Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: SvA6BQHChebSVTPgbYSCK+54V7a2TpQIF+FSVAe8ubg=
Subject key identifier: 65:FA:02:27:99:BE:D3:AF:2D:30:CB:A5:2B:87:F5:3B:30:56:2A:1E
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019F9247EF0C4B70439383CEA22A78076F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 041E
Signing time: Fri 24 Jul 2026 04:00:15 +0000
Manifest this update: Fri 24 Jul 2026 04:00:15 +0000
Manifest next update: Sat 25 Jul 2026 04:00:15 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: I9Uzz45WlWDw5RnQtPx5c/kkkL36+u8/CH98EhqWyFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:ef:0c:4b:70:43:93:83:ce:a2:2a:78:07:6f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Jul 24 04:00:15 2026 GMT
Not After : Jul 25 04:00:15 2026 GMT
Subject: CN=65fa022799bed3af2d30cba52b87f53b30562a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:5e:f9:24:ec:a8:56:d3:f2:7b:a2:e6:95:
a4:9b:94:a5:4f:50:bb:b0:d6:6d:3b:04:df:3e:09:
e8:9e:aa:91:be:f2:7b:6f:26:21:40:c6:af:2d:52:
b8:24:89:df:1e:c6:e4:3d:84:75:8c:33:bf:a9:f5:
79:18:f3:22:0d:a4:b1:46:e8:28:c5:cf:5c:a5:b3:
2a:dc:3b:1b:26:dc:22:4f:f5:7e:51:02:89:fa:f3:
49:4b:cc:b9:02:3b:cf:93:c6:1b:84:af:0c:f3:db:
9c:b6:0d:ca:3a:69:16:a2:fb:cd:b5:83:31:ea:a6:
a3:c6:38:a3:f4:04:a9:c5:12:f4:ab:66:7b:ba:96:
af:9c:ef:f3:1b:55:10:e1:71:ba:26:51:ff:70:49:
02:2a:18:c0:3d:2c:94:6f:e0:65:3e:82:94:5a:bf:
34:9e:0d:30:65:4c:18:80:b4:4c:18:c9:a6:44:a9:
f8:69:e0:13:1e:42:e9:ea:3c:3d:c1:cd:58:b3:81:
8c:0a:16:62:d3:14:52:f0:11:3e:67:57:ed:5a:f8:
f9:c0:7a:87:e0:84:fa:5c:09:96:af:d1:55:5c:89:
2c:12:f0:63:65:36:55:81:df:62:b0:1f:03:bc:56:
3a:11:81:21:b3:96:c6:96:7e:29:d8:5d:e9:d8:52:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:02:27:99:BE:D3:AF:2D:30:CB:A5:2B:87:F5:3B:30:56:2A:1E
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:01:94:d7:d3:ab:ee:47:14:bb:b1:71:2b:ef:d1:54:8f:
f0:66:ad:6d:e0:78:81:1f:3f:e4:7a:0f:a9:9d:54:63:ea:ab:
89:f4:8a:f5:17:5f:71:d8:66:42:5d:a7:08:49:d7:ab:d1:ac:
d9:d3:57:66:ca:96:f3:db:fe:6e:c4:2a:2c:91:db:62:87:d5:
af:f6:13:0e:d6:6d:e4:dc:4a:27:c2:f4:42:d7:b1:44:b9:cf:
a9:ff:67:97:1b:df:0a:0b:bf:91:55:2e:95:82:15:a8:e5:b2:
c3:e6:3c:cc:5e:01:14:c9:e9:64:eb:ba:f1:c7:e4:81:aa:8a:
fd:dc:cf:42:d9:6b:b9:8e:f6:3e:8a:15:b6:e9:29:fa:62:93:
94:9a:6e:e8:2a:d1:58:60:4d:8a:c8:b2:7d:43:2c:83:f4:71:
27:57:bb:f8:56:58:22:96:31:c3:8d:33:4b:71:82:b9:13:42:
62:3b:91:7b:6b:82:2b:aa:7a:d7:2f:07:73:8b:dd:33:d6:ba:
96:19:38:bf:56:0b:67:08:22:56:40:1b:8e:55:da:49:41:7d:
a4:3f:dd:e5:a7:f1:d6:3a:e1:39:13:89:23:8f:b5:7d:25:1a:
e4:e7:0a:35:e3:54:a8:9d:a7:46:6f:46:57:c0:27:f7:3b:1e:
c7:c8:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:13 2026 by rpki-client