Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: Z4O07JM1wl/qBx3UVvuhDkGXm9ZYsskYUZvWfFGhfEw=
Subject key identifier: 86:54:11:DC:69:89:B8:8B:2C:A0:C0:56:27:91:C6:56:BD:69:6A:5F
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 019D2A3BD10C04A7DEA7485E450DBA723756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:00:56 +0000
Manifest this update: Thu 26 Mar 2026 13:00:56 +0000
Manifest next update: Fri 27 Mar 2026 13:00:56 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: horuP+OImSFulNWU5jA6KAmJ/5Lu1ZZo2AY9XkphgGc=)
2: lqVBKhe9BI1k73opGPRpRu7Tjm8.roa (hash: ANewMCPdr9EPXxV8b7rhqmy3E65gN7TANy2BLw8Q6mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d1:0c:04:a7:de:a7:48:5e:45:0d:ba:72:37:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Mar 26 13:00:56 2026 GMT
Not After : Mar 27 13:00:56 2026 GMT
Subject: CN=865411dc6989b88b2ca0c0562791c656bd696a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:d6:4b:6f:79:e9:d1:8d:cd:0b:c9:b6:31:
26:06:b5:4a:2d:61:ee:fc:84:8e:56:e1:7f:92:55:
c8:29:28:2b:b3:8f:a8:c5:ee:38:aa:16:1b:a9:36:
01:ba:25:db:2c:8e:a0:97:c0:c0:0b:3c:63:fb:8b:
9f:d7:63:11:33:25:71:90:86:63:9f:b6:b3:da:d8:
17:cb:ab:96:9d:1f:59:fc:4c:9b:19:23:3d:7a:7f:
51:b0:93:10:45:91:1e:93:bc:68:c3:2a:65:0c:c2:
f7:c3:82:de:20:65:ba:2e:ee:73:64:1f:e2:68:90:
e2:7a:fc:12:e4:33:f5:0e:9e:76:d2:12:5c:d9:83:
c1:48:38:4b:dd:67:5f:73:0e:6f:f5:06:ac:af:e8:
3d:f3:a5:ec:9f:a3:98:4d:55:e4:d5:42:b8:3b:35:
a2:ee:b8:ac:bb:93:f8:7a:fc:e8:a2:f8:b3:56:10:
de:d6:70:96:10:25:51:5b:95:c9:da:e5:3a:7f:c4:
68:df:34:ea:7c:5d:bd:46:b3:a9:e6:29:c6:35:28:
e9:7a:21:4c:23:af:4d:96:71:f9:4c:e3:d3:c9:84:
02:a7:b6:ea:10:5e:89:7e:69:02:6e:c8:8a:4b:64:
fb:a7:3c:32:20:ea:0e:ca:8d:ad:fc:45:c0:e3:d9:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:11:DC:69:89:B8:8B:2C:A0:C0:56:27:91:C6:56:BD:69:6A:5F
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:93:3b:03:70:18:52:f4:32:a5:33:17:81:dc:49:09:75:ac:
dc:75:69:43:34:3f:78:e9:b2:15:d2:09:0b:db:61:7a:30:07:
d5:b1:02:f7:1e:9a:8d:4c:a6:60:68:f4:eb:15:54:fd:95:8b:
ac:5c:39:9e:ef:4f:16:47:11:35:65:40:c5:3a:ac:3a:f3:1a:
9d:67:16:ca:44:ce:b0:23:cc:3e:3f:11:6e:04:df:4a:3d:2b:
47:bd:06:3c:fa:35:1d:66:84:a0:ae:fe:8d:4a:bf:8a:2e:7d:
69:36:df:1a:02:29:18:51:59:09:21:3f:5d:33:e1:92:33:e6:
ea:fc:24:66:2f:04:66:8a:9e:85:06:8d:2e:3f:0f:ff:dd:04:
83:b5:81:ab:40:ce:1c:2c:dc:77:a9:66:bf:c1:0e:1b:5c:03:
a9:22:8b:4d:17:4e:25:1a:06:a7:5d:ee:d2:72:04:b5:4f:84:
34:e1:d3:08:f2:19:78:de:db:85:65:84:fb:ea:d6:40:de:6b:
ba:4c:15:77:53:5c:06:fe:df:e8:7b:28:4f:84:aa:5e:2f:07:
13:e4:f9:81:30:99:3a:1e:6e:a9:98:ae:64:31:aa:4b:df:d5:
45:bd:bc:d9:9b:ff:f0:11:69:b4:9d:85:88:52:35:2c:3e:1c:
06:e7:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:12 2026 by rpki-client