Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
File: SkmHwMS96SdcCXxrtkfo4agrRi0.mft (raw, json)
Hash identifier: bq9WrRtaNoIG3FO/woQZR7Q3/zhQHiaSiaZJgPRURRE=
Subject key identifier: 57:93:4C:75:83:A4:5B:FD:A6:B3:D4:42:99:C0:6D:25:54:7A:D8:98
Authority key identifier: 4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
Certificate issuer: /CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Certificate serial: 019F916CE44C0089037B68526CDD2F314191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:00 +0000
Manifest this update: Fri 24 Jul 2026 00:01:00 +0000
Manifest next update: Sat 25 Jul 2026 00:01:00 +0000
Files and hashes: 1: 5l85adI4WOXSit-4c6HEIjPKoHc.roa (hash: ojOA0XRvDOdTK/IWm8Xmo8VtAPCFqWD6gLMlWBk8nYM=)
2: SkmHwMS96SdcCXxrtkfo4agrRi0.crl (hash: 3l3wBpKXjHL6vNBtOlejUJ1QQQgSQy3N0gs28cKe4po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e4:4c:00:89:03:7b:68:52:6c:dd:2f:31:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Validity
Not Before: Jul 24 00:01:00 2026 GMT
Not After : Jul 25 00:01:00 2026 GMT
Subject: CN=57934c7583a45bfda6b3d44299c06d25547ad898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:02:2f:4f:ae:cd:e6:b0:54:80:dd:26:a2:
a7:6b:83:97:5f:2f:a2:17:27:22:ed:47:31:e0:0f:
4d:b0:af:3e:f5:45:b0:83:b7:ee:70:00:1f:7f:ba:
76:33:2c:bd:0d:e8:12:01:10:76:9d:48:ae:d1:da:
1a:69:74:b6:2b:dd:04:f9:78:2e:38:ea:8e:8b:c4:
43:3c:41:a2:01:61:4c:9f:d3:15:9e:85:0a:d5:5d:
e0:f6:11:6b:9f:66:fc:4d:ad:6c:a2:27:07:7d:bc:
6a:68:17:0d:64:17:98:1f:9e:15:cb:78:8c:5b:d3:
1e:d0:15:21:bc:ba:76:f5:44:80:db:80:3a:ec:83:
42:f0:90:ff:a2:0a:8f:c1:1a:48:21:91:83:05:9b:
7d:ea:27:39:dc:46:c6:e9:e5:12:fb:a1:b2:2c:e4:
58:7d:5a:89:2e:2a:7e:86:81:35:33:ec:ff:8f:2d:
91:7c:44:c9:fd:6a:a3:8a:82:7e:bf:e6:14:9c:8b:
5f:94:57:7b:bd:a9:11:fe:53:f7:d1:df:35:2b:00:
60:47:e3:73:c3:18:34:55:4d:23:fc:95:ad:78:83:
7a:38:33:ef:76:b8:25:4a:41:77:1f:36:9e:9f:9c:
af:2f:56:7f:c3:26:f9:7c:61:89:49:36:18:ea:cf:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:4C:75:83:A4:5B:FD:A6:B3:D4:42:99:C0:6D:25:54:7A:D8:98
X509v3 Authority Key Identifier:
keyid:4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c6:14:2f:54:3d:1d:d5:06:40:26:d4:f2:94:64:a1:e6:10:
47:e4:20:5e:7b:3f:16:42:3c:79:d8:ec:3c:b7:26:de:ac:cd:
19:ca:d2:a4:53:cc:d4:bd:7e:03:fc:39:62:80:b2:88:78:33:
ec:4a:3a:d1:48:97:34:2e:ad:fc:ba:f5:6e:39:de:90:cb:0d:
d3:55:a4:08:11:46:28:27:f4:8e:9b:7f:5a:3f:6a:10:39:d1:
7f:0b:5a:f8:ab:a8:df:58:c8:dc:5b:4b:0a:6e:6d:b8:ed:e9:
92:65:42:bf:4f:19:d1:cc:78:7f:fc:05:44:a8:62:ff:53:d3:
6f:c2:da:31:09:99:d4:18:61:c4:cb:65:99:33:64:39:0f:ff:
97:f0:19:3b:2d:00:b3:7e:5c:2a:ae:b3:f6:79:4d:5a:5b:2d:
35:10:4e:75:9c:0f:71:62:f7:d8:e9:b0:e2:9f:8c:02:b6:9e:
77:5a:a5:6f:b8:ce:c0:35:8c:d0:5b:98:22:91:04:cf:90:df:
cc:49:6e:71:36:00:6f:7b:b9:77:33:fe:a5:50:75:82:a2:4d:
be:c4:37:82:99:e9:e5:c5:47:bb:45:4f:6b:76:2a:33:ec:ef:
2e:a6:24:f9:9f:99:17:10:65:82:6d:cc:17:45:cf:ef:1f:72:
6d:e9:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:24 2026 by rpki-client