Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: ZAHwHWw8HWuKINR6tCzQqH3U6faSgS4hQRuB6HG3+Mo=
Subject key identifier: 37:72:46:74:EF:68:EE:0E:56:11:00:A7:58:5A:20:F0:4B:BE:80:EF
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019D2771BF391EC3BA4405F1CCCB22C049A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 17A4
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: gjJ+8667uWU9avR729kU9Ad7gKrAxl+qfFyQT6Kl5r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bf:39:1e:c3:ba:44:05:f1:cc:cb:22:c0:49:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=37724674ef68ee0e561100a7585a20f04bbe80ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:e5:98:94:be:c1:81:6f:78:03:e6:df:77:
64:85:86:f7:9e:cc:bb:51:c9:c3:dd:68:ac:b0:0c:
12:29:d5:73:7c:90:b9:e7:6b:48:f9:e3:45:25:d9:
52:41:8d:2c:d9:3b:59:8d:51:76:76:5f:5a:fc:c2:
c6:c1:a7:f8:cf:a6:f0:69:35:97:d0:64:c7:a0:58:
5e:b8:cc:b6:d8:d9:ad:6d:fb:00:f7:cd:24:36:5c:
27:83:b1:28:96:80:7a:a1:1c:f8:8b:89:e4:80:6b:
87:90:9c:3b:6e:bc:67:9b:4d:e0:92:44:b1:c0:28:
1a:28:82:8a:2d:88:26:10:aa:c8:b6:8d:bb:11:0c:
02:2a:50:50:05:97:1a:4a:06:fe:61:d3:10:d8:cd:
8e:ca:90:0e:de:4a:6e:c1:89:c3:a7:82:56:f8:b1:
bd:5a:d1:6e:d3:6d:c9:99:a6:60:d2:9f:5e:0f:5c:
b4:77:87:39:f1:ff:3c:58:3e:12:1a:6d:e1:6d:22:
5f:aa:4a:64:55:9e:ec:80:d7:dc:89:47:4a:10:26:
65:a1:c7:01:77:63:67:f4:63:0a:d4:bf:d9:1b:fa:
e1:22:33:6b:60:18:ba:b2:d8:09:51:fe:b7:2d:c0:
f1:93:82:10:28:85:00:ae:65:30:1b:19:0f:06:35:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:46:74:EF:68:EE:0E:56:11:00:A7:58:5A:20:F0:4B:BE:80:EF
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:f2:f0:33:fe:7a:98:2b:4a:64:ee:82:59:3e:db:87:29:
6f:c1:0e:62:73:a2:ec:dc:6c:5b:2c:28:82:57:4a:25:a2:60:
3d:8b:f6:2d:16:82:2b:c1:2e:59:63:69:7a:2c:5b:e1:a1:a2:
e3:24:14:47:64:18:04:c8:67:db:b5:85:d0:33:ab:2f:ea:39:
74:79:39:c3:66:c7:a5:06:5e:1f:da:0b:e1:44:38:92:16:50:
20:f0:23:3b:df:84:83:03:5c:b0:ab:56:51:e6:af:ec:90:6a:
32:62:d6:a5:60:d8:ec:57:89:9b:cd:ed:a0:5e:a7:b7:4b:61:
57:2a:a7:37:25:94:a2:74:bc:3e:80:54:eb:5e:46:63:3b:70:
42:58:21:78:dc:6a:5f:53:9f:33:19:39:1b:66:0f:75:63:9a:
ee:0c:6b:5b:c6:21:a8:90:96:aa:e3:de:64:85:c1:82:4a:28:
8d:1b:14:37:55:81:c2:e3:80:16:16:e2:77:00:a5:71:01:22:
be:e1:0e:7f:8e:4f:c0:12:97:71:db:1f:dd:c9:ad:ff:86:19:
cd:03:5c:85:d0:b6:c5:84:12:22:02:c1:a1:04:61:2e:cb:10:
0d:8f:7a:a8:55:fc:b4:4c:ba:57:b2:fa:12:a6:ee:38:be:33:
5a:cf:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:37 2026 by rpki-client