Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
File: SktRP35EbgzW3P5Wgpu8n-SY0-g.mft (raw, json)
Hash identifier: grfBjDuGiJ6hQXYyIYa8QsCq7GKlBLt15Ool9mHS+J0=
Subject key identifier: 8C:F2:D8:7F:40:07:92:99:26:81:6C:3A:CA:51:D0:0D:A3:E1:E3:D1
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 019D27E059B60D99CA8C5A22934D2E730FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
Manifest number: 1804
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: HRPEVsU7iC6tuMXxN0847HozIdU.roa (hash: OxioVmKvXuMqhvwUYbfZJ6I+5PFAi5Dfk98WAoviJGQ=)
2: SktRP35EbgzW3P5Wgpu8n-SY0-g.crl (hash: PAR/XZzyRUtYaTGpV4wRr/43hoc5TjYjX/JJBV1IsuM=)
3: eOHnEFB37PmUTgqDEmHYmXjP948.roa (hash: IWFT2sQgL4JJIubs5KJK8kV8gaqaOO+CNZ1mwA1H+Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:59:b6:0d:99:ca:8c:5a:22:93:4d:2e:73:0f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=8cf2d87f4007929926816c3aca51d00da3e1e3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:b6:92:35:e2:54:c9:cf:9d:62:75:6e:2c:
0c:18:3e:ac:d8:d4:1d:a9:87:14:5a:9a:89:bd:0d:
03:58:9b:4c:74:41:ad:1f:d8:4b:cd:28:a9:8a:62:
2d:a6:9a:18:ea:2f:77:e0:a7:14:6c:f0:6c:ef:22:
e6:91:ff:62:5a:bc:62:f3:3d:b1:43:bb:7e:f4:51:
64:45:28:b6:a4:66:7a:c9:c3:88:0f:7a:f9:b6:76:
94:1c:73:3d:57:6b:fd:c2:79:cd:8d:2b:f9:b7:ca:
e1:1b:83:a7:d2:8e:fd:ba:20:de:e4:e5:d2:94:98:
db:bf:a3:67:4e:e2:24:46:c8:30:09:0d:84:50:80:
47:2d:94:86:a8:2f:a5:20:8b:c4:73:ba:16:69:66:
0e:ca:43:8e:0b:a1:e3:48:54:80:a9:89:03:83:21:
98:6a:75:e7:5c:3c:64:8a:4d:39:78:1c:fe:f5:70:
80:41:91:ea:52:8f:0b:3c:22:d1:de:0d:d2:85:9a:
f2:e7:9c:70:14:40:b2:fe:dc:8a:ad:a5:14:f7:a9:
2c:f9:75:47:db:27:01:99:c3:01:cb:9a:19:14:1a:
5d:b4:81:42:8f:8e:48:65:6c:15:16:12:23:02:e1:
5b:c6:be:04:ec:e0:6b:3a:85:11:37:d0:1b:f8:70:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:D8:7F:40:07:92:99:26:81:6C:3A:CA:51:D0:0D:A3:E1:E3:D1
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:39:53:f1:e2:52:66:c6:e5:fb:78:25:17:c7:31:8f:d1:ae:
8a:7d:9d:8e:cf:e4:a9:18:da:c0:d3:b1:09:61:6a:7c:f9:2b:
ba:21:51:1a:7a:89:3d:e1:61:df:fd:c3:91:ca:ba:df:c6:a9:
d6:59:1e:d5:de:25:22:84:6a:de:cd:bc:56:db:e1:ca:db:b7:
1a:ba:a7:5a:bf:e3:2f:03:c4:37:92:cc:ab:bc:65:81:e5:ab:
90:06:a5:04:fc:d0:10:9b:76:1d:87:12:08:4e:3a:41:71:94:
c4:80:fb:1c:c7:83:6c:dd:47:8f:c5:f2:4b:50:d3:4e:7c:8c:
f3:c0:a4:75:cf:48:dd:2b:f2:1d:40:11:a3:71:1f:01:73:25:
f0:77:fa:69:d1:a9:55:a5:58:77:38:33:fd:f7:8a:8c:59:a6:
ff:56:f5:31:7e:cd:20:c4:14:cf:f8:55:b8:08:57:1b:64:f7:
c6:24:d0:eb:c9:c4:21:fc:86:f6:12:3a:7d:16:8a:1c:74:ea:
25:6c:ca:d0:0e:b9:18:2e:21:a7:a8:7f:f5:13:20:c1:c1:99:
2b:2c:be:62:17:8e:1f:98:12:27:65:b5:6b:6f:4b:bb:37:65:
e2:14:02:a5:1f:c6:44:29:f1:18:98:af:ec:12:63:8c:0f:af:
2c:2f:c0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Fm2DZnKjFoik00ucw/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGI1MTNmN2U0NDZlMGNkNmRjZmU1NjgyOWJiYzlmZTQ5
OGQzZTgwHhcNMjYwMzI2MDIwMTQ3WhcNMjYwMzI3MDIwMTQ3WjAzMTEwLwYDVQQD
Eyg4Y2YyZDg3ZjQwMDc5Mjk5MjY4MTZjM2FjYTUxZDAwZGEzZTFlM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQW2kjXiVMnPnWJ1biwMGD6s2NQd
qYcUWpqJvQ0DWJtMdEGtH9hLzSipimItppoY6i934KcUbPBs7yLmkf9iWrxi8z2x
Q7t+9FFkRSi2pGZ6ycOID3r5tnaUHHM9V2v9wnnNjSv5t8rhG4On0o79uiDe5OXS
lJjbv6NnTuIkRsgwCQ2EUIBHLZSGqC+lIIvEc7oWaWYOykOOC6HjSFSAqYkDgyGY
anXnXDxkik05eBz+9XCAQZHqUo8LPCLR3g3ShZry55xwFECy/tyKraUU96ks+XVH
2ycBmcMBy5oZFBpdtIFCj45IZWwVFhIjAuFbxr4E7OBrOoURN9Ab+HDVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzy2H9AB5KZJoFsOspR0A2j4ePRMB8GA1UdIwQY
MBaAFEpLUT9+RG4M1tz+VoKbvJ/kmNPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvU2t0UlAzNUViZ3pXM1A1V2dwdThuLVNZMC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjlT8eJS
Zsbl+3glF8cxj9Guin2djs/kqRjawNOxCWFqfPkruiFRGnqJPeFh3/3Dkcq638ap
1lke1d4lIoRq3s28Vtvhytu3GrqnWr/jLwPEN5LMq7xlgeWrkAalBPzQEJt2HYcS
CE46QXGUxID7HMeDbN1Hj8XyS1DTTnyM88Ckdc9I3SvyHUARo3EfAXMl8Hf6adGp
VaVYdzgz/feKjFmm/1b1MX7NIMQUz/hVuAhXG2T3xiTQ68nEIfyG9hI6fRaKHHTq
JWzK0A65GC4hp6h/9RMgwcGZKyy+YheOH5gSJ2W1a29Luzdl4hQCpR/GRCnxGJiv
7BJjjA+vLC/AUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:07 2026 by rpki-client