Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: K+Z3lYcmT846uXXani+Nnn1lloai+7W5xYRcxkgobJs=
Subject key identifier: 04:01:1E:CA:BD:81:EE:F7:3C:B4:9C:C8:4E:1B:85:13:82:BA:C1:80
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 019D28F2A4DC1267ED3FDFFA5F0405780F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 1086
Signing time: Thu 26 Mar 2026 07:01:23 +0000
Manifest this update: Thu 26 Mar 2026 07:01:23 +0000
Manifest next update: Fri 27 Mar 2026 07:01:23 +0000
Files and hashes: 1: 2danITD8WjQekR05ezjj-XhPrBY.roa (hash: +cZJZZibDZjNoxr60QAY9eYKPTcoNjE8iJKXJQEvtXw=)
2: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: k6ERwHF67xRcD8eFKcn481104jnrXnRbTd9GnOLEwW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a4:dc:12:67:ed:3f:df:fa:5f:04:05:78:0f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Mar 26 07:01:23 2026 GMT
Not After : Mar 27 07:01:23 2026 GMT
Subject: CN=04011ecabd81eef73cb49cc84e1b851382bac180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:70:40:af:c3:26:a1:aa:55:37:46:f9:ee:
4e:fc:82:91:59:0f:31:e2:36:fa:b9:4f:19:fb:7f:
2b:03:24:59:92:02:a8:c9:44:fc:62:31:b0:b1:e3:
11:95:41:1e:97:82:7d:45:e0:9c:cb:3e:48:72:19:
e9:23:ae:72:b0:6b:45:a1:e1:76:61:2b:91:c9:8e:
d6:8d:f9:63:be:05:13:4c:35:61:b2:9a:10:23:97:
d3:3b:19:18:cc:8e:bb:ed:36:f6:4b:19:d0:b4:74:
f0:bb:09:f5:ac:b1:00:fb:06:20:0a:27:dd:f7:fb:
64:66:e3:7d:33:4a:33:0e:9e:8e:ab:da:5e:df:ed:
c7:84:d9:b6:fe:ef:21:f2:88:f9:90:4f:74:37:ec:
b5:00:65:6d:38:ce:b8:a5:fc:d4:5b:51:b2:ef:51:
aa:c2:2d:57:3a:b8:f9:6a:2a:32:4d:55:bf:86:de:
72:bf:bb:ed:f0:15:5d:f5:93:5f:a4:59:b7:45:30:
8d:0a:43:d8:7d:ed:4c:c8:19:c6:d0:88:d4:69:49:
63:de:a7:27:f0:92:b6:c8:eb:d5:8d:c9:37:fe:26:
c5:b7:c5:1b:81:03:ce:1d:d2:4e:b0:2b:94:b3:d2:
06:55:29:43:40:69:5f:80:c9:91:2d:c4:98:11:6c:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:1E:CA:BD:81:EE:F7:3C:B4:9C:C8:4E:1B:85:13:82:BA:C1:80
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:41:f2:f3:95:1d:95:6a:8d:f0:9e:42:8f:b2:26:04:6a:52:
90:09:5b:99:49:43:b3:02:b3:88:97:ab:04:22:33:94:7f:26:
08:3f:b3:b1:f5:bc:b2:05:f5:c2:d2:08:b9:72:56:3b:1c:85:
eb:e7:0a:72:b8:cf:ee:7a:6f:3b:65:5e:ca:6c:91:ed:d5:e6:
42:af:0e:a8:8e:74:80:74:37:8e:19:16:ab:6b:e7:d9:a0:53:
13:14:95:d9:98:ca:0a:f6:31:8a:2b:0e:a6:31:fe:5a:09:a2:
7b:6c:f7:a7:31:1f:31:82:22:3b:40:ee:19:80:48:67:77:c3:
c9:19:66:ac:42:12:e0:7f:09:5c:ed:56:4e:25:71:fb:30:14:
f6:63:96:61:9a:a1:9b:ee:22:42:05:3f:a0:93:df:22:33:83:
a1:9c:aa:13:7b:86:6b:1d:e1:8c:fd:db:61:90:a7:ea:29:38:
21:e4:57:68:e9:73:c0:c5:ca:ce:40:73:ab:c8:c1:36:a8:f2:
e7:06:a1:63:c3:48:e7:77:57:18:d3:15:79:6b:ec:e2:0a:ab:
f5:c2:ed:ec:31:a7:fb:43:a7:5e:e8:b3:74:83:28:53:8b:57:
c4:7a:77:fe:48:01:fc:4d:9e:ca:57:d8:c2:69:ae:eb:9f:12:
a6:cb:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:57 2026 by rpki-client