Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: uYWWMHKuTHgGMei1FRNvu89kBw6tLn3XnDG0FzvTrkg=
Subject key identifier: F4:EC:F4:71:DB:D9:71:90:41:A1:7B:17:F9:C3:C3:47:65:B5:9A:00
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019FACE465808C44882D2ACEF0E6B14D20CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0EB9
Signing time: Wed 29 Jul 2026 08:01:16 +0000
Manifest this update: Wed 29 Jul 2026 08:01:16 +0000
Manifest next update: Thu 30 Jul 2026 08:01:16 +0000
Files and hashes: 1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: 4RPfpovnXF0+yaqwTeLoKChLEXrEPuLNYAl5CvQnlOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:65:80:8c:44:88:2d:2a:ce:f0:e6:b1:4d:20:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Jul 29 08:01:16 2026 GMT
Not After : Jul 30 08:01:16 2026 GMT
Subject: CN=f4ecf471dbd9719041a17b17f9c3c34765b59a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:ea:3c:f9:1e:98:d9:01:78:40:94:c4:1a:
e0:32:b0:77:0c:79:9b:18:ba:56:ff:e8:eb:e9:09:
00:4b:ce:f3:a1:f5:1c:c8:90:f7:0e:23:70:8e:6e:
1a:38:53:ba:ab:01:23:ba:5e:99:03:cc:c9:97:75:
eb:e8:4a:6c:54:dd:26:bb:ba:fd:9d:2a:bc:e1:db:
43:10:10:0a:a0:f8:54:98:5d:90:cf:ae:2c:b8:b8:
6b:fd:39:83:47:a9:34:5e:d4:9a:ab:35:6c:d7:7f:
63:32:ef:79:3e:31:80:4b:f6:66:bb:c1:0d:a5:e4:
00:8b:1f:ad:9b:ed:3b:25:85:97:84:90:9a:08:4c:
bd:a9:3a:55:9b:e1:49:77:8f:68:55:c1:6d:02:36:
14:2b:dc:73:41:c9:5d:35:64:33:8d:50:e8:cd:03:
51:44:79:eb:ad:af:14:11:12:38:fa:be:2f:b9:99:
c5:ec:51:d6:e3:f9:39:be:3b:44:be:29:af:57:da:
63:e5:27:59:56:ff:48:3b:30:5d:09:11:6d:50:5a:
b0:c2:ad:7e:7f:f1:67:d6:84:ab:7d:81:b3:1b:f4:
c8:69:7b:0d:6b:c3:e8:99:6e:31:29:aa:3d:1d:91:
15:6e:b9:be:c4:5d:c1:76:e0:61:f8:da:ab:a7:c8:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:F4:71:DB:D9:71:90:41:A1:7B:17:F9:C3:C3:47:65:B5:9A:00
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:3e:74:e8:e4:9c:bc:6d:f5:d2:45:6a:59:34:fd:a7:e9:
f9:cd:f4:91:ff:3e:1c:9d:f4:0b:36:24:0e:04:f6:79:57:c7:
8d:1a:84:93:e1:ef:67:84:d7:19:2e:7e:44:3a:8a:15:ef:9a:
42:86:f6:f1:22:91:1e:1a:b3:18:e0:4e:50:01:7a:c8:0e:a4:
43:36:d9:1d:ae:85:3b:c8:2e:5f:65:66:5d:cd:2a:7b:9b:d7:
4f:ef:c2:2d:73:94:36:1f:c3:c7:43:b6:c8:c7:42:1a:b8:8a:
f7:d2:fd:d0:96:fd:f2:d7:ff:15:0e:1d:f5:5d:11:4f:33:f5:
6c:fd:3d:6a:33:76:6f:59:90:49:4b:03:62:0f:2f:c3:ca:98:
48:1a:4b:ad:fb:57:7e:7a:07:1d:b7:21:77:06:17:81:f3:1a:
0d:5f:82:6e:58:61:02:1a:fc:5d:05:44:e2:3f:83:80:46:db:
27:cd:b7:69:2c:6b:a7:6d:b0:f0:77:87:c3:54:37:a6:49:f0:
f9:dd:3a:e5:6d:50:36:7c:fe:c4:f4:51:7e:67:42:7e:61:9f:
a5:fe:a9:b7:59:b2:a6:25:6e:90:1f:56:57:e0:e1:99:87:24:
88:e5:4c:8f:1f:17:76:41:70:77:54:36:00:ba:12:5c:40:27:
5c:e7:f6:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5GWAjESILSrO8OaxTSDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGNmOWY2ZDAzNGY0Njc2MGY0ZjU5YjE3MzlkZTEyN2I4
YWRmZjMwHhcNMjYwNzI5MDgwMTE2WhcNMjYwNzMwMDgwMTE2WjAzMTEwLwYDVQQD
EyhmNGVjZjQ3MWRiZDk3MTkwNDFhMTdiMTdmOWMzYzM0NzY1YjU5YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubjqPPkemNkBeECUxBrgMrB3DHmb
GLpW/+jr6QkAS87zofUcyJD3DiNwjm4aOFO6qwEjul6ZA8zJl3Xr6EpsVN0mu7r9
nSq84dtDEBAKoPhUmF2Qz64suLhr/TmDR6k0XtSaqzVs139jMu95PjGAS/Zmu8EN
peQAix+tm+07JYWXhJCaCEy9qTpVm+FJd49oVcFtAjYUK9xzQcldNWQzjVDozQNR
RHnrra8UERI4+r4vuZnF7FHW4/k5vjtEvimvV9pj5SdZVv9IOzBdCRFtUFqwwq1+
f/Fn1oSrfYGzG/TIaXsNa8PomW4xKao9HZEVbrm+xF3BduBh+Nqrp8hRswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTs9HHb2XGQQaF7F/nDw0dltZoAMB8GA1UdIwQY
MBaAFLJM+fbQNPRnYPT1mxc53hJ7it/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMt
OTk1YzM2OWRhNjcyLzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZDAwNmQtYWI3YS00MWM5LTk3ZjMtOTk1YzM2OWRhNjcy
LzEvc2t6NTl0QTA5R2RnOVBXYkZ6bmVFbnVLM19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5Q+dOjk
nLxt9dJFalk0/afp+c30kf8+HJ30CzYkDgT2eVfHjRqEk+HvZ4TXGS5+RDqKFe+a
Qob28SKRHhqzGOBOUAF6yA6kQzbZHa6FO8guX2VmXc0qe5vXT+/CLXOUNh/Dx0O2
yMdCGriK99L90Jb98tf/FQ4d9V0RTzP1bP09ajN2b1mQSUsDYg8vw8qYSBpLrftX
fnoHHbchdwYXgfMaDV+CblhhAhr8XQVE4j+DgEbbJ823aSxrp22w8HeHw1Q3pknw
+d065W1QNnz+xPRRfmdCfmGfpf6pt1mypiVukB9WV+DhmYckiOVMjx8XdkFwd1Q2
ALoSXEAnXOf2jQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:39 2026 by rpki-client