Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: +UejY1nQUJ6ccka7iycrUPKM8CqP7ojyjXzMpxYMFgs=
Subject key identifier: 8E:25:D4:13:39:86:17:07:2C:DB:28:D4:15:97:AD:C6:C2:30:B0:E1
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 019D265ED866E7DD4CA53869CF71E04A1A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0794
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: cdCnE7Vr4QB4WVsN/4zIA5VLld1T9Nu3OR739VhlTw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d8:66:e7:dd:4c:a5:38:69:cf:71:e0:4a:1a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=8e25d413398617072cdb28d41597adc6c230b0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:8a:24:1e:35:9d:93:ac:75:5a:10:db:4a:
c5:b4:0f:8b:27:bf:bb:fe:01:7f:8a:a3:49:24:99:
50:54:75:d4:69:fb:3d:ed:39:a4:70:5a:4f:40:72:
9f:98:14:dc:ff:ae:a9:01:87:37:a2:dd:c6:a9:04:
e4:46:07:6b:66:23:98:0d:e0:d3:3d:f6:e2:c5:01:
65:06:e5:c6:94:10:e0:73:68:18:21:dd:b6:78:0f:
1e:b2:6f:7e:59:18:4b:eb:42:bc:61:fb:30:94:a8:
20:a0:6a:18:17:ed:72:85:ee:30:d4:8c:5a:15:74:
59:59:37:a2:17:9b:7b:b2:ce:88:37:32:e5:c0:95:
8d:56:cc:04:14:b1:1d:51:98:a6:74:d9:4f:83:06:
96:80:9c:ac:2e:8f:4c:29:18:01:a2:07:ca:0a:4c:
42:51:1a:3f:7a:1e:b5:2d:79:d6:de:5b:e5:19:7c:
4d:86:47:95:b7:ba:8b:07:d5:80:f0:c4:18:b5:9b:
ca:d3:9f:6a:d4:57:c9:73:76:f0:f6:89:72:2b:0d:
49:04:92:b8:73:a0:b0:5d:ce:6e:9c:5b:1b:7b:2e:
f7:14:67:f1:1e:bc:61:65:c8:aa:30:46:75:d2:75:
63:c8:8e:0c:f0:56:12:aa:29:c1:b0:a9:53:3a:d6:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:D4:13:39:86:17:07:2C:DB:28:D4:15:97:AD:C6:C2:30:B0:E1
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:a1:d5:8e:be:6a:56:0f:d8:e9:b7:7e:c8:cd:53:3e:fe:
db:40:06:37:12:61:38:78:74:ef:09:60:e1:64:f9:3e:e1:80:
9c:ab:61:ee:44:66:28:62:9d:2c:f8:28:38:17:08:b4:52:18:
a5:59:e9:a4:6a:fc:4f:f3:4c:95:66:12:c3:6c:a9:8f:08:51:
71:9c:eb:ac:d6:80:af:53:c0:3f:d3:4d:1d:60:d8:a8:b5:03:
3e:7d:e0:a7:25:9c:69:a4:92:e3:83:cd:ac:01:09:9d:4f:1f:
64:05:0d:45:61:ba:7b:16:b9:c0:3e:44:4d:24:e4:1f:d0:8c:
f1:9d:dc:18:38:c8:06:6f:a9:2e:a8:61:a8:89:a4:4d:5d:33:
c7:fc:56:fa:b0:78:7e:81:2b:b7:13:5c:28:0c:34:d2:4d:91:
84:14:45:59:7e:58:b8:ae:2b:1c:e8:f3:bb:82:be:92:97:65:
46:ef:a8:1f:f6:0c:43:82:f4:20:87:0c:4c:ef:67:d4:00:5d:
3e:6a:1e:0a:cc:98:84:98:e9:89:0d:79:d9:8e:81:f3:27:72:
55:80:58:8d:15:93:53:da:4d:62:24:53:95:f1:41:83:4d:eb:
9e:e7:70:38:07:6c:0c:ca:23:2f:fb:55:45:a6:e1:62:66:0b:
0d:9b:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:54 2026 by rpki-client