Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: ZrPww92StVhG9/LCI+nsyegJxR9xVtSEtuW8V6phK9o=
Subject key identifier: 03:C6:F5:6F:8C:7B:AE:A4:5E:A5:78:19:73:1F:CC:C7:55:9D:8C:4C
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019CADC78C05B6E3A3E028E109FE0612243D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 09:01:01 +0000
Manifest this update: Mon 02 Mar 2026 09:01:01 +0000
Manifest next update: Tue 03 Mar 2026 09:01:01 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: +nd1t7T9yJUhW3KLjTBQUsmb92HIRvBK8I/X6/FdufE=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:8c:05:b6:e3:a3:e0:28:e1:09:fe:06:12:24:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Mar 2 09:01:01 2026 GMT
Not After : Mar 3 09:01:01 2026 GMT
Subject: CN=03c6f56f8c7baea45ea57819731fccc7559d8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:8b:9e:2a:ab:d0:a6:9c:c0:6c:be:71:83:
06:87:ce:3b:9a:55:8d:9e:ec:b6:22:66:fd:63:04:
bb:a8:eb:ff:ba:93:cc:09:0d:00:7b:5e:1e:3b:b2:
bb:ee:8b:10:a2:85:ff:dc:15:65:1d:29:02:c9:ee:
87:e6:89:66:16:df:3e:af:f1:ab:c0:df:4b:af:3c:
a7:ba:a5:8a:15:cf:fe:06:c6:cf:e3:4d:53:ba:7e:
69:b9:5c:48:01:dd:04:91:04:88:1b:bf:76:05:9e:
7b:62:85:82:76:12:ae:ee:fc:42:5c:d8:26:e9:83:
98:ce:0d:c6:97:1a:8e:eb:f7:d9:64:1b:dd:df:db:
16:92:23:33:57:d6:bb:18:9d:37:0e:c2:0a:fe:34:
1a:0b:fd:bc:62:cb:f6:af:1b:3f:b4:03:40:3b:7f:
c9:4d:22:a5:2c:70:bc:d6:33:b5:14:4a:20:af:6b:
17:b2:e7:3b:32:c5:dd:32:05:99:08:2a:de:92:fe:
22:20:9e:96:1d:94:f2:35:b8:f8:b4:ca:6f:df:e2:
07:ee:91:8b:46:6f:35:5e:a0:e5:fa:ff:c1:72:12:
bc:6c:4e:2c:0e:bc:9b:80:24:3c:28:b6:69:53:ce:
88:48:60:93:23:4b:15:ef:f1:88:c5:8d:8e:7d:25:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:F5:6F:8C:7B:AE:A4:5E:A5:78:19:73:1F:CC:C7:55:9D:8C:4C
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:13:71:4a:18:29:d4:ab:61:58:76:5d:70:84:e1:5d:42:12:
a1:07:da:40:b6:1d:55:61:56:b0:b4:1a:38:37:7d:9e:ce:67:
06:27:73:fe:9a:4f:b6:7d:57:2e:df:0e:9d:f7:ef:16:1c:76:
e7:04:05:bf:db:0b:5a:b7:ae:cd:f5:d9:d9:42:ae:78:3e:dd:
dd:29:e2:84:7a:3e:4d:cf:bc:61:16:c0:d8:30:f7:15:25:60:
04:da:f1:ef:bf:6b:6e:cf:ea:4e:f9:3b:d3:34:48:16:ef:1d:
70:b0:69:54:38:c0:89:11:9f:c9:6f:c6:a1:6d:1d:18:26:da:
8c:be:36:83:6f:f1:55:0b:a1:fc:91:8b:fd:e0:52:49:2f:09:
aa:98:9f:d4:1f:a5:c9:a5:0f:0a:4d:72:a5:34:26:59:3c:8e:
b4:40:31:c7:a2:4b:d1:a9:bd:85:0d:10:e3:5e:38:ce:05:f9:
d0:7d:f2:be:86:7e:33:ca:9a:8a:fc:40:f3:d7:20:00:48:c0:
96:0e:29:c9:23:92:f7:d5:12:2d:46:28:e3:2f:58:39:b4:3d:
90:8f:93:eb:be:da:2d:cb:83:05:fe:5b:ff:0b:c4:b4:e9:a9:
17:a7:91:1a:a2:65:12:cf:21:cf:b3:53:22:24:df:07:3f:74:
99:49:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:46 2026 by rpki-client