
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: YerBiP4s4W9+G5yRSpdYdtLh7Gd2ZX3v7KD4kdbmkiw=
Subject key identifier: EE:E4:77:1A:4F:0A:D6:48:A3:1E:AC:59:CF:88:48:82:29:E3:8A:7E
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019E20C84ECDEEAD39C2D5FE28A4DEBED625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 11BC
Signing time: Wed 13 May 2026 10:00:58 +0000
Manifest this update: Wed 13 May 2026 10:00:58 +0000
Manifest next update: Thu 14 May 2026 10:00:58 +0000
Files and hashes: 1: IB9SPKJf1hxrd2KSGuACyZN7uFc.roa (hash: NYU4ucu/KEWsCULDRDB8CckdRivWVvULbQ16Mgwuhpk=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: p3w6yP4Ec5D1CFsmBi6QHVx2IUfQLxRe5puTCm3234A=)
3: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (hash: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:4e:cd:ee:ad:39:c2:d5:fe:28:a4:de:be:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: May 13 10:00:58 2026 GMT
Not After : May 14 10:00:58 2026 GMT
Subject: CN=eee4771a4f0ad648a31eac59cf88488229e38a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:7b:ec:38:2a:15:2f:1c:a1:7d:e6:04:c6:
ac:5a:61:04:64:02:d1:9b:cf:cb:10:12:8c:e8:23:
7f:0a:ea:0a:62:63:3e:1d:29:c4:aa:39:a5:12:36:
7e:19:09:7b:35:4a:a4:55:05:a7:bb:44:c5:e5:db:
67:ea:88:d0:cc:b9:c1:69:06:1b:a7:ae:37:f7:e5:
51:f3:e5:6e:83:8d:6b:bf:5f:95:2b:f0:a5:5c:d5:
00:0b:85:cb:e4:c3:aa:e8:67:29:f9:04:26:3b:80:
10:d3:6a:2d:fc:2f:7c:8e:16:02:11:ce:eb:1c:64:
58:d7:e7:00:56:f7:43:0a:59:73:df:de:0e:8b:4b:
18:bf:2c:9d:dd:7c:92:52:31:7e:23:9d:be:3e:be:
cf:0c:e7:c9:51:99:6c:1b:b6:07:f1:8e:76:47:f0:
a7:02:6d:b4:13:41:d3:07:98:86:be:c5:42:11:cd:
75:9c:ae:ca:9f:29:b7:f8:f1:e6:94:a9:92:33:6b:
67:32:75:87:14:cc:f3:fc:68:cf:d3:48:09:e0:6a:
47:66:84:09:69:4d:e3:b1:6a:2e:30:53:dd:ac:7f:
3a:ed:d0:c4:07:19:79:1a:3e:54:70:26:72:ac:e0:
45:56:37:80:4c:3c:e0:d7:08:d6:6b:56:77:0e:87:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:77:1A:4F:0A:D6:48:A3:1E:AC:59:CF:88:48:82:29:E3:8A:7E
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2e:cb:ba:43:68:9c:e8:06:8a:0c:0d:61:fc:28:94:ce:1a:
80:82:cc:df:ee:a6:14:0f:3c:4e:bd:93:46:24:49:8f:aa:27:
c8:96:6a:b6:2a:94:53:db:44:33:10:87:7f:5b:19:42:f5:19:
09:6f:67:86:d0:e6:64:18:12:b7:ab:b8:6d:7c:22:26:dd:e5:
6b:52:4a:e9:e4:24:2f:49:5e:09:58:09:fc:7e:ba:ad:1a:a8:
39:fe:ff:fc:a7:a6:5f:78:52:99:82:1b:e0:aa:b0:a2:ad:c4:
a7:3a:09:28:6e:af:8c:09:6f:86:c2:16:53:c5:bb:f0:ce:f1:
a7:20:c2:f1:74:25:22:48:6e:5f:80:d1:3b:22:33:c6:db:df:
1e:ee:29:7f:92:65:fe:0a:84:c0:68:12:53:85:5e:32:f2:09:
77:21:70:a0:2d:6f:77:c5:eb:a3:94:8a:21:34:6f:3d:fa:f5:
27:06:da:6a:99:ac:0f:d5:19:e2:4c:b7:25:ec:94:95:fa:ee:
07:f5:cb:ef:f3:fc:22:d3:a1:85:f0:80:05:25:d2:a1:5d:8e:
71:55:42:a4:f1:1f:18:57:d4:8c:b4:95:df:33:ea:aa:5d:73:
0e:7d:7b:5f:11:09:01:84:e0:e2:b9:ed:15:bd:16:5c:c0:91:
67:cc:32:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyE7N7q05wtX+KKTevtYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDA5NTU1MTA1MDQwNTc4Y2IyOTYwNzAwNzRmNDUxMDcy
NTJlZWIwHhcNMjYwNTEzMTAwMDU4WhcNMjYwNTE0MTAwMDU4WjAzMTEwLwYDVQQD
EyhlZWU0NzcxYTRmMGFkNjQ4YTMxZWFjNTljZjg4NDg4MjI5ZTM4YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPB77DgqFS8coX3mBMasWmEEZALR
m8/LEBKM6CN/CuoKYmM+HSnEqjmlEjZ+GQl7NUqkVQWnu0TF5dtn6ojQzLnBaQYb
p6439+VR8+Vug41rv1+VK/ClXNUAC4XL5MOq6Gcp+QQmO4AQ02ot/C98jhYCEc7r
HGRY1+cAVvdDCllz394Oi0sYvyyd3XySUjF+I52+Pr7PDOfJUZlsG7YH8Y52R/Cn
Am20E0HTB5iGvsVCEc11nK7Knym3+PHmlKmSM2tnMnWHFMzz/GjP00gJ4GpHZoQJ
aU3jsWouMFPdrH867dDEBxl5Gj5UcCZyrOBFVjeATDzg1wjWa1Z3DocyNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7kdxpPCtZIox6sWc+ISIIp44p+MB8GA1UdIwQY
MBaAFEpAlVUQUEBXjLKWBwB09FEHJS7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEt
NWU3OWI0NDM1ZTJjLzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEtNWU3OWI0NDM1ZTJj
LzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApS7LukNo
nOgGigwNYfwolM4agILM3+6mFA88Tr2TRiRJj6onyJZqtiqUU9tEMxCHf1sZQvUZ
CW9nhtDmZBgSt6u4bXwiJt3la1JK6eQkL0leCVgJ/H66rRqoOf7//KemX3hSmYIb
4Kqwoq3EpzoJKG6vjAlvhsIWU8W78M7xpyDC8XQlIkhuX4DROyIzxtvfHu4pf5Jl
/gqEwGgSU4VeMvIJdyFwoC1vd8Xro5SKITRvPfr1JwbaapmsD9UZ4ky3JeyUlfru
B/XL7/P8ItOhhfCABSXSoV2OcVVCpPEfGFfUjLSV3zPqql1zDn17XxEJAYTg4rnt
Fb0WXMCRZ8wyzw==
-----END CERTIFICATE-----
Generated at Wed May 13 19:49:00 2026 by rpki-client