Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: GqNG9e3yvv3MVu4mHTMA/wLRrvYLtuAzTA2mm26njxk=
Subject key identifier: 5C:38:7E:43:8F:9F:FE:E3:A8:AC:E1:7C:19:20:FA:DC:CA:FF:D6:AA
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019D2960F5F122265538569931130009E24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 09:01:53 +0000
Manifest this update: Thu 26 Mar 2026 09:01:53 +0000
Manifest next update: Fri 27 Mar 2026 09:01:53 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: A25Hpx71o/z6cw6dH2NGe8IVjD0tWXVTROlSwbKNvqs=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f5:f1:22:26:55:38:56:99:31:13:00:09:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Mar 26 09:01:53 2026 GMT
Not After : Mar 27 09:01:53 2026 GMT
Subject: CN=5c387e438f9ffee3a8ace17c1920fadccaffd6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:b2:4b:88:86:97:01:7d:8e:3e:3c:93:1f:
ca:4e:88:aa:2e:5a:70:2b:4f:6e:dd:ba:e5:2c:e7:
33:51:b0:a9:f8:c7:7b:d5:37:3b:9a:4f:64:8d:a8:
39:fe:31:37:4e:ae:34:15:d3:40:40:d7:6b:97:69:
ea:09:7f:de:9a:7e:59:61:e8:07:e1:77:5b:75:da:
18:cb:21:24:b3:fc:cf:30:20:97:00:02:f9:11:ac:
63:42:ac:1e:13:34:19:ab:96:6c:a0:ea:ff:58:b4:
a6:0e:fe:d1:b5:aa:3d:8f:07:65:1c:09:da:89:af:
11:7f:96:6f:61:e8:fe:34:04:75:fc:9f:d0:73:2e:
28:26:1e:9d:54:a4:bd:47:05:19:9d:69:ce:04:a0:
20:10:39:02:42:ea:ff:d7:31:7d:dc:87:8d:b6:d0:
8b:51:42:3a:ff:65:dd:96:21:63:61:9b:f7:33:29:
a5:79:90:09:9d:99:0f:9e:70:dc:4f:ce:04:15:41:
7e:cd:b2:f5:4d:8f:2a:e2:bf:ee:7e:a6:fb:5e:6c:
57:1c:bd:c1:ef:be:ff:69:79:de:2c:74:db:01:e6:
32:f6:d7:d1:22:ec:ee:47:2a:e8:de:8a:0c:d2:7b:
78:55:24:f4:f9:52:50:8d:c2:18:90:39:08:82:01:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:7E:43:8F:9F:FE:E3:A8:AC:E1:7C:19:20:FA:DC:CA:FF:D6:AA
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:97:52:8b:a6:1c:37:76:de:85:5c:d7:87:66:11:bb:19:d8:
ae:a8:93:6c:57:95:5f:7e:d5:de:9c:c8:e3:ac:3e:6f:1c:a8:
53:8d:c5:57:a0:ed:5b:ec:63:f0:8c:ef:b1:7f:5d:a3:38:fc:
c6:ba:ae:1e:7d:56:8e:68:be:22:e3:2a:a3:33:aa:26:93:2f:
0e:13:5a:09:40:58:6c:dc:fd:d1:9a:0d:ba:39:ed:f8:38:2b:
c7:84:5d:1d:87:1e:12:ba:dd:a7:a8:05:f5:db:be:4f:28:9b:
f5:73:58:f6:3a:60:34:da:af:b6:97:a7:62:6f:ad:9b:53:c4:
74:9e:5d:83:4c:fd:30:55:2f:5d:21:8a:9b:57:6e:d6:ad:0c:
a5:9d:d0:34:9d:d6:72:05:28:f9:90:17:2c:63:68:25:05:63:
b6:95:e6:5a:59:0e:8a:1a:24:fc:87:71:8b:b2:39:36:07:50:
58:99:b1:a9:27:a0:aa:58:cb:26:fd:08:89:3c:b7:7f:08:fb:
1f:d5:b2:64:d3:01:e3:7e:d0:75:63:ba:ce:f6:a3:98:c6:05:
f7:b2:4b:cb:53:94:ca:b5:94:82:d2:17:63:f2:c9:32:55:46:
c0:35:1b:7b:4e:c8:cf:69:37:92:a0:7f:2c:50:f2:b3:d7:09:
64:f4:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:20 2026 by rpki-client