Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
File: SkmHwMS96SdcCXxrtkfo4agrRi0.mft (raw, json)
Hash identifier: HJArmC/6BBIdSFYy9ede5MEHECBeFKx5bwzlRKxcGPo=
Subject key identifier: F4:2C:FB:B7:98:9F:E0:E8:07:89:29:F8:90:B8:9C:60:5B:A8:33:83
Authority key identifier: 4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
Certificate issuer: /CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Certificate serial: 01A0CE249A479CD696F4C42FEB583B2631D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:40 +0000
Manifest this update: Wed 23 Sep 2026 12:01:40 +0000
Manifest next update: Thu 24 Sep 2026 12:01:40 +0000
Files and hashes: 1: 5l85adI4WOXSit-4c6HEIjPKoHc.roa (hash: ojOA0XRvDOdTK/IWm8Xmo8VtAPCFqWD6gLMlWBk8nYM=)
2: SkmHwMS96SdcCXxrtkfo4agrRi0.crl (hash: ILRT+AniLKbqzV2Wfo8wah2QMQwuR9M5qNLRkU4dim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:9a:47:9c:d6:96:f4:c4:2f:eb:58:3b:26:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Validity
Not Before: Sep 23 12:01:40 2026 GMT
Not After : Sep 24 12:01:40 2026 GMT
Subject: CN=f42cfbb7989fe0e8078929f890b89c605ba83383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:36:11:aa:90:f3:6d:e2:64:40:1e:e1:d4:
93:4d:06:5b:c6:f7:52:23:5c:49:46:d1:26:45:aa:
4d:c5:32:8f:6a:8c:e2:31:34:46:05:3f:49:48:ca:
31:10:49:b7:1e:3c:d7:21:46:58:c3:c4:39:7a:98:
3e:35:fe:74:fb:28:36:31:a0:8b:a9:e8:82:27:6f:
32:67:2c:43:c5:00:af:ce:42:89:c8:8d:bb:bb:37:
27:eb:99:11:7a:38:cd:6e:a8:58:01:1c:02:7c:cd:
d7:b2:68:56:fb:80:8f:a6:70:3c:c7:42:0c:7d:e2:
52:3f:f4:bf:cc:bd:99:0f:d0:60:e4:b1:b9:2a:35:
14:d2:be:34:7f:12:a4:e6:85:94:ce:b8:e4:f7:86:
cb:2f:b9:0a:db:88:e5:ed:ce:06:57:c1:89:ff:83:
78:64:c4:eb:94:99:27:5a:19:4a:c1:f7:da:8e:36:
08:90:fb:52:4a:5e:9f:d8:a8:7a:93:1d:97:80:13:
6b:2b:ef:97:30:90:6b:78:c9:52:ab:d1:3d:36:ad:
07:24:68:a1:79:0f:69:4f:ac:bd:16:8e:86:93:49:
4b:53:fa:02:a2:7d:b1:59:04:3b:8d:03:3a:10:d2:
00:fe:ee:80:dc:93:0c:57:f1:88:cb:52:1b:d9:d6:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:FB:B7:98:9F:E0:E8:07:89:29:F8:90:B8:9C:60:5B:A8:33:83
X509v3 Authority Key Identifier:
keyid:4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:0b:a8:7b:b3:ea:54:52:b4:6d:ca:41:f5:54:b9:4d:a5:
27:45:b5:54:1d:e3:ed:61:ca:33:cf:62:2d:2c:61:15:4f:02:
e4:df:3d:78:d3:e6:ef:96:6e:84:6f:3b:07:56:4c:0a:60:af:
93:d3:c6:9b:cb:a1:48:ea:1d:3e:21:63:07:fa:34:bb:3a:54:
87:a9:94:96:90:1c:52:7e:9b:84:71:c1:54:83:02:c4:14:bc:
a5:3e:20:f6:de:37:dc:a8:42:40:53:cf:b6:2b:1b:7c:63:f2:
21:45:60:fa:0e:25:c6:04:9d:23:2e:24:8f:6e:91:1e:02:af:
69:32:83:58:39:91:ed:2a:ea:fd:da:a0:70:12:07:ad:e8:7d:
6a:02:b2:5c:7f:de:24:da:e2:bc:1f:93:c9:7a:6a:19:db:ed:
d7:e1:60:d4:12:5c:e8:db:22:d1:11:bc:6a:68:25:61:de:28:
e3:af:7e:f2:0f:d0:27:8c:c8:c1:d0:ae:a5:92:fe:91:57:49:
79:33:b1:d4:83:1b:1d:b3:62:90:99:cf:61:20:48:91:a7:e9:
fd:9e:4d:19:c7:9a:66:35:9f:1d:ee:f6:6e:1d:33:1a:35:5b:
2c:a5:d7:e7:13:9d:f7:7f:b9:ea:46:77:b0:35:4b:fa:86:f7:
7e:02:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:20:55 2026 by rpki-client