Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: B/MEdYMHGxEld+5m0yDcDqqPZLXQY7g1DiMY6KMl/EM=
Subject key identifier: A2:59:94:A0:DC:10:8F:64:21:E5:39:C5:78:74:A1:9E:38:69:CD:61
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019E216DE17FA8870E6812A3D912A621F051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 035F
Signing time: Wed 13 May 2026 13:01:49 +0000
Manifest this update: Wed 13 May 2026 13:01:49 +0000
Manifest next update: Thu 14 May 2026 13:01:49 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: v73ypt4qfIAcWS4FzWfJ6vgB5g2bkypNMFWFrIkWbhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:e1:7f:a8:87:0e:68:12:a3:d9:12:a6:21:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: May 13 13:01:49 2026 GMT
Not After : May 14 13:01:49 2026 GMT
Subject: CN=a25994a0dc108f6421e539c57874a19e3869cd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:af:95:86:8d:6e:03:35:a9:a2:3b:83:f6:
81:b0:2a:c2:fe:d2:f8:9a:27:db:f4:6f:c1:fe:1e:
2e:b7:d3:c6:d0:23:4a:b8:8b:5d:61:62:a3:2a:ab:
97:3f:a0:82:2d:ee:43:08:15:27:2c:41:e6:a1:68:
24:d3:ea:01:5b:e7:f3:f7:cd:40:3d:96:f4:38:4e:
20:d7:e8:47:f1:88:aa:7f:d5:86:ca:e2:82:d1:31:
70:8c:8f:a7:7c:04:e6:65:78:1c:29:99:82:8e:9b:
89:5f:e9:d5:a2:28:51:be:ac:da:4c:bf:6f:6d:43:
57:de:09:ee:c1:e9:d5:79:e3:e2:10:60:2b:39:df:
39:2f:18:9b:46:81:0a:52:1d:65:c4:c8:1a:a5:27:
87:d7:12:e0:67:ce:fd:96:8a:ec:c0:3a:91:dc:9a:
af:b0:7e:78:58:f1:b4:be:d9:8c:d1:6f:89:64:d6:
b3:e8:7f:aa:ef:0b:75:98:ad:ee:98:5e:f5:b7:56:
44:e1:30:43:13:93:9c:3d:31:42:f7:32:72:5a:98:
e8:ac:88:7f:82:39:3f:d0:49:92:0e:88:95:01:04:
33:e0:7b:b5:3b:e4:b6:7e:b5:cf:69:a0:ac:11:8e:
4a:b2:55:65:d6:e6:57:3f:81:ba:0d:b1:c8:af:24:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:94:A0:DC:10:8F:64:21:E5:39:C5:78:74:A1:9E:38:69:CD:61
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:35:09:2d:c6:a8:d4:60:04:a7:b3:c2:2c:9f:76:bc:91:
7d:b6:c0:c2:88:0d:67:76:b8:46:b1:c4:21:37:96:b8:8b:ed:
e0:6b:2b:29:08:30:09:87:2c:12:b4:74:90:8c:6e:9d:41:04:
18:0a:b6:d7:15:34:aa:7a:c6:c4:0f:19:cc:b4:75:18:98:88:
f1:07:43:a7:05:fa:a1:c8:cd:3c:e0:a9:aa:7d:76:89:0c:c1:
f4:b7:da:36:3e:33:c6:f4:14:91:3a:00:7b:87:32:bd:21:32:
52:97:d6:d5:2b:fe:c7:51:77:bb:e2:24:bd:99:be:a7:72:30:
e5:31:07:70:5e:af:78:1f:b4:ec:0f:c2:a8:48:1a:92:01:8f:
25:f0:b3:6c:a2:da:4f:35:9e:ea:cb:59:3c:f2:15:65:13:97:
9b:63:ca:e7:cd:4b:ee:cc:2a:af:c2:d0:c5:f6:23:56:1b:ff:
20:d2:f8:a4:38:41:a0:e4:09:31:2d:1a:a0:46:c0:53:81:7a:
e5:6b:dd:63:2a:9f:1e:08:76:94:b5:e4:03:cc:66:4c:f3:53:
50:d1:9d:7d:75:04:81:cc:24:b8:e7:6a:ce:31:0f:8d:8e:31:
06:76:39:3c:af:16:46:f2:cc:aa:c9:df:e4:6d:ea:6b:36:c3:
e9:8e:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:56 2026 by rpki-client