Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: swqb/94d0ZqxUYiKG8lVxX4F0WFFHu0vd0qBwW0t6KU=
Subject key identifier: F9:56:AB:5B:C8:75:C4:11:84:3E:69:F5:47:CD:ED:C1:BB:49:59:31
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 019D27E05134D94147312C97F666BE71988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 1180
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: NIVw741XEPPSN6oP0Msosmkxzog.roa (hash: 81sIUsuDOEVQ3nze8u1y0++GrZqpK3rQuE99u/xjAtI=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: M5wwci0+lXW2r/vsm69rgE0nT8XtO7TAX0eqoArR9v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:51:34:d9:41:47:31:2c:97:f6:66:be:71:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=f956ab5bc875c411843e69f547cdedc1bb495931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:71:7a:3f:f9:31:01:a5:5b:e3:e5:cc:0c:
7f:6c:4c:f0:a5:79:e9:c1:79:0f:d9:f9:c1:4e:f8:
34:86:33:3f:95:83:05:dd:13:4f:66:21:1f:8b:36:
25:78:0f:c6:ea:0d:a1:15:12:d2:15:1f:b0:67:d2:
55:f9:f5:60:39:12:57:d6:8d:2b:df:6f:5d:3c:d7:
eb:18:65:ce:cc:46:b1:e4:e3:e8:40:9a:c4:85:62:
19:87:ac:33:80:d4:0d:5f:46:71:3f:1e:98:d8:ae:
32:39:00:d8:99:fe:83:33:17:f4:5f:02:22:d7:b8:
eb:d8:c5:df:66:7b:05:8c:46:0b:ce:82:7b:83:c6:
8c:c7:01:be:7e:8d:36:88:33:f7:71:90:8c:4d:62:
e4:3b:22:10:bf:4c:33:87:3b:da:9a:c8:a8:71:30:
85:8e:84:06:8c:e0:b8:83:59:90:d3:80:c8:af:9b:
45:8e:8e:bc:78:a1:f3:8e:82:66:69:4a:ad:33:0a:
fc:db:e5:41:a6:af:9d:9b:80:a5:9d:0e:ad:00:d7:
e4:25:2d:83:fb:ff:96:77:2e:9a:4f:72:b2:94:c3:
b9:22:a1:bd:8b:d8:d6:68:2b:86:81:8f:6d:32:b2:
22:2c:04:11:5f:b7:78:ec:78:65:b4:fe:61:94:f2:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:AB:5B:C8:75:C4:11:84:3E:69:F5:47:CD:ED:C1:BB:49:59:31
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:50:04:21:de:df:54:45:46:ef:1e:ee:21:d3:d8:a4:81:
43:c1:29:48:78:ea:29:44:bb:aa:f9:38:2f:d4:59:9f:db:dd:
d9:40:d0:b5:0a:97:38:0f:8d:64:0a:af:93:37:8b:b1:0d:07:
94:9c:87:97:5f:bd:51:29:21:23:25:0b:17:9a:0a:1f:aa:ce:
49:ec:f0:98:d7:c8:4e:12:24:1f:77:d1:14:62:02:4f:02:13:
8a:95:b4:e9:25:69:51:6f:35:14:39:32:88:82:a9:e3:65:df:
d3:a9:dd:b4:4d:50:8a:89:92:0a:44:3c:d7:79:32:2c:dd:92:
ac:bb:72:52:80:1e:95:55:d9:7e:d7:3b:12:7c:00:1f:e6:22:
58:34:d4:bd:79:8d:bc:04:11:ae:9d:e6:eb:d0:e7:be:55:b9:
ae:da:52:b6:44:5d:fd:e6:5f:52:f7:70:33:8e:34:1d:35:55:
45:c6:b6:01:e7:fe:49:cf:b2:2b:68:a9:de:c5:3e:4c:a2:60:
4f:72:41:33:28:92:1e:87:0e:19:c2:3c:eb:cb:42:b6:a8:20:
2b:d0:87:e4:e9:50:88:60:3e:01:20:8b:f7:c8:a8:ce:f6:80:
a0:a2:90:84:7e:b8:10:78:22:f5:07:97:5e:2d:64:aa:a8:28:
fc:04:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:16 2026 by rpki-client