Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: ssmXN3ZXMuip47vYsI98jQvxBueczNdE+FADkTM8KYk=
Subject key identifier: C1:F9:DD:69:0D:AF:C0:FE:8A:DC:1E:4D:49:7C:18:8E:10:A2:06:A9
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 01A1DE39B3CF6350DDCCD72061532BC34C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 0ADC
Signing time: Sun 15 Nov 2026 08:01:25 +0000
Manifest this update: Sun 15 Nov 2026 08:01:25 +0000
Manifest next update: Mon 16 Nov 2026 08:01:25 +0000
Files and hashes: 1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: JCq7FgGgtpgONx9BUvG4Aw7TMvucdYAJgx7rVEA+/Hc=)
2: nYd9WAHfnnkyefHNJxlyLZw7juY.roa (hash: 0Jl7sSfyxb2cLvac18MQkQRRmrhCrh71DaYL81jG5C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:b3:cf:63:50:dd:cc:d7:20:61:53:2b:c3:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Nov 15 08:01:25 2026 GMT
Not After : Nov 16 08:01:25 2026 GMT
Subject: CN=c1f9dd690dafc0fe8adc1e4d497c188e10a206a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:06:b7:8b:c2:de:8e:72:8c:1a:1c:10:40:
8f:15:e1:d3:09:fb:12:50:b6:a7:9e:8f:9a:a2:ab:
5b:16:db:2c:ea:33:d0:c1:e5:81:5e:41:b0:97:da:
9c:c5:2e:55:43:12:33:26:6c:0d:39:6e:8f:0e:d9:
47:08:fe:af:20:1a:17:04:7f:64:9f:a3:5c:14:0f:
94:e1:6d:6b:a7:be:f7:8c:57:b4:e4:c1:af:17:5d:
94:4f:44:55:86:90:b4:f0:91:8c:c1:27:ff:ea:46:
ac:97:72:05:97:e4:ac:24:23:28:fd:af:42:30:d3:
a4:69:f6:df:7e:13:d7:36:c0:ca:72:25:b4:57:50:
4d:ef:f1:d0:05:2c:83:45:62:93:48:f2:56:66:c0:
5e:e3:6b:d6:4f:96:0a:2b:6e:7d:7d:b2:81:6e:71:
6d:cc:46:d6:fd:06:e9:ee:4c:f9:17:0c:4a:88:7f:
30:e5:99:0a:32:e6:80:9c:0c:3f:a6:83:f4:d7:81:
5a:03:f2:a7:18:9e:6d:11:25:34:26:fe:b7:1a:38:
bd:f5:3c:cf:a7:06:35:1d:7b:e3:4c:54:52:41:b9:
55:70:91:1d:db:da:93:43:db:65:47:b6:03:67:46:
f7:70:fb:60:72:2f:06:95:b0:89:20:f3:7b:b3:8a:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:DD:69:0D:AF:C0:FE:8A:DC:1E:4D:49:7C:18:8E:10:A2:06:A9
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:1b:8f:e2:73:d8:13:7f:88:33:2f:18:10:4b:01:88:c3:
06:0c:ba:65:b6:83:c7:aa:10:64:1b:cd:9f:55:55:bd:53:34:
70:de:9e:e9:55:02:b3:71:1b:51:b7:ee:61:2a:4a:49:94:a1:
1b:80:3b:0c:af:dc:2a:c6:d7:ed:e4:a0:9f:29:e5:b4:f8:72:
f1:25:33:e5:5c:51:83:d2:33:7b:50:3a:6a:25:44:f6:e2:70:
51:c2:07:17:36:43:a1:7c:69:d8:3d:dd:80:2a:7e:d1:1b:9f:
0a:dd:f0:66:32:9a:ec:54:79:6c:07:1c:30:67:f1:28:ee:f4:
29:95:e1:09:fa:8d:28:5c:e9:35:a3:ad:5f:6c:ef:ce:e7:ca:
3c:33:18:48:5e:c2:a6:9a:b2:d8:a9:68:02:2d:e6:07:7d:1f:
3a:8e:16:53:69:12:f2:98:22:71:33:df:82:e5:98:c0:2c:21:
b9:66:3c:73:2a:93:8f:be:6b:02:e6:0a:19:1f:8c:5c:ec:8f:
53:54:4a:82:62:c0:db:a7:8b:9e:c3:67:6d:b9:c7:3b:7f:15:
f0:97:73:db:16:85:1d:44:18:b3:e4:1a:3c:3e:23:a0:df:32:
0f:9d:cf:b2:f0:04:aa:7b:04:b8:8b:f9:5a:ab:2f:b1:e4:f3:
ef:f8:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:40 2026 by rpki-client