Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File: skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier: fWc6njGljxYV54vgZqbdGcETbwlPK4l6s4Bd7SHl0pc=
Subject key identifier: 94:53:C4:7A:83:61:81:30:7A:39:19:CB:5B:C1:1C:40:36:42:AD:00
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer: /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial: 019CACEB5FD50452BBE816D880A16BF77EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 05:00:32 +0000
Manifest this update: Mon 02 Mar 2026 05:00:32 +0000
Manifest next update: Tue 03 Mar 2026 05:00:32 +0000
Files and hashes: 1: 1WFKhbvTJWB93p6BRF4MIhxyrE0.roa (hash: vbxgmYXayRhnSkSppEwHN/q5tKy6yDwafh4xyBQ3/1M=)
2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: kkq/Wli9rxjFVV3VIXl+5hVGKrlO0BS/F0EoUmrTenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5f:d5:04:52:bb:e8:16:d8:80:a1:6b:f7:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
Validity
Not Before: Mar 2 05:00:32 2026 GMT
Not After : Mar 3 05:00:32 2026 GMT
Subject: CN=9453c47a836181307a3919cb5bc11c403642ad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:7f:a1:ec:65:dd:79:73:ea:c4:b3:73:7d:
1b:f2:97:51:ca:35:da:fe:22:76:b1:a4:ee:b8:24:
1e:40:fa:70:bf:cd:d4:66:63:3a:85:a3:66:d0:22:
f5:d6:e3:10:c1:1d:e3:cf:11:c6:1f:1b:66:cb:92:
c8:78:c6:f4:fc:12:ea:30:6f:67:6d:b6:af:32:66:
a3:b8:43:3b:1c:ec:1b:bf:be:ee:63:9b:69:9d:47:
88:f1:17:f0:a0:2e:e0:6f:54:41:fe:a4:b0:cd:38:
67:e5:39:40:dc:29:d4:a6:83:1f:a9:71:2d:bf:1f:
5c:b3:ff:90:9a:17:db:55:69:fb:32:29:e8:57:59:
d1:a0:9d:b6:b7:19:65:a9:f0:00:01:15:ea:9f:3a:
0f:bf:bf:2f:85:36:88:77:6f:52:e6:eb:c5:2a:6f:
18:b6:0a:f9:e0:21:5c:f2:3d:bb:ba:c4:23:74:26:
9e:ab:ab:26:4e:6f:d3:8e:81:33:96:40:9b:da:9f:
9e:67:9f:3f:92:b7:65:41:52:b3:d4:9f:2f:4b:4f:
83:e4:12:86:39:fc:78:12:75:cb:70:73:c3:22:f6:
6c:f6:f6:6c:a9:d2:f6:ba:d7:81:d0:35:33:49:60:
9d:23:4c:30:ff:1f:eb:58:9a:73:2c:fc:6e:cf:ba:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:53:C4:7A:83:61:81:30:7A:39:19:CB:5B:C1:1C:40:36:42:AD:00
X509v3 Authority Key Identifier:
keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a5:a3:d4:54:19:7b:ff:62:35:2c:29:3f:e8:8e:88:57:e7:
d2:19:1a:5d:e2:67:e5:70:49:8f:ee:1d:fb:ed:16:6d:38:ba:
49:95:5a:98:45:71:fe:40:12:42:57:ed:e7:3e:46:c1:ae:c1:
b5:24:40:ab:3f:9d:17:c4:b0:fb:9b:37:35:b2:3f:88:a3:ae:
50:81:39:a4:4b:46:25:bc:f8:f5:ec:34:60:2e:cf:a4:d9:fa:
87:68:6b:e5:47:42:80:92:4d:e2:15:cf:f4:90:ee:d1:97:d4:
f6:38:41:9a:33:eb:9f:1f:45:20:2b:67:38:4e:25:3e:b1:7f:
9c:69:09:96:4b:93:30:68:6c:25:e3:4d:c5:f8:b9:7f:da:ca:
2f:2b:e8:bc:b7:10:74:ad:36:88:05:26:0f:87:77:71:92:1f:
bc:d4:e7:51:9f:81:c7:d7:0b:ee:9e:7d:90:0b:fb:58:f4:d9:
5c:4e:44:38:69:7c:1a:5d:6c:68:b7:7d:69:18:95:64:31:9a:
41:3c:a1:19:4a:75:b5:e9:74:87:c0:64:fd:ec:f2:ff:e6:9a:
4c:f2:ca:40:2d:24:c7:46:c9:36:08:c3:c4:83:e2:91:30:94:
4a:41:ac:a2:f0:cc:48:fa:2a:7c:47:2f:fe:7e:f4:9e:7c:d6:
1f:f8:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:25 2026 by rpki-client