Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: QFZx5/dD8+uv5xG8Nhfat+IcWOoo4Vc8JAKUroJDLFg=
Subject key identifier: 93:9B:75:AB:E1:D7:FF:08:CC:A8:D3:B3:7E:88:9A:5C:5C:00:F8:B2
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 019D2816C62C012080988CA70AE10190E813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 086B
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: EvI8mErWEMbmThEo1JjM2x_4Gnw.roa (hash: iNz3IkF1f9samVwnI+HYLRpCD607SHFYQXXHMEOKQ0I=)
2: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: g/nnsZkzkfNeQzUi5qTajuhSLraIpvv2PypTCnoFRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c6:2c:01:20:80:98:8c:a7:0a:e1:01:90:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=939b75abe1d7ff08cca8d3b37e889a5c5c00f8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:1a:b5:de:8e:3b:e3:11:4f:8a:db:08:1c:
87:37:bd:76:44:1b:b4:d4:dc:66:41:8b:2e:86:79:
74:dc:7b:09:50:17:92:0e:fa:dd:77:32:12:30:94:
6c:0d:a9:fb:89:51:a1:16:72:b6:cc:4d:4a:9c:f6:
22:5f:06:56:c7:1f:78:ac:6a:e7:53:04:c5:50:24:
e7:ab:0e:67:59:3d:f5:a1:96:1f:23:a8:e8:0e:0a:
cd:3b:86:47:ca:d7:78:16:5b:34:b5:8c:4e:56:38:
f8:01:7e:e3:f8:5e:90:53:92:ed:29:d4:f9:26:75:
af:48:c1:6e:39:ff:77:3a:ab:3c:4b:a6:1f:7d:27:
f0:51:1d:dc:41:9d:91:5b:55:a5:55:2c:24:79:97:
e4:47:42:44:64:77:b4:b1:48:91:5d:03:6b:f0:a1:
3e:59:b9:1e:40:a6:b7:63:8b:d5:ce:e9:f5:36:a9:
50:96:50:db:b3:f5:a8:91:6e:61:6b:75:24:d3:6a:
b1:09:e6:27:8b:15:82:7e:25:0e:28:02:c5:df:47:
22:ea:bf:4e:65:59:42:a7:96:d9:70:c8:91:39:94:
57:a3:7f:2a:a0:c8:61:eb:25:95:a8:51:fb:f7:c5:
98:8b:16:94:21:17:b1:47:8a:f0:b6:1f:9f:8f:b9:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:75:AB:E1:D7:FF:08:CC:A8:D3:B3:7E:88:9A:5C:5C:00:F8:B2
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5a:3d:df:8e:9e:c8:d7:c6:fe:53:c4:d1:2b:52:6c:44:a5:
ea:55:0c:be:11:26:03:c7:f2:86:b0:37:1d:6f:85:70:b3:fc:
ec:45:b8:57:3c:69:76:61:ac:70:fe:cd:49:ac:60:7c:44:10:
17:d2:d3:99:3a:5e:63:9b:35:e9:77:84:84:c1:53:f1:6e:03:
e2:f4:f2:35:92:32:10:21:5f:ec:65:c2:3b:70:97:0c:df:c9:
9c:2a:34:21:42:87:a9:01:ea:f8:05:21:49:18:f6:74:9e:65:
43:9a:44:74:dc:1a:1a:2e:ff:5e:16:30:ff:9d:7b:a7:27:ff:
a9:01:df:07:cf:58:8e:0d:93:74:16:df:fa:06:25:71:41:ee:
23:ea:06:28:59:a5:ff:64:b6:6d:63:be:b4:25:12:e4:f4:e2:
60:53:ee:30:f9:26:de:2e:c2:4c:01:f6:44:e0:7e:5f:55:e7:
0b:c8:dc:4c:e0:14:fb:59:b6:3b:0b:71:b3:f1:4e:3e:25:24:
7b:9f:4d:fe:68:3a:58:eb:df:19:ab:30:6c:3a:95:41:cd:56:
05:6e:b0:c9:16:97:b0:93:a1:66:ca:8e:13:8f:04:21:85:cc:
88:e1:b5:cc:7c:f7:fc:9d:f1:9f:1a:0c:e1:3e:a1:c9:6c:9b:
de:06:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:28 2026 by rpki-client