45F61C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 03AC
Signing time: Thu 11 Jun 2026 10:00:32 +0000
Manifest this update: Thu 11 Jun 2026 10:00:32 +0000
Manifest next update: Fri 12 Jun 2026 10:00:32 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: JvHJNhZj0fDjEyxIFjbg9cjm93uLy/o2yFmdmzgJItg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:55:ae:5d:fa:86:97:c6:36:81:6f:45:f6:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Jun 11 10:00:32 2026 GMT
Not After : Jun 12 10:00:32 2026 GMT
Subject: CN=4e419e20c5e70cebb5079d01cca93f700e594ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:b2:11:e4:a9:03:2c:0e:ee:5d:85:23:af:
2d:23:ee:d4:cf:fc:b1:96:f3:b6:54:23:4f:8d:56:
7a:f2:e5:b5:ae:47:41:08:6f:10:65:00:c0:90:0d:
31:20:ea:d5:01:5f:db:7e:fa:f5:66:b9:40:88:a2:
f4:9e:da:6b:19:dd:ae:1b:52:2a:69:fc:de:fb:6c:
38:6d:b2:2b:34:c6:a2:02:f7:10:95:d8:98:c4:65:
6d:73:af:74:db:18:5f:3e:e2:af:2e:ae:3a:72:88:
a6:4a:59:f7:3e:d1:1c:6a:79:cc:b5:1e:73:97:71:
ad:dd:66:a6:de:38:47:86:a7:c5:f9:ca:b6:e2:ed:
af:aa:76:0c:2d:56:30:d0:fb:04:51:82:f0:a8:4b:
5e:7c:e5:03:4f:a7:95:bf:81:50:34:fb:d9:b8:76:
88:92:55:2e:aa:47:99:55:f5:ee:d0:da:da:92:21:
e2:dc:24:b9:6b:fd:f8:f4:80:39:f5:c7:c3:88:c0:
93:ab:4b:8b:6f:ff:e1:07:61:df:64:36:54:1f:bf:
5d:72:41:e9:83:12:1f:ed:44:b5:73:d8:68:06:82:
a7:f9:00:8f:c9:49:a7:0e:a8:13:cd:d5:5a:0e:81:
9b:9a:05:b5:61:22:52:3c:cb:bb:1b:ce:7e:52:3d:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:41:9E:20:C5:E7:0C:EB:B5:07:9D:01:CC:A9:3F:70:0E:59:4E:A5
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:70:d7:ae:00:45:38:d0:e7:99:57:3e:c1:98:46:86:44:d9:
51:40:c5:34:f6:ef:6d:c4:81:db:17:28:b0:f4:a2:c6:30:97:
e6:b6:e2:82:47:8e:58:29:2e:5f:a5:41:7e:07:71:4c:21:0a:
6d:4f:27:83:3d:4e:34:c1:ef:32:e1:c3:8a:82:21:55:c7:6b:
14:98:8b:95:57:35:e3:c2:00:42:70:f6:dd:96:1b:1b:7e:9c:
55:fa:dc:05:af:7c:2c:ed:33:82:0a:6e:70:5d:1d:3f:d2:8f:
60:0b:76:c0:b2:6c:fc:ae:ef:a7:b3:b3:a6:ae:ca:b2:d6:7d:
9b:e8:b1:7b:a4:26:cb:a3:a5:33:a4:d4:2c:ce:3b:cc:11:d5:
58:3b:27:b5:49:bf:88:00:33:2d:7f:71:86:c7:44:ff:e4:da:
72:99:0e:b4:2e:db:52:4d:f9:be:ff:9c:60:4a:a8:62:2d:81:
af:bf:8c:8c:23:29:4f:77:42:c6:a2:e3:51:5e:51:a5:c5:ae:
64:05:5c:3c:9d:d4:c0:58:29:c0:df:6d:09:0e:5b:a0:db:f8:
45:45:e0:7c:69:c7:c8:9e:72:4a:99:3c:ae:67:5b:78:41:6e:
b6:c2:da:84:1e:8e:c6:d2:67:b4:90:0f:a6:95:05:5d:3d:b6:
0b:93:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:53:20 2026 by rpki-client