Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: S8RAeRSmmBXZhDsA+N3ej+tOG0RbP9tMUFhQFHnqobQ=
Subject key identifier: FD:F3:12:CC:F6:43:D3:D1:04:35:D5:67:1E:11:A6:7F:72:DB:C5:0A
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 019D27DF545C8013BCF14F8EE1ACBAE5B877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: KmK468VUGFPUo7JfDhMsvIpIqq0.roa (hash: cCrY/FIccEUQ7wqZOlDpct0+9wnpRcWkBHCPotLe8Cw=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: sGFUuo81TTYDEb4qsJqrtfJf1FxMnjuv7FzmqlL7MFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:54:5c:80:13:bc:f1:4f:8e:e1:ac:ba:e5:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=fdf312ccf643d3d10435d5671e11a67f72dbc50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:59:57:8e:7e:3b:f3:97:59:b6:42:38:f8:
ab:c8:e8:6c:78:52:20:54:2f:bc:48:73:dc:f4:9c:
5b:6f:93:d0:37:52:19:ec:77:ff:d0:44:00:07:21:
65:0c:db:a0:93:79:91:6b:7a:be:f5:3a:7f:a6:b1:
14:93:4e:02:f4:d7:80:74:5f:80:be:a9:69:9b:be:
07:62:2e:77:05:85:78:64:a6:78:82:9a:9c:d8:f2:
d6:cb:48:44:06:bf:60:c2:bb:61:9e:6e:fe:3c:6b:
4d:29:d8:fb:cf:92:f6:73:c2:f6:a3:8c:b2:30:b4:
90:cc:a0:c6:37:27:a6:ab:3c:74:3b:23:d3:c9:47:
bd:4e:94:51:cd:3c:68:0c:34:69:ea:42:47:e2:74:
7e:45:60:c6:32:af:90:da:03:32:71:6f:a9:ca:25:
6c:05:6a:ad:31:1b:19:2a:76:86:c7:ef:03:cc:15:
9b:dc:b4:c9:da:2a:21:7e:a4:a8:65:5e:9a:e9:7b:
b7:df:b2:98:36:bd:a4:a0:0f:79:54:af:9e:c5:4b:
f3:b9:00:7e:16:93:12:a0:b7:87:79:24:45:bb:4e:
0a:9e:2f:dd:cb:1d:b3:b1:1c:c2:15:68:68:a9:f9:
a2:09:56:98:a5:30:94:b7:a3:b9:64:62:e8:87:d7:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:12:CC:F6:43:D3:D1:04:35:D5:67:1E:11:A6:7F:72:DB:C5:0A
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:96:1e:77:8e:63:a6:7d:7c:49:a3:59:8c:96:a3:6a:14:83:
7a:0a:9f:e5:6d:eb:1d:0e:0f:2e:c0:23:f7:12:3c:7b:96:ca:
8a:c4:92:bd:0a:ad:4e:a0:65:4e:25:e8:b8:f6:dc:7c:4f:35:
27:a3:4d:39:b5:57:28:63:a0:22:a7:ec:36:c6:55:74:89:42:
0d:2c:af:f6:d3:a2:02:fc:a8:89:8e:8c:6b:76:94:31:e9:b2:
67:6a:d2:d7:62:d2:62:bd:24:04:4d:dc:a4:b7:20:d2:10:1b:
31:33:c1:7e:28:ea:80:d6:a4:05:a6:7a:a1:65:c5:f3:b8:9c:
f3:1e:d2:5e:c1:ed:51:01:15:e4:77:44:43:c5:40:2c:0f:a8:
ac:2c:2e:a1:07:24:9c:1b:d6:33:c1:4f:7b:55:52:11:de:7e:
89:23:c0:d9:dd:09:e6:8a:3c:3b:c6:4c:05:43:d6:f6:6a:ea:
1d:38:95:c2:54:78:a0:7b:d5:1e:44:24:57:73:c3:77:7b:75:
77:a6:7e:8a:3c:1f:8b:bd:a5:6c:04:b4:af:52:1a:12:3c:76:
27:69:0b:69:d9:1f:a8:3d:00:91:ca:96:d7:d3:9d:80:1f:ee:
86:ee:5b:bc:b0:21:60:e3:44:71:59:77:ae:37:de:01:70:24:
c3:08:87:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n31RcgBO88U+O4ay65bh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGUyY2YwMDJkNDVmZjlhZGUyYWI4NjQzYWRiZmUwODNj
YTEyZDAwHhcNMjYwMzI2MDIwMDQwWhcNMjYwMzI3MDIwMDQwWjAzMTEwLwYDVQQD
EyhmZGYzMTJjY2Y2NDNkM2QxMDQzNWQ1NjcxZTExYTY3ZjcyZGJjNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/lZV45+O/OXWbZCOPiryOhseFIg
VC+8SHPc9Jxbb5PQN1IZ7Hf/0EQAByFlDNugk3mRa3q+9Tp/prEUk04C9NeAdF+A
vqlpm74HYi53BYV4ZKZ4gpqc2PLWy0hEBr9gwrthnm7+PGtNKdj7z5L2c8L2o4yy
MLSQzKDGNyemqzx0OyPTyUe9TpRRzTxoDDRp6kJH4nR+RWDGMq+Q2gMycW+pyiVs
BWqtMRsZKnaGx+8DzBWb3LTJ2iohfqSoZV6a6Xu337KYNr2koA95VK+exUvzuQB+
FpMSoLeHeSRFu04Kni/dyx2zsRzCFWhoqfmiCVaYpTCUt6O5ZGLoh9cJJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3zEsz2Q9PRBDXVZx4Rpn9y28UKMB8GA1UdIwQY
MBaAFEpOLPAC1F/5reKrhkOtv+CDyhLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYt
OWFjODFlZjQ1OTJjLzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMDg3OWMtOTc2Ni00YTA1LWFkYmYtOWFjODFlZjQ1OTJj
LzEvU2s0czhBTFVYX210NHF1R1E2Ml80SVBLRXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZYed45j
pn18SaNZjJajahSDegqf5W3rHQ4PLsAj9xI8e5bKisSSvQqtTqBlTiXouPbcfE81
J6NNObVXKGOgIqfsNsZVdIlCDSyv9tOiAvyoiY6Ma3aUMemyZ2rS12LSYr0kBE3c
pLcg0hAbMTPBfijqgNakBaZ6oWXF87ic8x7SXsHtUQEV5HdEQ8VALA+orCwuoQck
nBvWM8FPe1VSEd5+iSPA2d0J5oo8O8ZMBUPW9mrqHTiVwlR4oHvVHkQkV3PDd3t1
d6Z+ijwfi72lbAS0r1IaEjx2J2kLadkfqD0AkcqW19OdgB/uhu5bvLAhYONEcVl3
rjfeAXAkwwiHRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:01 2026 by rpki-client