Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: uesn11+zPV0HeLlip6qa9/m/TcZnY+3dCeANoF+mq8s=
Subject key identifier: B0:61:EF:6C:5B:70:2D:0B:91:18:84:F3:79:4F:A0:77:85:25:EA:C2
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 01A0E13D94E1D3554137867E825EFE1FC76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0F5A
Signing time: Sun 27 Sep 2026 05:01:44 +0000
Manifest this update: Sun 27 Sep 2026 05:01:44 +0000
Manifest next update: Mon 28 Sep 2026 05:01:44 +0000
Files and hashes: 1: 84BaEWLXK5pw_D2DqToKDMgWvVs.roa (hash: dXG357CuERL8U7sDCJftC3+XuIBlqAv2DDIdJ4Pdya8=)
2: lJQRlzBiSGl76D8ikxPAg08Ak8M.roa (hash: dV3fyE/KZeuQowu2MHQZCBNvC5TozfTLwnFBVZttKjs=)
3: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: cSGwt7COm8PfRLHGaYfB9XAgVS4HFv/niBBYPoA3qAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:94:e1:d3:55:41:37:86:7e:82:5e:fe:1f:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Sep 27 05:01:44 2026 GMT
Not After : Sep 28 05:01:44 2026 GMT
Subject: CN=b061ef6c5b702d0b911884f3794fa0778525eac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:26:f2:7a:73:85:3b:92:52:f8:6f:8c:ef:
25:43:09:4d:e1:50:67:e8:9c:bf:aa:fa:13:e9:23:
08:d5:6e:15:76:c2:87:24:eb:87:1b:f6:fb:0a:4a:
cd:0e:0c:62:de:c7:7c:4d:8c:bc:79:d0:a9:9c:79:
e9:39:5d:1c:7e:43:1f:a8:4f:03:f2:4d:12:99:f6:
8d:e3:e5:7a:57:1f:fb:78:4e:bf:b0:77:e8:7d:3b:
ed:14:71:87:60:38:86:7b:38:2d:18:41:96:e3:a9:
00:30:b2:23:e7:f4:5b:7e:2e:f2:33:57:36:7f:c0:
83:0e:12:31:c0:ff:16:41:9b:29:6c:e9:27:42:e7:
6d:70:2b:31:6f:ca:d6:a1:cf:0a:3d:c8:1d:f4:7a:
05:fb:97:c3:96:8e:64:57:bc:ba:c7:3c:24:01:a4:
4f:22:e8:32:7c:c4:4b:84:a3:02:69:e4:d9:d5:8b:
bb:ea:3b:72:bb:23:c5:60:a2:13:52:87:8f:17:f7:
fa:76:25:ef:0a:d0:9c:90:97:8e:fc:2a:ca:68:ee:
87:0d:8e:8b:1c:fb:83:70:c9:e7:06:ec:a1:db:81:
5b:a5:eb:23:b4:7f:a5:61:ef:62:47:24:34:80:3d:
55:4d:7b:57:7d:b3:e0:47:44:8e:d1:e0:0e:06:f0:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:EF:6C:5B:70:2D:0B:91:18:84:F3:79:4F:A0:77:85:25:EA:C2
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:16:d4:15:1d:a7:66:94:0c:7c:d1:d4:f5:b6:3f:c9:91:ee:
5a:45:8c:0e:01:1e:3c:84:a2:a1:9c:16:23:67:32:31:7a:c5:
c2:37:82:57:78:7b:e7:e0:ba:3f:ee:fb:b0:13:71:e5:75:e1:
06:41:dc:5f:30:18:d8:72:ef:b0:ca:02:e9:43:11:49:28:56:
3d:19:b5:cf:6f:83:d9:4d:bf:87:43:ba:ca:52:8d:03:40:f1:
11:1d:11:40:f8:90:b6:08:8a:75:45:94:af:aa:23:9f:a7:4f:
d8:7c:85:66:cd:9a:a1:dd:74:e2:64:f2:dc:7d:6d:8e:52:60:
86:f1:dc:69:71:a6:62:0d:57:0a:7b:2a:74:7b:c6:b0:5a:ad:
7a:50:33:f5:bc:87:09:a2:c5:32:7f:0c:b1:53:ae:19:02:15:
26:3e:3b:b3:ba:45:14:8b:5f:0e:66:4c:38:0d:54:88:b1:2d:
89:08:e5:92:2f:9c:89:35:42:3f:07:76:b3:5b:b0:70:71:9b:
52:7d:43:1b:ab:5b:2c:94:ce:60:8b:24:0b:df:fb:0a:8e:c0:
4d:51:b2:6e:b3:07:a2:47:c1:d6:db:83:5b:29:1a:a1:24:31:
d9:a8:f3:1d:fe:45:32:a1:8a:27:bc:fb:09:b6:4b:cc:0b:ae:
70:14:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:27:52 2026 by rpki-client