Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: qfbhodIqUrxl3OYmlFg9TqoKWbTStew6wmgwN6PgIC0=
Subject key identifier: C3:0A:2B:98:FB:C1:60:A5:85:73:6E:34:03:AD:42:1D:3E:CF:20:60
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019CAA58DA1322CD2B19B786D7D4E3C9071F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0D2A
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: TT6i7Xu12cOwjzFdAq1w0vcVQzDWFPchaT24jd449F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:da:13:22:cd:2b:19:b7:86:d7:d4:e3:c9:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=c30a2b98fbc160a585736e3403ad421d3ecf2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:1f:ae:ba:f2:d5:00:42:d6:25:4f:c9:14:
51:07:59:f3:04:89:de:3e:e8:e4:06:a9:4b:74:4c:
ac:60:36:76:bf:c7:f4:5e:e2:35:c9:c9:45:d5:9b:
d9:be:d6:85:8b:17:d5:cf:bc:39:f0:3b:1b:56:dc:
f4:3a:ff:be:df:33:97:87:ee:56:4e:94:fb:98:28:
7c:4f:4d:e9:2a:0a:b9:7b:1a:85:36:ba:8a:95:32:
31:f9:10:7f:4c:eb:8c:af:0c:dc:70:93:05:59:79:
2e:de:0c:74:90:e9:b6:f4:3d:02:76:7b:1b:a6:fc:
11:b4:63:43:8d:4d:5f:4f:e2:54:e3:68:46:a8:fe:
a1:d1:b9:6f:98:fc:92:b3:57:2b:b0:71:a8:2e:33:
cc:5a:2d:bd:1d:02:e1:4a:e9:e5:1d:1d:87:04:80:
34:56:d8:ba:aa:18:b7:c6:f9:8e:e5:60:a7:13:4b:
02:56:c6:ac:a2:e3:99:5b:05:82:02:59:7f:84:5a:
9d:53:08:9d:b7:8a:07:2c:a7:ef:06:a7:e5:c0:db:
02:0b:f8:e4:3c:6c:9f:f1:41:49:88:53:7d:b3:de:
39:d1:c5:c4:d0:47:33:8f:d2:3b:aa:80:9b:23:ad:
e9:3b:07:e3:40:8d:f4:08:10:3d:39:f4:51:04:06:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:2B:98:FB:C1:60:A5:85:73:6E:34:03:AD:42:1D:3E:CF:20:60
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:c5:da:78:24:f5:89:2d:7f:16:da:21:fc:26:33:25:b9:
a9:10:96:87:02:46:9e:b8:ac:c6:59:b3:69:af:05:29:57:46:
34:ff:00:8e:08:94:80:be:0e:0d:da:62:6f:ae:d6:07:d8:21:
18:11:06:01:ba:cf:b0:7c:d9:b6:ff:51:2e:4a:4c:96:57:5b:
e6:24:61:b7:6e:aa:3f:33:08:4d:a2:0f:1b:ec:6f:e4:dc:6d:
7a:41:8a:8c:05:ed:6c:bc:49:c2:f4:db:7d:0e:74:33:73:be:
06:83:d6:ef:da:e7:b3:8b:d6:6a:32:43:f7:50:1d:6b:be:24:
59:86:39:4d:7e:5d:3e:e2:83:b1:00:24:f1:5a:e8:03:48:56:
5d:60:78:2d:6d:c3:79:9b:0b:ce:6b:ba:da:38:35:81:a9:c7:
8c:3b:fb:03:bc:df:65:b0:fd:cc:9c:1a:5e:2f:64:c4:7e:e6:
84:7b:23:3a:01:7f:79:e9:4b:d5:ae:4e:4e:b4:17:0e:ae:a5:
76:d4:7c:81:5e:1c:2a:26:05:f7:52:7b:9e:a9:ae:e3:bd:8c:
4a:14:45:15:25:1c:bb:56:23:0d:f2:59:47:ae:34:47:a5:7c:
3e:b1:e3:bd:7d:2e:88:84:06:58:d5:7f:8f:f3:66:26:8b:d5:
d7:69:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:45 2026 by rpki-client