Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File: Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier: 24E1z7Y97gX8Y57lNudlPplSlr52ZERzYBO1jCA0hl4=
Subject key identifier: CD:F6:68:0A:86:D6:A2:1A:6B:F3:42:B9:97:1B:CD:72:34:C5:33:D2
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 019CAA8FFA87EE94BC06028A47E2CB36F386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number: 082A
Signing time: Sun 01 Mar 2026 18:01:28 +0000
Manifest this update: Sun 01 Mar 2026 18:01:28 +0000
Manifest next update: Mon 02 Mar 2026 18:01:28 +0000
Files and hashes: 1: EvI8mErWEMbmThEo1JjM2x_4Gnw.roa (hash: iNz3IkF1f9samVwnI+HYLRpCD607SHFYQXXHMEOKQ0I=)
2: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: Z+J5Y6mbnNpzX3T+oMPWNrWarvKh825F1gT/tGflzCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fa:87:ee:94:bc:06:02:8a:47:e2:cb:36:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Mar 1 18:01:28 2026 GMT
Not After : Mar 2 18:01:28 2026 GMT
Subject: CN=cdf6680a86d6a21a6bf342b9971bcd7234c533d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:b5:94:37:1e:68:f1:28:44:c4:45:f4:c4:
bd:86:cf:76:64:e0:49:3d:d8:5e:69:9a:8d:df:cb:
92:a8:6c:a7:1a:79:98:89:34:3c:96:31:4e:ad:5e:
85:1f:72:60:f1:97:83:52:db:f9:33:e4:4d:9f:fe:
c4:3f:ca:02:10:b0:a2:ec:9c:98:97:ae:aa:b2:6b:
b4:74:ac:6d:20:17:0f:34:ee:96:e7:6d:ef:9d:0b:
23:a8:e3:62:dd:67:01:7f:2f:c6:dc:53:c8:26:44:
8f:50:c1:e3:f7:26:fa:42:f1:c1:ba:10:29:eb:ae:
e9:17:cf:cf:90:b3:60:13:2d:96:7b:5d:05:fb:4a:
0d:e5:67:0d:3f:9a:c8:91:1f:78:84:eb:ea:7b:d7:
a6:9e:4f:0c:a2:db:84:da:d9:7c:3c:8b:17:61:82:
dd:bf:77:9c:de:12:0b:a2:86:a0:bb:42:77:5e:7d:
61:ce:ab:ef:3e:43:cf:de:bf:79:e1:d5:e5:f7:78:
8d:2a:e6:75:ed:f0:11:a3:43:70:2a:be:21:69:40:
3d:95:b6:eb:ae:fb:66:34:37:9e:7e:c2:4a:72:74:
4d:46:54:f1:6b:dd:21:3c:4a:07:84:21:2e:0a:81:
ba:33:88:14:90:1e:50:7c:e2:a5:95:83:a5:dd:86:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:68:0A:86:D6:A2:1A:6B:F3:42:B9:97:1B:CD:72:34:C5:33:D2
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:92:8e:69:ed:2b:62:b7:dc:ca:e2:56:86:c0:27:3f:64:
4d:78:62:11:58:a4:43:b4:62:c8:1f:0a:39:84:75:4a:20:62:
60:61:f3:cc:0d:78:5e:86:6f:ca:73:54:8a:b0:45:ef:b0:37:
e2:4f:5b:d6:4e:5b:b8:7c:7d:a0:87:00:73:37:b4:a7:a6:f3:
99:35:52:73:8a:3a:c4:58:f3:ec:9f:02:bc:2a:43:b3:12:3e:
2e:97:b6:fa:0f:16:dc:ca:28:52:1f:b3:e9:bf:88:4f:fe:e2:
5b:fb:12:0d:47:c5:bf:82:76:42:8d:97:07:3a:0f:a2:3b:ff:
63:bf:90:53:35:b1:6d:5a:d7:0a:83:36:3d:93:a9:b3:8c:de:
b2:fe:93:d7:66:c2:ec:db:e7:1d:14:70:d1:f3:cd:61:66:ab:
f9:38:fb:64:a4:b2:f6:d0:01:cf:de:8d:43:bc:7f:70:fb:44:
0e:87:c4:01:a9:8a:ad:34:91:75:5b:ad:2c:6e:78:1d:a9:02:
13:a7:2c:d6:4d:f7:99:20:5a:bb:41:3f:f3:39:7a:ee:5d:d8:
b4:11:35:e7:d2:b6:89:1a:2d:77:88:73:b3:09:90:ed:eb:7d:
01:64:3d:f4:8e:cc:8c:c5:56:0d:4b:0a:92:5f:ea:b4:d1:9b:
3e:4f:29:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/qH7pS8BgKKR+LLNvOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm
NTMzYmIwHhcNMjYwMzAxMTgwMTI4WhcNMjYwMzAyMTgwMTI4WjAzMTEwLwYDVQQD
EyhjZGY2NjgwYTg2ZDZhMjFhNmJmMzQyYjk5NzFiY2Q3MjM0YzUzM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoq1lDceaPEoRMRF9MS9hs92ZOBJ
PdheaZqN38uSqGynGnmYiTQ8ljFOrV6FH3Jg8ZeDUtv5M+RNn/7EP8oCELCi7JyY
l66qsmu0dKxtIBcPNO6W523vnQsjqONi3WcBfy/G3FPIJkSPUMHj9yb6QvHBuhAp
667pF8/PkLNgEy2We10F+0oN5WcNP5rIkR94hOvqe9emnk8MotuE2tl8PIsXYYLd
v3ec3hILooagu0J3Xn1hzqvvPkPP3r954dXl93iNKuZ17fARo0NwKr4haUA9lbbr
rvtmNDeefsJKcnRNRlTxa90hPEoHhCEuCoG6M4gUkB5QfOKllYOl3YZXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM32aAqG1qIaa/NCuZcbzXI0xTPSMB8GA1UdIwQY
MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt
ODQyNmFhMWE2ZDJmLzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm
LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR26Sjmnt
K2K33MriVobAJz9kTXhiEVikQ7RiyB8KOYR1SiBiYGHzzA14XoZvynNUirBF77A3
4k9b1k5buHx9oIcAcze0p6bzmTVSc4o6xFjz7J8CvCpDsxI+Lpe2+g8W3MooUh+z
6b+IT/7iW/sSDUfFv4J2Qo2XBzoPojv/Y7+QUzWxbVrXCoM2PZOps4zesv6T12bC
7NvnHRRw0fPNYWar+Tj7ZKSy9tABz96NQ7x/cPtEDofEAamKrTSRdVutLG54HakC
E6cs1k33mSBau0E/8zl67l3YtBE159K2iRotd4hzswmQ7et9AWQ99I7MjMVWDUsK
kl/qtNGbPk8pqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:54 2026 by rpki-client