Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: XQKKn+W5LkyuH6AlnaVf0cygJhgnTl6CiGsN/A+XgeE=
Subject key identifier: E0:F7:AB:BC:00:BE:5E:DA:29:CB:12:86:FD:AF:E1:6B:4A:45:8A:7B
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019D337617B697A4CA3EB077E2A20D41C0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0D71
Signing time: Sat 28 Mar 2026 08:01:10 +0000
Manifest this update: Sat 28 Mar 2026 08:01:10 +0000
Manifest next update: Sun 29 Mar 2026 08:01:10 +0000
Files and hashes: 1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: vXBFbPQ8f7YpzP9S4csGrDuXJ9TC90AR5ixk9Fi433g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:17:b6:97:a4:ca:3e:b0:77:e2:a2:0d:41:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Mar 28 08:01:10 2026 GMT
Not After : Mar 29 08:01:10 2026 GMT
Subject: CN=e0f7abbc00be5eda29cb1286fdafe16b4a458a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:68:49:29:5d:c2:cf:43:8c:69:23:1d:95:
3c:53:25:66:0a:95:20:83:83:da:27:ba:91:cf:72:
34:6d:29:f6:57:25:04:af:7d:0b:f1:14:62:04:a5:
b9:e5:20:7a:1b:33:ce:d9:fb:47:ab:ff:dd:d7:77:
20:18:3d:3c:f0:28:e0:23:d6:27:23:a5:ce:7e:01:
1a:20:20:e9:d7:fa:a6:99:85:98:fd:41:00:c5:9b:
c5:13:d2:22:09:19:7d:84:e8:c5:ce:65:f2:7a:73:
c6:2c:b5:cd:50:19:3f:a6:db:06:89:0b:5d:a1:a4:
87:4d:2a:0d:56:9c:d8:e5:b5:50:a9:46:8d:31:91:
ac:29:ca:67:2b:e5:bd:8e:02:09:72:6a:f1:11:ce:
ac:47:f1:fc:d9:3a:5c:86:8c:80:c7:d9:01:17:67:
6d:5f:e2:8d:62:13:15:ab:42:b2:2f:37:f4:cb:96:
d1:3d:08:1d:7e:f6:47:c3:3b:7c:84:40:96:17:dc:
66:b4:14:26:7c:df:fb:12:9f:cd:3e:79:25:3d:12:
d2:fe:10:33:27:63:ae:27:b6:ac:9e:ee:5d:20:3c:
3f:79:13:81:82:27:97:f4:18:3b:8f:33:6f:77:f1:
cc:d3:3c:c4:39:de:36:a4:14:29:a4:e8:16:a3:89:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:AB:BC:00:BE:5E:DA:29:CB:12:86:FD:AF:E1:6B:4A:45:8A:7B
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:a0:5e:29:3d:6f:78:b5:a4:96:8a:3b:76:08:a7:a2:3b:
85:04:39:df:25:02:6a:99:3a:64:d4:d9:e4:79:88:43:b3:c6:
62:d5:a3:07:8e:c9:c3:13:af:7b:50:ff:4d:1f:a0:1d:22:4d:
e6:e4:f4:ab:cc:77:e8:30:1b:23:22:a6:f4:71:ac:bc:38:df:
a7:0e:de:8e:68:3f:33:d5:23:d5:a2:67:09:e7:08:f9:82:7a:
e3:16:04:97:63:1b:bb:13:17:ff:98:98:06:9d:92:2a:4d:ac:
9c:30:af:32:ff:79:e5:6f:5c:52:cd:a9:08:f1:ba:8e:95:29:
86:95:84:77:4d:0f:5b:d3:85:f3:ab:51:ec:db:ca:52:b0:b2:
72:e8:01:e9:c2:9f:e7:de:94:e5:f4:1a:ff:41:de:c3:1a:86:
a6:91:ab:e2:37:9d:5a:9e:38:3f:86:6a:88:0d:15:f3:e2:5e:
91:4d:6e:17:c1:27:39:e6:d1:14:70:41:c0:2c:22:98:60:db:
6d:fd:18:63:5a:ce:9b:75:f7:62:76:29:1e:3a:be:68:34:d7:
04:3a:7f:23:7a:c8:2f:d3:15:ec:1f:92:b2:35:95:81:f9:75:
b2:06:38:a6:c9:6f:e5:a2:07:4d:2a:4b:9e:23:53:22:91:0e:
9a:83:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:05:48 2026 by rpki-client