
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: 4hFKlaiaef4y9h+t8IhqfXuGjvr579fXLezJvnsG1Xg=
Subject key identifier: B4:50:39:92:50:EA:A3:CB:71:DD:78:08:25:65:63:FC:6D:34:8C:FD
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 019D265F5DB5339F57287B0A0725A263D84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: sqMKlNl8d+zN8jb16R6tTIH8UPiS8yvXSQukGFI6ImQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5d:b5:33:9f:57:28:7b:0a:07:25:a2:63:d8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=b450399250eaa3cb71dd7808256563fc6d348cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:72:19:62:d4:14:98:35:ab:87:c9:52:be:
16:4e:2a:4b:4c:34:05:c9:5c:7d:74:bf:05:81:c2:
af:00:1e:b1:e3:5d:56:46:cc:e2:6e:2f:2a:e0:eb:
b8:20:67:30:c0:91:0b:6b:3c:0b:a0:1b:f6:3a:dc:
4c:10:28:44:96:83:99:88:4d:28:3c:51:f4:3f:7e:
8d:ec:f9:e5:6c:55:ec:50:26:15:f0:10:b8:ca:8f:
be:97:47:64:a4:e8:34:6b:30:9e:ab:04:51:38:3f:
15:54:f1:af:f3:50:77:98:8b:46:2e:48:4d:69:ac:
9d:4c:37:04:8e:e9:25:17:dd:c4:35:07:01:e6:e0:
2d:5f:de:17:3a:c5:7d:8f:40:ed:2a:63:b3:e0:24:
66:9a:fc:6c:0e:9f:f5:64:d9:80:05:46:61:06:01:
4c:54:83:87:16:d2:04:34:8c:ea:a8:dc:13:cc:63:
6a:10:2f:15:68:b3:ef:05:c6:f3:75:cb:ca:36:a7:
b7:85:d9:ae:4a:e6:71:f8:0d:91:39:37:2b:8a:ac:
b0:ae:bd:84:df:de:8c:c9:66:f9:86:d1:9f:7f:66:
dc:dd:7b:80:86:86:e3:7f:5e:9d:c8:ea:8c:15:bb:
fa:07:14:14:43:81:0f:7d:0e:ec:7f:1f:aa:aa:08:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:50:39:92:50:EA:A3:CB:71:DD:78:08:25:65:63:FC:6D:34:8C:FD
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8b:f3:ce:c8:25:89:92:6e:44:c5:04:e0:4b:4d:ab:f5:54:
94:7a:e3:d1:af:92:55:95:5a:81:53:f9:64:8c:07:f7:cd:83:
c7:84:c6:43:59:24:31:d7:c6:1b:e9:ec:e9:02:2b:95:8b:44:
96:76:61:e8:94:2e:db:3c:78:ab:75:a0:f5:60:af:92:83:2f:
0d:66:ae:89:d1:e4:a3:51:e1:a3:99:ab:2d:92:99:1e:c7:31:
43:b4:6f:f9:15:ed:b1:91:f2:fc:9f:fa:b5:ab:77:8f:eb:32:
12:3a:6a:f4:ec:cf:10:2d:a0:02:ab:34:d8:af:c1:4d:5b:bb:
0a:d2:6d:ae:42:ca:98:70:6a:58:94:28:13:d4:e4:b8:5e:42:
db:b3:6f:1f:73:3a:55:b1:eb:c2:e6:9b:2d:08:08:3c:33:35:
35:9a:a5:00:80:2f:b7:d5:fc:a9:7a:a7:f4:77:76:1d:71:19:
13:ff:23:9a:a8:ab:80:5c:40:12:ed:32:d1:cd:a6:35:36:78:
b9:3f:be:7e:3e:cd:f7:11:60:fe:fc:83:cb:5c:ca:40:0a:08:
3a:db:c7:1d:7b:5d:d5:bc:13:2e:c0:bf:90:3d:23:6e:cf:b4:
48:1e:2d:fe:76:67:19:17:74:d7:d4:55:42:a2:a8:bc:71:e4:
ff:bf:3a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX121M59XKHsKByWiY9hKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDlhZTY5YjNhNzJlYzJlNmU5YWRiOTkwOTBkODEyYTFk
Mjk5NTEwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
EyhiNDUwMzk5MjUwZWFhM2NiNzFkZDc4MDgyNTY1NjNmYzZkMzQ4Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp5yGWLUFJg1q4fJUr4WTipLTDQF
yVx9dL8FgcKvAB6x411WRszibi8q4Ou4IGcwwJELazwLoBv2OtxMEChEloOZiE0o
PFH0P36N7PnlbFXsUCYV8BC4yo++l0dkpOg0azCeqwRROD8VVPGv81B3mItGLkhN
aaydTDcEjuklF93ENQcB5uAtX94XOsV9j0DtKmOz4CRmmvxsDp/1ZNmABUZhBgFM
VIOHFtIENIzqqNwTzGNqEC8VaLPvBcbzdcvKNqe3hdmuSuZx+A2ROTcriqywrr2E
396MyWb5htGff2bc3XuAhobjf16dyOqMFbv6BxQUQ4EPfQ7sfx+qqgiXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRQOZJQ6qPLcd14CCVlY/xtNIz9MB8GA1UdIwQY
MBaAFLJJrmmzpy7C5umtuZCQ2BKh0plRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjkt
OWRmMmY3OWJlZjEwLzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ODViNWEtZmEyNy00MWVjLWFkZjktOWRmMmY3OWJlZjEw
LzEvc2ttdWFiT25Mc0xtNmEyNWtKRFlFcUhTbVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4vzzsgl
iZJuRMUE4EtNq/VUlHrj0a+SVZVagVP5ZIwH982Dx4TGQ1kkMdfGG+ns6QIrlYtE
lnZh6JQu2zx4q3Wg9WCvkoMvDWauidHko1Hho5mrLZKZHscxQ7Rv+RXtsZHy/J/6
tat3j+syEjpq9OzPEC2gAqs02K/BTVu7CtJtrkLKmHBqWJQoE9TkuF5C27NvH3M6
VbHrwuabLQgIPDM1NZqlAIAvt9X8qXqn9Hd2HXEZE/8jmqirgFxAEu0y0c2mNTZ4
uT++fj7N9xFg/vyDy1zKQAoIOtvHHXtd1bwTLsC/kD0jbs+0SB4t/nZnGRd019RV
QqKovHHk/786Ag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:07 2026 by rpki-client