Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: jywP/0uXI/BEFswt8crBauwwL6fh+l62WmOiOTJ5Ufs=
Subject key identifier: 31:3F:D2:F3:E4:98:99:E2:03:62:4B:81:A7:FF:1C:CE:E2:8E:A5:C7
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 019D29CE143CE120E1B58BD69BC6EE0312C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 1181
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: m6EGJVtK2DvOLPL4vipGHytAKywKNPcB2OAzz0UB3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:14:3c:e1:20:e1:b5:8b:d6:9b:c6:ee:03:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=313fd2f3e49899e203624b81a7ff1ccee28ea5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:2d:02:e9:1f:b6:07:d7:b9:b5:20:ea:e2:
d9:fa:74:0a:8d:12:a8:4a:f6:3e:fe:37:91:6f:e2:
53:5d:a6:fc:d7:29:62:8a:c0:93:9b:04:da:48:36:
f1:18:22:fd:59:84:52:20:d6:b7:a4:f5:e7:c7:54:
18:14:3c:33:9f:43:3e:e9:e8:6d:d4:9f:2e:b9:11:
ff:92:22:3d:0a:0f:9a:5f:41:2a:55:8b:3d:d7:b9:
ea:b1:1a:8c:31:2c:e2:b9:f1:70:b2:af:aa:4b:87:
23:c8:8f:0f:b6:34:dc:dd:ec:62:e6:29:ab:56:ca:
2b:55:ec:78:e6:17:bd:2a:9f:98:1a:4b:2a:87:13:
a3:63:80:71:73:b4:1d:6c:46:4d:fc:a4:f2:24:0a:
7e:f2:25:20:11:2c:26:23:e3:7f:74:28:7d:6c:bf:
79:c5:10:52:68:9f:a6:bf:77:b0:7a:e5:25:c5:40:
b5:11:cd:63:de:44:27:d5:73:47:3b:91:92:69:be:
f9:4f:f6:c4:4c:c7:05:a8:09:ee:ec:ba:c4:4c:72:
9c:14:e7:1a:82:cc:e6:aa:00:89:da:50:b4:df:9b:
26:ac:aa:d9:89:f7:c1:ca:bf:7b:47:a5:e1:4c:a5:
45:b5:12:18:fa:f4:9d:fc:0d:b5:1d:a0:77:72:f2:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:D2:F3:E4:98:99:E2:03:62:4B:81:A7:FF:1C:CE:E2:8E:A5:C7
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:47:5d:31:4c:6e:11:4d:3d:ad:84:ad:e0:f6:bc:3b:65:2e:
e1:0b:5e:3a:0c:b8:0e:b0:a3:59:1d:7f:d4:ce:64:9b:a2:6b:
d5:fd:e9:d6:b5:10:5e:53:91:27:ba:9a:75:56:cb:7c:e3:a7:
b2:c3:78:74:84:6c:f8:e5:3b:f4:7d:55:bc:9c:fb:f4:a4:e5:
a1:95:eb:38:c1:ee:ca:d8:f1:6a:8e:1b:5a:6e:0b:eb:71:24:
c4:57:df:88:b1:91:0e:ad:5c:2a:c1:79:03:f1:54:cb:8e:16:
c5:d2:c1:8e:35:d9:55:00:13:a6:bd:a2:57:75:44:b7:f5:04:
ec:c6:9d:24:01:4c:30:26:eb:e8:33:41:9c:1e:34:e2:4c:77:
38:ce:1c:a2:e0:08:f7:44:aa:10:ec:4b:83:69:ea:88:86:25:
fd:b1:21:88:2a:d5:47:38:92:26:b8:28:e8:ea:a3:9b:ed:fd:
10:93:ea:8b:cc:b0:01:ef:80:22:39:54:78:14:d4:8f:97:4d:
79:d7:88:70:51:e3:6a:fe:56:86:c7:6e:eb:d1:fc:ed:38:b9:
d9:46:2d:18:6b:9d:e9:17:a8:9c:99:20:6d:ac:14:94:4a:7e:
d5:41:be:61:d6:6f:ec:af:d3:1d:9b:3c:19:6f:ad:7e:fb:ab:
09:ba:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:06 2026 by rpki-client