Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: 2vpIBP6pgqRHALpLvQjwakh2aah2aHe0N0g/+LKKnvc=
Subject key identifier: 20:57:0F:40:1D:AE:FD:A0:97:E6:70:E2:7C:AE:5F:23:3F:35:4F:A9
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 01A105135C9AFA950F3F0E27DB71B3A4EC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 04DE
Signing time: Sun 04 Oct 2026 04:01:57 +0000
Manifest this update: Sun 04 Oct 2026 04:01:57 +0000
Manifest next update: Mon 05 Oct 2026 04:01:57 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: VD0mADiGaxuJHm+h9YCsQ1eXuK0QpysS8NA8ZYAoH8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:13:5c:9a:fa:95:0f:3f:0e:27:db:71:b3:a4:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Oct 4 04:01:57 2026 GMT
Not After : Oct 5 04:01:57 2026 GMT
Subject: CN=20570f401daefda097e670e27cae5f233f354fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:4e:9d:c6:b2:8f:2f:ae:49:52:db:df:5a:
55:1d:49:0a:1d:56:9c:a4:d5:b4:6b:90:75:7f:b1:
23:be:94:1a:3b:64:a6:bc:25:15:49:fe:22:d4:f2:
bb:56:d8:b7:54:4d:d1:a8:75:86:17:2e:cc:c1:3c:
b0:7b:72:5b:83:dd:fd:3a:c1:d3:e2:24:15:30:41:
55:6c:64:b7:3b:7e:03:85:4b:e6:11:45:dc:e0:b0:
da:f9:5e:21:04:ac:d6:99:ec:ba:52:be:ed:48:3f:
60:d3:b7:d1:0c:e8:56:e9:fd:3c:73:0f:a2:f3:b7:
82:93:2e:75:17:eb:ac:2a:a9:49:cf:7c:e4:a2:82:
d5:de:89:31:18:f7:ab:0c:ae:fb:81:26:d1:c9:71:
d3:89:ac:07:51:b6:dd:46:4b:1d:ea:e9:2c:82:67:
f8:75:4a:ab:16:8f:b2:e6:0c:14:c5:ae:4c:36:fa:
b5:33:70:e4:b6:3c:79:a9:d6:ce:db:7b:75:07:fd:
4f:18:c3:46:1c:fc:fd:b0:85:0a:0f:f0:f3:b6:54:
96:fb:df:5f:7c:0d:27:f4:9c:30:60:79:d1:d5:bf:
fa:80:36:cc:f2:c9:1f:71:d0:9e:92:71:24:64:b8:
32:85:e4:f1:9a:c0:cf:5c:35:e6:cd:82:f9:c4:88:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:57:0F:40:1D:AE:FD:A0:97:E6:70:E2:7C:AE:5F:23:3F:35:4F:A9
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:68:15:e6:f4:01:e9:ea:93:04:49:a2:8f:f9:af:8f:39:
b7:4b:ed:59:e3:11:ae:f7:1c:d9:91:fa:95:d1:62:67:08:ac:
db:f1:86:7d:b9:1d:93:d7:7e:53:84:c0:ff:44:83:df:5c:05:
8d:d5:80:94:4f:7a:38:37:71:9a:26:dc:29:ed:e6:92:65:63:
63:4d:37:92:55:ec:5f:7d:fe:bd:a6:b9:11:04:a9:fd:0b:f3:
54:29:f2:0d:91:f8:51:88:7e:92:22:48:73:80:df:cd:5a:13:
31:14:a0:03:df:66:2a:3d:19:58:44:33:fe:c7:44:37:a9:b5:
7c:8d:cc:83:71:d7:26:d0:91:4f:d7:82:9b:fc:04:d3:11:27:
b9:64:3a:b8:84:a1:9c:4c:66:e2:c0:6e:68:60:6f:fc:be:05:
fe:51:b0:ea:75:5f:9b:d3:67:e9:7f:96:d3:f9:02:f3:b4:49:
47:cd:8b:75:7f:c5:38:e0:a8:3d:31:08:3d:59:c5:f4:47:e5:
b5:31:ce:26:51:1a:d7:b1:da:0f:9d:a2:98:ef:0e:fa:18:83:
0b:9b:5b:18:47:bd:48:12:f0:a7:38:0b:40:c3:3c:d8:71:0a:
c0:cb:3f:29:5b:93:67:f0:41:bc:94:1b:03:18:0d:63:2a:0f:
6f:7c:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:58 2026 by rpki-client