Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: sFTfCKWx+eK0sZM4nOeR8oPYHpXTE3EkjJ2Vdwf0l2g=
Subject key identifier: 2A:DD:09:C3:FF:01:DF:AB:92:07:88:8B:2A:B1:28:A5:30:73:08:59
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 01A1385B5C86369C68EF6B56AA44AE8BADA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 03:01:13 +0000
Manifest this update: Wed 14 Oct 2026 03:01:13 +0000
Manifest next update: Thu 15 Oct 2026 03:01:13 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: vLbpu+/I42ncoxdCzZbQ0k832Chah+Wyt7bNdvPMbx4=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5b:5c:86:36:9c:68:ef:6b:56:aa:44:ae:8b:ad:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Oct 14 03:01:13 2026 GMT
Not After : Oct 15 03:01:13 2026 GMT
Subject: CN=2add09c3ff01dfab9207888b2ab128a530730859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:03:2a:76:d1:03:59:18:0b:52:73:c8:bf:
e7:22:06:79:94:7f:3e:37:84:b2:4d:d3:39:45:52:
1f:e4:ea:76:bd:8f:34:a7:61:5f:42:bc:ec:28:65:
e4:a2:4e:5c:39:04:9c:58:89:c3:91:fe:04:40:38:
7f:db:05:88:5a:69:2b:27:16:01:8b:51:26:7d:fc:
a0:cc:d1:1a:42:c4:d4:5d:7f:8e:13:6d:32:0f:b2:
99:1a:aa:18:01:d9:72:91:f2:d7:41:d6:c5:93:5f:
9e:f3:5a:fd:18:dd:0f:f2:7a:4a:c5:40:0b:f1:f8:
1e:2f:8b:b4:c5:f7:cf:da:73:d5:74:00:10:f5:8e:
09:c0:bc:ab:1b:70:b1:f6:ed:b4:bf:2f:77:d1:c2:
f8:ed:fc:57:51:81:55:66:b1:81:55:63:2a:e6:01:
c3:b1:9c:1d:4f:e6:18:65:43:6d:c8:19:82:ed:89:
33:b4:be:25:7f:9b:9d:d7:4e:dd:80:2a:1f:80:c7:
58:eb:d1:4c:a2:07:8a:28:85:f9:cd:9b:75:67:8e:
87:62:f9:2c:9a:15:f4:70:7f:08:49:56:3c:b0:1c:
e1:82:89:ea:07:5e:ce:09:28:39:bf:54:c6:37:fb:
1f:c3:1d:d1:3f:e2:b7:6f:ae:02:22:b6:c9:68:9b:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:09:C3:FF:01:DF:AB:92:07:88:8B:2A:B1:28:A5:30:73:08:59
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:d7:8b:a8:e8:fc:2f:55:c7:49:84:17:fe:49:35:29:dd:
e9:19:e8:e8:a0:28:86:ee:16:8b:e6:25:48:b5:82:21:eb:5c:
41:4a:ad:08:2f:a3:7b:11:b6:51:92:b9:b4:e8:42:eb:a9:1f:
dd:cd:c2:a9:a1:03:5f:26:86:8b:0c:1c:0f:78:15:83:21:90:
12:9e:12:0d:79:61:a1:98:fe:0d:3e:18:07:fb:15:2d:3a:a8:
63:6f:32:c8:5a:c6:d7:21:b8:d2:af:41:96:8b:eb:12:ce:c4:
65:99:e7:ac:fe:d7:75:24:04:13:15:1b:c1:73:e0:3b:02:d9:
9f:e2:e0:69:78:14:98:5a:94:62:ec:11:81:2f:8f:df:b6:5f:
6d:ba:97:e6:bf:34:81:95:f6:f3:f8:25:36:71:75:1c:9f:68:
3e:4c:bf:c7:17:94:3d:a0:96:d6:6e:ba:09:b0:ea:56:d4:5e:
29:52:72:44:d1:7a:50:e0:d7:f9:63:27:7f:be:e9:7e:39:9e:
f4:8f:51:9d:52:99:37:ba:20:e9:b2:a9:f4:ba:a5:fa:ae:04:
58:1d:19:d5:c8:f2:ff:16:ab:84:98:c7:18:79:09:9f:a3:b9:
25:4f:58:09:d0:c7:0c:0f:51:45:34:e0:d8:e0:aa:1c:9e:89:
e2:7c:23:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4W1yGNpxo72tWqkSui62lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjYxMDE0MDMwMTEzWhcNMjYxMDE1MDMwMTEzWjAzMTEwLwYDVQQD
EygyYWRkMDljM2ZmMDFkZmFiOTIwNzg4OGIyYWIxMjhhNTMwNzMwODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdADKnbRA1kYC1JzyL/nIgZ5lH8+
N4SyTdM5RVIf5Op2vY80p2FfQrzsKGXkok5cOQScWInDkf4EQDh/2wWIWmkrJxYB
i1EmffygzNEaQsTUXX+OE20yD7KZGqoYAdlykfLXQdbFk1+e81r9GN0P8npKxUAL
8fgeL4u0xffP2nPVdAAQ9Y4JwLyrG3Cx9u20vy930cL47fxXUYFVZrGBVWMq5gHD
sZwdT+YYZUNtyBmC7YkztL4lf5ud107dgCofgMdY69FMogeKKIX5zZt1Z46HYvks
mhX0cH8ISVY8sBzhgonqB17OCSg5v1TGN/sfwx3RP+K3b64CIrbJaJud4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrdCcP/Ad+rkgeIiyqxKKUwcwhZMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgXXi6jo
/C9Vx0mEF/5JNSnd6Rno6KAohu4Wi+YlSLWCIetcQUqtCC+jexG2UZK5tOhC66kf
3c3CqaEDXyaGiwwcD3gVgyGQEp4SDXlhoZj+DT4YB/sVLTqoY28yyFrG1yG40q9B
lovrEs7EZZnnrP7XdSQEExUbwXPgOwLZn+LgaXgUmFqUYuwRgS+P37ZfbbqX5r80
gZX28/glNnF1HJ9oPky/xxeUPaCW1m66CbDqVtReKVJyRNF6UODX+WMnf77pfjme
9I9RnVKZN7og6bKp9Lql+q4EWB0Z1cjy/xarhJjHGHkJn6O5JU9YCdDHDA9RRTTg
2OCqHJ6J4nwjrA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:31:15 2026 by rpki-client