Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: zt+y1bi3sqKEnF7V0s4I7sPEQc8ZPwMSV/V2/taA+i8=
Subject key identifier: 14:C6:B9:D2:9F:33:56:F1:BC:90:9E:73:F0:8B:96:FE:C0:9B:F2:E9
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 01A0F97CD344BB1C6E612825D75E27753C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 22:01:41 +0000
Manifest this update: Thu 01 Oct 2026 22:01:41 +0000
Manifest next update: Fri 02 Oct 2026 22:01:41 +0000
Files and hashes: 1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: xu21YuFeVy8KZgazzaZ/IM0d+Y217XyQpEj8tSxlu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7c:d3:44:bb:1c:6e:61:28:25:d7:5e:27:75:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Oct 1 22:01:41 2026 GMT
Not After : Oct 2 22:01:41 2026 GMT
Subject: CN=14c6b9d29f3356f1bc909e73f08b96fec09bf2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:5c:f0:73:7c:c9:d8:1d:56:b0:1b:ea:6a:
34:77:9c:b8:e3:8f:2d:bd:92:ee:43:36:05:19:53:
45:51:13:65:92:a7:87:5b:9d:0a:34:5a:54:07:b2:
f4:4f:fa:62:60:e2:38:8d:2f:d6:75:2a:07:dc:ce:
75:f6:87:b5:c5:16:3d:f3:5d:cb:b2:31:15:c8:60:
b0:15:b0:f1:ca:0b:33:13:b8:9e:ff:03:c2:30:2a:
59:a5:3a:3f:b5:30:da:17:fe:90:e6:ef:bd:9c:ac:
64:92:dc:82:83:9a:26:f8:49:c4:bf:06:fe:bc:be:
36:e3:ca:61:30:26:44:1a:56:12:1f:a3:2c:cd:4c:
46:b4:b3:b7:a0:ae:34:76:a0:06:2b:81:e1:51:5e:
a8:1f:82:2a:82:f1:36:3d:d7:09:4e:1f:2c:97:1f:
37:8c:0f:51:6b:bf:35:23:9b:72:50:9d:1b:e2:85:
e4:c7:f5:60:4c:0d:56:71:cc:6a:52:32:de:f2:6f:
f9:50:10:13:cd:76:e7:1b:40:4a:84:95:4e:e3:a3:
d3:89:b9:b6:fa:5b:98:4c:0f:f3:8d:17:f6:b7:8e:
8d:7a:40:94:27:90:61:b9:d3:d0:9f:19:ca:58:75:
82:fc:e3:6c:13:02:be:ac:e3:3f:9f:dc:96:d7:d5:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:B9:D2:9F:33:56:F1:BC:90:9E:73:F0:8B:96:FE:C0:9B:F2:E9
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ba:3e:01:07:7f:42:ce:6c:a0:c4:7f:0f:40:d7:41:6a:5f:
7f:2a:96:27:fd:41:2b:dc:e8:89:a0:e6:a1:6b:5d:39:58:23:
86:52:ba:e3:f9:e0:5c:be:04:6a:2b:f5:fa:59:be:32:8e:23:
93:94:98:c6:a5:51:9a:4f:ef:70:9d:db:ed:6f:d8:23:ce:dd:
91:91:e6:2d:02:9f:01:fb:cf:78:f6:3f:89:e5:a8:ab:aa:ab:
8d:49:86:57:75:89:21:f8:6c:30:13:ec:53:e6:cb:15:46:5c:
6f:df:fd:ab:57:66:78:cf:f3:76:85:48:e3:ee:b5:ca:b9:c3:
b5:45:18:5a:c3:38:2a:04:b7:0c:6e:80:5c:c3:e5:93:8f:be:
35:8a:ee:16:95:fe:b8:ca:32:6f:f4:80:12:59:6d:9d:48:34:
f5:0e:2a:49:de:bb:6b:f6:bd:bd:f8:1e:27:0c:b5:8a:60:5a:
76:5f:a1:c3:11:91:07:98:ce:84:08:c9:f9:87:f8:19:c9:b5:
22:2e:c3:70:de:77:c5:5e:1a:ed:20:9b:62:a8:5e:e7:9e:db:
72:1c:aa:ec:ca:72:fc:47:0e:ce:11:12:ef:94:80:ba:10:56:
ab:80:1b:68:f5:8a:d0:69:1d:ec:f3:90:68:07:e5:79:2b:6a:
ad:2d:68:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5fNNEuxxuYSgl114ndTyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk
Mjk5NTEwHhcNMjYxMDAxMjIwMTQxWhcNMjYxMDAyMjIwMTQxWjAzMTEwLwYDVQQD
EygxNGM2YjlkMjlmMzM1NmYxYmM5MDllNzNmMDhiOTZmZWMwOWJmMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIlc8HN8ydgdVrAb6mo0d5y4448t
vZLuQzYFGVNFURNlkqeHW50KNFpUB7L0T/piYOI4jS/WdSoH3M519oe1xRY9813L
sjEVyGCwFbDxygszE7ie/wPCMCpZpTo/tTDaF/6Q5u+9nKxkktyCg5om+EnEvwb+
vL4248phMCZEGlYSH6MszUxGtLO3oK40dqAGK4HhUV6oH4IqgvE2PdcJTh8slx83
jA9Ra781I5tyUJ0b4oXkx/VgTA1WccxqUjLe8m/5UBATzXbnG0BKhJVO46PTibm2
+luYTA/zjRf2t46NekCUJ5BhudPQnxnKWHWC/ONsEwK+rOM/n9yW19XsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTGudKfM1bxvJCec/CLlv7Am/LpMB8GA1UdIwQY
MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt
OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw
LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7o+AQd/
Qs5soMR/D0DXQWpffyqWJ/1BK9zoiaDmoWtdOVgjhlK64/ngXL4Eaiv1+lm+Mo4j
k5SYxqVRmk/vcJ3b7W/YI87dkZHmLQKfAfvPePY/ieWoq6qrjUmGV3WJIfhsMBPs
U+bLFUZcb9/9q1dmeM/zdoVI4+61yrnDtUUYWsM4KgS3DG6AXMPlk4++NYruFpX+
uMoyb/SAElltnUg09Q4qSd67a/a9vfgeJwy1imBadl+hwxGRB5jOhAjJ+Yf4Gcm1
Ii7DcN53xV4a7SCbYqhe557bchyq7Mpy/EcOzhES75SAuhBWq4AbaPWK0Gkd7POQ
aAfleStqrS1oKw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 10:42:00 2026 by rpki-client