Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: bet6zdQTR1J8uXSbWLgvWYVqVaSmP3+toIc9THf18t8=
Subject key identifier: 15:FC:8A:3B:A7:CC:0A:69:67:BD:C4:85:35:FF:26:FF:F7:F3:56:EB
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 01A1046DADEFD49A26DDCCAE851C32470F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 133B
Signing time: Sun 04 Oct 2026 01:00:59 +0000
Manifest this update: Sun 04 Oct 2026 01:00:59 +0000
Manifest next update: Mon 05 Oct 2026 01:00:59 +0000
Files and hashes: 1: IB9SPKJf1hxrd2KSGuACyZN7uFc.roa (hash: NYU4ucu/KEWsCULDRDB8CckdRivWVvULbQ16Mgwuhpk=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: kqDzr9gG3g8FAXHvDCnHTjIpNbU+DbKFuM0Ruh0mitE=)
3: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (hash: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:ad:ef:d4:9a:26:dd:cc:ae:85:1c:32:47:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Oct 4 01:00:59 2026 GMT
Not After : Oct 5 01:00:59 2026 GMT
Subject: CN=15fc8a3ba7cc0a6967bdc48535ff26fff7f356eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:25:13:eb:89:97:e2:5e:a7:d4:12:74:0f:
d4:5b:06:a3:a0:5d:5b:43:f5:03:95:31:b6:cb:d9:
19:31:1d:16:56:59:ca:e1:4a:5a:ce:84:d5:39:ab:
11:97:8b:fe:22:6c:5b:7c:fe:3c:e4:e9:86:3e:ad:
72:73:ed:64:8d:4c:55:35:72:a5:16:24:40:db:4b:
e0:6b:cc:15:0b:a0:9e:fe:be:05:ec:09:c8:61:ba:
cf:b1:60:d0:be:62:97:0b:76:e5:a6:e5:b5:36:99:
98:fc:be:c1:30:62:b1:a4:c7:38:cb:f0:b7:94:b5:
4a:63:51:a9:7e:11:c1:07:9a:1a:80:3c:25:f6:1d:
32:24:48:8f:26:67:7d:7b:66:6b:b6:43:88:0a:13:
8e:98:9c:2e:66:1e:5d:50:10:cf:86:bc:1b:de:dd:
32:80:8c:66:1d:cb:1c:4e:53:64:06:21:c1:6b:fb:
da:4d:76:62:d5:08:58:56:7d:7e:a1:82:b8:e7:e3:
2e:ec:11:10:cd:5c:58:6b:5d:c8:81:25:cb:d5:2d:
27:c6:00:33:1d:36:74:c5:df:cd:c7:37:8d:cb:58:
d2:89:4c:2f:fa:b4:5f:fa:95:74:64:98:1c:73:61:
38:b7:67:f7:e7:6b:5d:be:dd:ba:fa:6a:67:f9:12:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:8A:3B:A7:CC:0A:69:67:BD:C4:85:35:FF:26:FF:F7:F3:56:EB
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:31:96:93:fe:42:84:cf:64:1e:00:6d:b4:83:0c:72:2b:f4:
7d:64:77:79:88:fc:18:71:cf:15:f6:f2:20:5d:3d:5d:d1:e8:
a2:32:11:ca:0a:2b:0d:ea:a3:01:3c:1a:5d:a5:c9:d7:80:0b:
65:1f:be:f5:97:e8:b4:62:bf:16:9e:aa:58:31:cc:ee:b2:44:
7e:3f:61:3f:97:25:1e:3e:0d:6d:b7:3d:e3:6d:8b:4a:fa:ec:
73:49:8a:04:7f:09:f0:c7:3a:8b:12:f6:f6:7e:c5:04:13:80:
d0:51:c1:15:e8:9a:16:e6:4a:1c:0e:82:e0:1b:db:2b:14:57:
6f:b0:dc:0e:ab:f9:ea:7b:ae:4c:77:eb:4b:e5:df:80:d7:6f:
ba:b8:38:42:a6:98:72:64:5c:55:c6:25:2b:4a:cf:1b:1b:16:
fc:65:09:3e:2f:2c:c4:36:2a:d4:14:53:7d:42:7d:da:36:45:
7b:ea:3a:0a:9a:5a:1f:2a:16:c1:7b:df:60:0c:dd:66:7f:4b:
f1:b8:bb:2f:06:ed:21:76:49:12:e4:2f:4f:e0:9a:73:0b:b1:
31:79:6b:de:36:76:d4:6d:92:fc:20:fe:a6:c8:7e:34:74:c4:
7d:05:88:8e:15:41:73:58:92:dd:d6:9a:21:e1:13:0d:d7:af:
23:8d:4c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEba3v1Jom3cyuhRwyRw+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDA5NTU1MTA1MDQwNTc4Y2IyOTYwNzAwNzRmNDUxMDcy
NTJlZWIwHhcNMjYxMDA0MDEwMDU5WhcNMjYxMDA1MDEwMDU5WjAzMTEwLwYDVQQD
EygxNWZjOGEzYmE3Y2MwYTY5NjdiZGM0ODUzNWZmMjZmZmY3ZjM1NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAwlE+uJl+Jep9QSdA/UWwajoF1b
Q/UDlTG2y9kZMR0WVlnK4UpazoTVOasRl4v+ImxbfP485OmGPq1yc+1kjUxVNXKl
FiRA20vga8wVC6Ce/r4F7AnIYbrPsWDQvmKXC3blpuW1NpmY/L7BMGKxpMc4y/C3
lLVKY1GpfhHBB5oagDwl9h0yJEiPJmd9e2ZrtkOIChOOmJwuZh5dUBDPhrwb3t0y
gIxmHcscTlNkBiHBa/vaTXZi1QhYVn1+oYK45+Mu7BEQzVxYa13IgSXL1S0nxgAz
HTZ0xd/NxzeNy1jSiUwv+rRf+pV0ZJgcc2E4t2f352tdvt26+mpn+RJxMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX8ijunzAppZ73EhTX/Jv/381brMB8GA1UdIwQY
MBaAFEpAlVUQUEBXjLKWBwB09FEHJS7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEt
NWU3OWI0NDM1ZTJjLzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEtNWU3OWI0NDM1ZTJj
LzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjGWk/5C
hM9kHgBttIMMciv0fWR3eYj8GHHPFfbyIF09XdHoojIRygorDeqjATwaXaXJ14AL
ZR++9ZfotGK/Fp6qWDHM7rJEfj9hP5clHj4Nbbc9422LSvrsc0mKBH8J8Mc6ixL2
9n7FBBOA0FHBFeiaFuZKHA6C4BvbKxRXb7DcDqv56nuuTHfrS+XfgNdvurg4QqaY
cmRcVcYlK0rPGxsW/GUJPi8sxDYq1BRTfUJ92jZFe+o6CppaHyoWwXvfYAzdZn9L
8bi7LwbtIXZJEuQvT+CacwuxMXlr3jZ21G2S/CD+psh+NHTEfQWIjhVBc1iS3daa
IeETDdevI41MnA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:18 2026 by rpki-client