Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File: SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier: BpeVif/kpo6RMYOM9pIWQAga0dpdEniasWAd6wmNOk0=
Subject key identifier: 3B:AB:6D:DE:C2:A4:8E:79:30:EA:A0:8E:61:3D:67:31:6B:F8:3A:A2
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer: /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial: 019D25BA65A147AF05BBC9D4110174AB9280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number: 060A
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: 9B9cIsuud2c5TApX7EXTmxZzIwnlUvfK7Djq83g3INU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:65:a1:47:af:05:bb:c9:d4:11:01:74:ab:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=3bab6ddec2a48e7930eaa08e613d67316bf83aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:99:e6:be:9c:1d:e8:d1:69:17:fb:27:42:
61:d8:a6:9f:e4:b3:1e:88:63:7e:a4:9c:f7:d1:5c:
48:cc:97:3f:16:f9:e1:aa:88:5e:f7:a1:1c:77:01:
33:48:40:f6:16:e7:6e:82:e6:69:e4:4d:00:39:a3:
df:c9:f7:b5:39:82:8f:b8:14:83:c6:f0:74:2c:00:
08:ba:fe:ee:2c:3e:93:3f:57:c3:f5:98:88:fb:67:
38:82:5f:26:af:5f:0e:29:e2:57:06:46:8b:40:10:
30:08:7f:c1:df:0d:97:cf:28:f4:3c:63:aa:09:21:
e1:21:84:95:5f:a1:bf:c4:b3:d2:8f:b0:fa:69:e2:
eb:f2:6a:41:20:02:a3:80:96:1e:61:96:b1:88:4f:
0c:48:09:e3:0e:16:02:e3:31:ab:55:64:99:77:5b:
c2:35:fd:ae:10:57:60:ff:21:c2:09:1e:e8:79:f8:
73:d5:44:35:fe:87:c9:3e:df:61:b2:f7:55:f9:60:
3b:81:cc:8c:73:4b:86:f1:8e:5f:0b:b8:b8:93:a4:
f6:02:63:b1:3a:2c:37:44:e9:68:32:26:6a:3a:c7:
50:b2:05:98:6c:60:48:a8:f3:1c:27:9d:6a:c9:2d:
b6:0b:89:5d:6a:b7:fe:74:e7:3d:61:25:f6:ec:bb:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:6D:DE:C2:A4:8E:79:30:EA:A0:8E:61:3D:67:31:6B:F8:3A:A2
X509v3 Authority Key Identifier:
keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:0e:5a:17:16:94:b2:ea:b0:f2:af:d7:e5:e2:57:7f:58:
0d:83:1e:04:d9:d3:22:c5:a3:44:5e:07:4e:72:cf:1d:bc:70:
fc:ab:e3:56:96:56:5c:e7:33:53:c7:91:66:49:28:df:c2:e6:
af:61:ef:e8:b6:cb:0e:d0:c7:e0:72:09:8e:a5:b7:8a:6e:f7:
9a:63:3a:16:d2:89:c6:62:23:04:8b:f9:89:26:f0:4c:79:ad:
80:8d:e6:6f:6b:95:a1:d3:0c:cc:0a:18:3f:40:c8:71:0f:ff:
17:9c:a6:9b:bd:b9:83:c0:ce:70:51:6b:2e:73:77:92:53:82:
f9:a9:72:28:fa:84:ca:33:f2:13:1a:2d:8f:06:4e:ec:4e:f6:
f0:32:45:fe:1f:93:83:6d:6e:a2:ee:b9:f1:5f:b2:da:de:97:
a2:b8:73:42:d6:ac:0e:f2:33:40:e8:ac:48:90:56:3a:3f:44:
6c:53:98:b8:05:b5:1b:5c:33:b9:e0:27:ee:a0:2e:38:99:db:
2b:d0:5e:c2:6c:c6:98:09:7a:8d:c2:da:06:f6:02:a4:d4:c8:
33:b6:7c:bf:1a:83:41:11:b1:15:47:03:96:ba:03:27:29:f1:
8f:9e:f6:ac:e2:eb:1d:d4:81:6f:b1:f8:d9:a6:f2:64:3f:b5:
66:95:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:21 2026 by rpki-client