Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: LZiM+4wFRJlMUdtYByFyI73KfIvzZxjnTlG4FT8VMyU=
Subject key identifier: D9:7F:27:92:60:0B:A7:04:7E:9E:A1:D4:80:12:E1:58:29:43:27:FD
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019D284E0FE4A6B6760AEA3999625A324467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 02DE
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: s2bpeFMWea/JTI9e4kQETNTlDJxsdnh1Ja5rXOv7rzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0f:e4:a6:b6:76:0a:ea:39:99:62:5a:32:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=d97f2792600ba7047e9ea1d48012e158294327fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:41:02:e9:f9:b2:9f:cb:30:62:78:4b:83:
0c:d6:37:81:42:27:be:14:51:44:20:a9:10:1b:fe:
69:13:2e:3b:c8:e7:0b:b4:d0:7e:bb:b9:18:e9:a6:
d2:08:64:98:a9:91:31:11:b5:05:a9:a1:c3:bd:21:
0f:3e:90:b7:d2:79:5b:7a:f7:4c:9e:e2:b9:76:3b:
bd:13:c4:2c:76:ab:6e:68:fc:f2:cc:cc:2e:71:3a:
37:70:0e:83:28:4e:71:c1:29:34:a3:9c:47:e8:c3:
a5:46:f4:a6:fd:be:e8:5f:03:70:14:d1:2d:d5:0c:
20:89:f3:cf:48:cf:f1:ee:59:bf:fa:bd:f4:3e:2b:
f6:f2:e3:47:f0:4f:92:bc:f6:0b:15:08:43:2f:7b:
fe:23:67:69:d9:15:a9:19:11:bb:c5:b9:01:8e:ba:
5f:70:0a:6f:da:08:01:d3:31:70:14:c0:d5:48:07:
67:51:a0:09:15:0e:a8:30:3c:d8:ae:3c:1c:96:fa:
3d:c2:1b:b4:84:aa:5f:de:cb:df:d6:0c:50:48:f1:
7a:a9:54:0d:cb:5d:f1:a6:76:b8:bf:74:d2:6d:75:
51:7d:d0:08:3e:ee:d2:ee:a0:da:76:69:f9:a1:38:
54:fc:aa:79:16:72:70:ee:97:69:2e:2c:cc:e1:ae:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:27:92:60:0B:A7:04:7E:9E:A1:D4:80:12:E1:58:29:43:27:FD
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:80:b4:8a:ea:c9:55:2a:91:1a:08:1a:58:ad:5d:eb:f3:
39:21:d3:c8:65:84:45:1c:47:92:db:a9:a6:c8:ea:b8:13:e4:
a7:18:1d:ee:f8:a3:8f:63:6f:28:1e:b5:96:21:74:7a:b2:3f:
c9:75:26:24:55:0f:e0:44:da:aa:1d:b8:82:b5:c9:76:31:f4:
66:35:68:5d:86:0c:c1:88:cb:aa:3e:f0:5e:f5:9f:bd:ec:84:
be:77:1e:d2:2c:3a:8b:b1:c9:80:9b:95:66:a7:fb:58:57:fe:
96:8b:28:ca:d2:4f:2e:28:a4:66:6f:9a:91:94:bf:0d:f2:ab:
4d:4d:c6:5f:b6:86:c4:53:0d:75:00:e5:f1:f1:56:2c:9d:91:
28:4c:53:ed:69:4b:f0:c9:17:50:f1:4f:74:4e:0c:a5:85:f7:
96:69:0c:79:6e:73:7f:5b:21:62:e1:06:c5:50:78:ae:bd:b4:
49:fa:fa:19:5f:af:76:d7:8e:6b:38:6e:bd:81:3d:f8:17:16:
60:83:9b:dc:69:51:13:ac:1e:a8:3f:27:ed:ed:c0:99:b0:a8:
68:08:f7:18:60:a0:09:cf:4d:2f:55:08:aa:0f:81:37:95:47:
ad:5b:fa:50:42:3c:ce:85:21:cb:36:5a:f2:b6:d3:57:ec:71:
26:a9:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:10 2026 by rpki-client