Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: pCXkMoc5LOPuROmFFux9qwYASLkCQVtI0osI9q9GBqA=
Subject key identifier: B6:C8:DD:AF:2D:F7:36:4A:33:0D:68:63:6F:7E:84:CB:1A:02:82:C3
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 019D27A86CA234E40A7724EFF016477BB50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 113B
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: IB9SPKJf1hxrd2KSGuACyZN7uFc.roa (hash: NYU4ucu/KEWsCULDRDB8CckdRivWVvULbQ16Mgwuhpk=)
2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: ++Iu2uPtW+3v/qxGZj+EP/IxC3DV3lxukxiVghT4yCw=)
3: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (hash: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6c:a2:34:e4:0a:77:24:ef:f0:16:47:7b:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=b6c8ddaf2df7364a330d68636f7e84cb1a0282c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:df:5a:67:38:24:41:65:66:f4:3d:74:b6:cc:
56:48:5a:c2:1c:69:c1:8c:1a:09:a5:64:e0:d1:08:
ef:6d:61:98:1a:83:c2:94:6a:de:52:b9:7d:ea:a7:
8b:cc:f6:42:8c:6b:7e:b1:7e:81:76:6c:01:f1:81:
c4:e1:7f:54:57:22:87:a2:4a:f5:f7:b8:12:8d:e8:
05:ef:80:53:7b:d0:15:3d:16:68:8a:3b:ce:ae:85:
f6:9d:3d:5f:66:58:c4:bb:6e:57:3f:63:de:3f:55:
73:8e:ca:b4:7e:82:3e:fe:50:f2:1c:d6:31:f5:60:
91:b0:57:3f:c4:8d:a3:af:f9:30:e4:da:48:85:6b:
41:23:09:e6:3f:37:05:37:4b:48:e1:24:19:37:27:
8e:9d:7b:da:27:2e:6d:bf:7a:14:28:de:5e:37:6e:
b7:7a:9f:ed:40:a2:5e:49:f4:55:22:9e:c2:f7:48:
75:d7:ea:57:74:b2:ee:a5:e1:5d:59:04:f9:a7:ff:
63:bd:68:c7:83:a3:68:14:5e:2f:19:0f:22:fb:9d:
39:79:41:3c:3a:b5:a8:01:b3:6f:57:fd:85:11:5c:
3f:9e:0e:26:c6:92:d4:87:04:4a:6d:fc:87:3c:78:
f1:b0:99:1a:0a:d3:54:4f:bb:e1:fe:a4:56:20:5c:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:DD:AF:2D:F7:36:4A:33:0D:68:63:6F:7E:84:CB:1A:02:82:C3
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:2e:ad:2a:b2:5c:43:2a:c0:1e:4d:c3:e3:7f:5c:96:0f:
f9:1e:c6:db:f3:ab:e9:92:f0:36:b8:04:a2:de:9b:4a:2a:22:
c7:02:07:05:9c:ef:52:72:e0:3a:a7:f0:d0:7c:a0:31:e0:a4:
02:e2:45:28:ff:89:48:50:9b:5b:21:dd:36:23:2a:05:e4:4b:
63:f3:b6:87:a1:ae:10:af:ff:92:3e:c3:d8:34:5d:8d:76:1b:
dd:6d:7d:c6:d7:5f:6e:ed:3b:b4:3d:83:2d:dd:00:f0:ba:62:
be:97:e0:89:8c:60:5e:d1:c0:12:dd:df:27:ba:31:5e:da:8d:
b0:2a:18:cc:18:aa:fe:96:a9:e8:de:1d:62:37:c3:9f:ed:6c:
9c:16:48:1c:53:57:31:62:1a:bc:16:54:53:59:5b:fb:d9:07:
4d:4a:6a:43:41:78:00:4c:62:2a:12:90:e5:c6:5a:10:7f:2d:
62:3c:24:d4:37:50:e1:0d:2a:fc:67:c6:1f:2c:12:49:58:59:
04:db:e8:7d:24:75:db:b6:a0:3c:b4:df:2f:89:78:59:c1:82:
43:76:39:27:7c:f5:48:29:d5:2c:f6:bc:be:d1:5c:cb:d6:06:
9f:10:f8:f7:19:eb:64:e9:a0:2f:b1:25:b7:97:7f:4a:98:01:
24:85:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:20 2026 by rpki-client