Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier: 50TsrjpZmAxWg74dlF8mf0exdEw4vaKDZhcfpa6Memw=
Subject key identifier: 6F:D6:0A:B7:20:52:56:63:C5:CB:9E:5B:E7:17:52:F3:C4:AB:F6:B0
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer: /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial: 019D9E1BD33273BCD701A1E4C3FAE74FCB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number: 18C3
Signing time: Sat 18 Apr 2026 01:01:56 +0000
Manifest this update: Sat 18 Apr 2026 01:01:56 +0000
Manifest next update: Sun 19 Apr 2026 01:01:56 +0000
Files and hashes: 1: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: apUWuW6ZN3NC/51Ok8usgewuZVQfwpr08u3gdQg1Cw0=)
2: lqVBKhe9BI1k73opGPRpRu7Tjm8.roa (hash: ANewMCPdr9EPXxV8b7rhqmy3E65gN7TANy2BLw8Q6mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:d3:32:73:bc:d7:01:a1:e4:c3:fa:e7:4f:cb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Validity
Not Before: Apr 18 01:01:56 2026 GMT
Not After : Apr 19 01:01:56 2026 GMT
Subject: CN=6fd60ab720525663c5cb9e5be71752f3c4abf6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:4d:b9:a9:bb:97:ae:02:7e:01:7b:22:df:
2d:54:dd:83:48:b9:ba:ee:93:ea:e7:70:d5:88:e4:
7f:d7:7b:a7:3c:f9:8f:66:73:f0:1a:c8:81:7b:0f:
0b:28:99:99:ed:e8:b8:63:73:22:43:c0:6f:e0:8a:
78:3a:1e:ce:cd:d7:92:6e:3e:a8:f8:c6:8d:3e:6c:
c9:66:82:8d:86:fb:3d:d6:ac:b9:d2:1d:59:ad:2f:
9b:15:4a:06:87:ce:87:29:30:f3:27:54:cf:fb:d7:
69:7f:e8:c0:4b:95:09:d7:84:cf:32:11:db:01:08:
67:4d:6e:33:9d:93:d8:d3:f1:e3:19:4c:a8:88:e5:
37:5f:a0:48:98:22:2f:04:55:7c:3e:08:d5:96:a3:
3b:e1:a1:1e:5f:6a:6a:6b:e8:70:e4:5f:85:36:01:
0b:83:f0:0c:93:43:1d:3f:c6:03:c7:7d:a1:1d:2b:
b0:d5:cb:ff:76:10:43:94:7b:e6:45:39:6d:ad:f6:
16:c4:ec:87:2d:97:e2:35:b3:ba:57:2c:88:df:c0:
ec:cf:5a:6e:ce:fd:ee:aa:9d:72:f7:86:6c:71:e6:
24:96:45:82:0c:38:1a:a7:c4:76:e7:49:1f:09:d9:
e1:c5:a3:b7:9e:5c:04:04:0d:4c:d8:38:a1:b2:1b:
6c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D6:0A:B7:20:52:56:63:C5:CB:9E:5B:E7:17:52:F3:C4:AB:F6:B0
X509v3 Authority Key Identifier:
keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e6:33:e4:52:c4:dd:3e:32:e6:55:b4:8b:fc:9e:bc:c0:9f:
af:95:73:04:ba:28:5b:10:e6:0b:ac:7b:85:c3:ca:9a:b8:83:
ef:59:ec:b8:e3:5e:d0:0f:4c:ec:2b:fb:f3:67:de:f8:27:84:
80:0c:bd:39:79:64:99:57:a3:9d:44:90:a3:6c:af:7f:81:99:
46:cc:38:96:71:1e:b3:ab:f5:58:fa:c5:14:68:7d:b3:fc:40:
99:4e:f8:59:6d:a2:30:47:d2:98:96:2d:6e:fb:3d:78:56:c2:
90:56:62:3d:74:c4:84:8d:17:ed:81:d6:42:a6:ba:de:24:64:
2b:a0:02:2e:e9:d3:62:11:ef:2f:4b:1e:14:af:3a:47:83:e5:
3e:59:35:26:45:90:32:38:e4:f2:19:9c:b9:e5:d7:6e:da:93:
44:86:4e:f8:05:8d:8d:ec:05:4e:11:c0:01:94:bd:1c:00:be:
04:dd:54:4c:34:33:44:ce:7d:5e:b3:0d:66:c3:8d:fa:54:bd:
3a:d9:6b:3f:ff:9f:20:96:19:b5:c7:30:f7:f1:2b:31:30:41:
e4:b2:e0:d6:d7:4a:a6:6c:8f:a8:27:3e:41:b9:bf:8a:9d:e0:
d6:3b:f5:8b:41:24:2b:6a:1f:45:35:cd:2d:b4:f7:bd:c0:54:
35:9a:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:01:32 2026 by rpki-client