Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: SPO+2lp/DGc46PgwmjlHqIunl4Wj+l9pplmf11pFs/c=
Subject key identifier: 25:5F:C2:B0:7F:26:F2:07:85:23:D4:B9:0B:D9:A6:7F:79:88:55:75
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019D390A0CD01D591A8D07FE1D7A2D868EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 07AC
Signing time: Sun 29 Mar 2026 10:00:52 +0000
Manifest this update: Sun 29 Mar 2026 10:00:52 +0000
Manifest next update: Mon 30 Mar 2026 10:00:52 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: FnpWW7PcflyBf7pyXzV6SwL+No0Lqns7wLr0RWeXz0c=)
2: cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa (hash: D7Hy4SDe+u2iQvMr4uFM192GN65qy0Iw55cUiW6a9ys=)
3: xN2tlbslAO9Hhzxol73kyIlksfo.roa (hash: 0KNISEhduMT4pUQpo6yJ7mPJDI8W5U5qrMtAEUOQhz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0c:d0:1d:59:1a:8d:07:fe:1d:7a:2d:86:8e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Mar 29 10:00:52 2026 GMT
Not After : Mar 30 10:00:52 2026 GMT
Subject: CN=255fc2b07f26f2078523d4b90bd9a67f79885575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:e5:77:de:b1:88:d1:cf:c2:47:0e:d4:5b:
8b:5a:6e:46:c0:66:ab:1f:9d:f9:f2:9f:ad:31:dc:
d7:c2:7c:52:ec:28:07:3a:1c:08:48:14:f6:ee:ed:
a4:d0:2f:6e:b6:cf:c2:1c:2d:d6:91:5f:b5:87:a6:
ca:d1:d9:f1:0d:49:71:06:b8:2d:c7:a3:89:73:60:
4f:ba:38:3b:06:d1:5f:62:f7:4c:5a:a3:9b:57:dc:
23:d3:70:b4:c7:3f:da:c5:d8:c8:4a:86:4f:01:67:
bd:aa:16:ae:7f:dc:72:7c:00:a0:1f:a2:39:b8:e6:
09:b1:7d:b1:ae:3d:f8:c9:40:a8:ab:83:cb:bf:6d:
3b:4f:46:3c:f8:a3:2e:5b:3b:e0:ac:db:4c:6d:a5:
10:4c:ec:44:f2:88:fc:15:98:b7:99:61:18:eb:64:
8c:42:13:c9:26:2b:f3:fb:38:69:b9:47:36:10:5b:
ca:e5:9a:9c:2a:88:11:ca:0c:e3:0e:3c:c0:6e:fe:
19:d1:65:9c:db:a5:b3:5d:52:10:7b:85:f4:65:ab:
c1:60:37:67:e5:b5:4c:3f:46:15:b6:50:e7:69:27:
f6:e3:15:dc:8b:8d:69:fd:63:66:80:36:9b:e3:cc:
8d:73:0b:5b:3b:a5:06:94:84:0c:43:3a:3e:89:4a:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:C2:B0:7F:26:F2:07:85:23:D4:B9:0B:D9:A6:7F:79:88:55:75
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bf:00:81:15:bb:1d:d0:0a:43:11:49:ab:72:a8:75:6f:7b:
e2:63:55:35:16:fa:29:3a:69:14:5e:ee:82:89:df:48:e9:40:
d7:d1:b8:93:39:df:e0:ac:dd:ff:49:39:b3:af:e2:3a:f4:7c:
0a:69:42:13:75:bd:dd:87:49:45:47:5b:3d:23:69:cf:e0:73:
87:6e:05:02:95:77:90:8e:ea:f1:6c:90:ee:e2:b8:c5:5c:0b:
da:5c:17:c3:6d:22:c7:f1:21:64:64:55:1b:1f:60:7e:9b:ae:
10:71:64:0c:1b:95:01:f1:ea:bd:a6:6b:5b:dc:b2:58:7d:da:
17:b0:ae:32:cf:1c:aa:58:7f:0b:d9:de:9e:92:47:9b:bd:dd:
2c:b9:da:b0:0c:62:43:ef:a5:69:72:ac:07:e2:72:47:79:f1:
c4:5d:c8:78:c8:54:a0:a1:88:a2:08:e1:61:98:78:08:57:02:
83:e2:8d:a3:a7:ab:dd:97:3c:09:50:06:54:2b:2b:01:65:38:
70:ae:a5:26:50:40:51:20:ab:46:ec:02:4c:63:fa:61:85:c8:
e4:78:e1:5c:da:31:f9:b6:b5:d0:3c:f9:f5:a0:c8:fe:c4:8c:
4f:0b:c5:18:3e:86:c6:78:2c:af:05:a9:1c:a3:1c:c2:c3:84:
6d:42:ea:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:26 2026 by rpki-client