Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: 6hfXLu4bgDWWmIQamtBHxtYp9njkj6KF5R4NEEpxdEI=
Subject key identifier: 37:4D:5D:47:46:6E:C9:A2:C2:01:42:8B:70:30:03:7B:F9:D4:45:89
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019F9391DD9F84F5DCB6634D1B9A55B6D1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 127C
Signing time: Fri 24 Jul 2026 10:00:37 +0000
Manifest this update: Fri 24 Jul 2026 10:00:37 +0000
Manifest next update: Sat 25 Jul 2026 10:00:37 +0000
Files and hashes: 1: IB9SPKJf1hxrd2KSGuACyZN7uFc.roa (hash: NYU4ucu/KEWsCULDRDB8CckdRivWVvULbQ16Mgwuhpk=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: DgE7v8Nix7jrg+t/vb68B5p61DInyYOwpQYB8jH9c8c=)
3: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (hash: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:dd:9f:84:f5:dc:b6:63:4d:1b:9a:55:b6:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Jul 24 10:00:37 2026 GMT
Not After : Jul 25 10:00:37 2026 GMT
Subject: CN=374d5d47466ec9a2c201428b7030037bf9d44589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:11:25:02:5d:12:14:88:58:8f:56:a7:8b:
fe:a1:f5:c0:f5:93:4a:03:e7:38:25:c1:f1:98:fd:
2a:e5:8a:59:59:e9:71:63:0c:5c:7b:38:c3:6d:82:
84:45:c3:39:01:d9:2f:ea:36:ef:21:e1:52:32:02:
74:a7:3a:05:57:34:07:4a:44:e5:14:76:da:02:cf:
65:2d:dc:20:31:07:48:a8:f9:e4:45:c3:24:cf:f0:
c2:b3:aa:51:17:9f:ed:1c:e0:64:af:fa:90:95:b8:
e1:cc:99:31:c6:ef:b8:f2:26:f3:d3:9a:3c:aa:63:
1b:a9:0b:9d:04:62:c0:e8:bd:a5:bd:a6:51:45:f4:
c9:76:23:37:7b:eb:5d:59:44:2e:f0:e6:96:12:0f:
be:45:a3:08:e1:ce:14:18:05:21:09:ab:e8:12:c9:
b7:36:7c:ff:df:f7:dc:ec:2c:b0:9b:33:79:6d:a0:
90:07:7e:0b:f9:be:b3:0a:4d:7a:0d:2a:39:3a:a4:
0b:5d:a5:5d:be:7a:34:e5:47:22:55:99:dc:0e:11:
f7:a9:ce:e7:aa:60:bb:9c:92:53:fa:e7:74:ad:ed:
73:06:2b:1b:14:d9:ec:d2:09:04:f0:2b:95:ed:3f:
7e:09:02:78:9e:7c:a1:22:73:c0:57:8f:5f:81:7b:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:5D:47:46:6E:C9:A2:C2:01:42:8B:70:30:03:7B:F9:D4:45:89
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3d:63:cb:06:c4:f6:2f:c2:fa:9b:87:8c:14:08:29:75:c4:
f7:fd:ab:be:78:b6:a0:25:98:66:8f:b6:e9:9d:89:a2:44:df:
96:58:bb:b7:76:c3:56:a6:38:22:67:7e:4e:32:23:57:74:b6:
ff:05:42:08:b3:ad:7f:71:88:ea:61:66:95:72:66:b1:d6:82:
b2:33:e5:f5:db:f2:50:71:e1:b6:2e:83:5e:81:f4:1b:81:27:
b9:c2:a1:73:9e:44:50:dc:a7:d3:74:d1:1c:64:20:e3:43:0c:
2b:c5:ef:52:b1:bc:37:19:b8:05:af:53:de:2a:cb:b1:a6:fd:
c4:d3:c5:33:80:d0:32:a1:8b:2d:a9:01:4e:bf:cd:c8:48:de:
f8:70:dc:b0:25:c0:a3:c6:06:55:04:ce:3f:4a:44:3f:8c:0f:
ca:59:a5:99:0b:13:bc:f5:4b:75:23:64:6d:91:f4:11:aa:1a:
76:00:79:62:ab:ed:1f:6e:ad:61:0d:e7:5a:08:21:93:3e:94:
12:70:73:7f:94:4d:6c:30:1e:60:8c:56:57:d9:59:6c:4f:97:
ad:97:cd:b3:91:2c:74:bf:5f:26:f9:50:c2:05:6f:21:a7:5e:
23:8d:c0:0c:dd:0b:e5:aa:ce:c5:64:37:63:17:c2:cf:d8:d0:
3a:8f:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:57 2026 by rpki-client