Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: 85t4pPdJDQACMeoohs31e/8eWrBQ3SEy5tMk3dGqHnI=
Subject key identifier: D7:BC:D0:7A:EF:7F:C7:E4:32:8C:A5:B8:5F:E7:1E:84:75:95:11:F2
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 019D322BD4357A54F6FC9905B9EC918A6137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 02:00:26 +0000
Manifest this update: Sat 28 Mar 2026 02:00:26 +0000
Manifest next update: Sun 29 Mar 2026 02:00:26 +0000
Files and hashes: 1: 1WFKhbvTJWB93p6BRF4MIhxyrE0.roa (hash: vbxgmYXayRhnSkSppEwHN/q5tKy6yDwafh4xyBQ3/1M=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: JHih/pZA0C3yWM1yDYRQYGgF0Zq6iEe6J2uZWpAmZXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:d4:35:7a:54:f6:fc:99:05:b9:ec:91:8a:61:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Mar 28 02:00:26 2026 GMT
Not After : Mar 29 02:00:26 2026 GMT
Subject: CN=d7bcd07aef7fc7e4328ca5b85fe71e84759511f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:5e:8f:d9:05:4a:7c:b6:c4:33:35:6e:28:
59:ef:cc:25:04:5a:90:f1:12:ad:75:c7:62:47:8c:
80:e0:72:2a:c7:21:27:6d:aa:40:52:5d:2c:31:53:
a2:4b:5b:fd:55:bd:b3:0d:ab:7a:da:b9:c8:5c:29:
40:02:e7:cb:23:a9:3a:86:ff:2b:97:19:d8:a9:f6:
e3:e3:25:3c:50:e4:0b:29:54:06:22:d3:5f:42:82:
b4:ed:25:01:58:41:4c:1c:b5:70:2e:51:26:77:19:
94:23:7d:92:aa:5c:82:4c:34:52:17:5b:a0:0d:51:
3b:5b:68:5d:78:e8:51:4d:b8:9b:73:f3:3f:1d:53:
b5:bc:03:2b:d9:2e:41:33:42:53:85:d4:4e:28:05:
91:df:9a:60:23:94:46:92:86:b6:e8:29:7b:71:f8:
ec:69:d6:a9:79:e6:36:31:98:fe:d9:27:74:8c:93:
76:e2:9f:cf:db:f2:8c:7f:22:84:72:34:25:49:ae:
1a:52:9f:63:09:06:29:cf:e9:db:14:44:d7:9d:3f:
1d:d9:7b:d0:7c:af:36:1c:da:11:ac:2b:f2:15:b1:
88:35:f1:86:e3:20:83:51:0b:9d:74:a6:12:41:eb:
ce:bd:7e:b2:19:ba:d0:ab:1b:41:47:50:a9:dc:0d:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BC:D0:7A:EF:7F:C7:E4:32:8C:A5:B8:5F:E7:1E:84:75:95:11:F2
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9a:65:12:68:68:dc:59:91:e5:94:70:42:a1:8f:ea:d9:5a:
bc:aa:67:af:3d:a2:1f:48:9e:0c:ec:aa:71:e0:a6:77:1f:8a:
9b:15:0c:16:33:2e:f1:0d:35:3f:09:44:bc:44:16:08:06:58:
ff:23:42:08:94:43:d9:f6:f8:1d:9c:d4:99:90:96:ba:4d:2f:
7e:25:1f:30:8a:fa:a4:e9:33:61:fd:8f:a2:a8:84:89:72:28:
68:d6:3c:eb:b3:a1:8f:1a:04:f7:64:6d:c6:1e:74:da:55:dd:
e0:27:f7:6a:6e:b6:96:fb:a4:bb:7b:bd:02:a3:18:b7:aa:b1:
50:9d:88:1a:93:83:7a:1f:78:24:ca:fa:bf:87:01:12:5a:3e:
5d:13:a5:ff:0a:20:f9:4a:04:a0:bb:75:5a:b6:6b:67:a3:39:
75:90:ae:f0:23:01:c0:e2:42:93:75:6b:a0:25:55:fc:41:a1:
32:0a:ef:06:7e:28:f8:c6:ad:51:52:1e:3e:ec:3f:35:af:42:
b3:ea:84:ee:97:16:2c:a4:5a:5c:0c:20:3f:b2:ab:56:7b:55:
1c:89:3b:cf:6e:86:bb:0f:c2:30:81:8c:d5:3a:1d:8f:f0:94:
1f:f0:6a:a4:e1:ed:2a:be:8a:d2:cb:fc:65:f3:44:00:72:88:
39:eb:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:24 2026 by rpki-client