Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: LVS0AzkNs1DaK0ordp9uN5Yz4YUlgdNN+JqCebnI8gQ=
Subject key identifier: 2A:D9:2D:0B:01:CD:8E:D0:77:91:06:D3:37:21:5F:C8:0D:2E:B7:4C
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019D9B511B8958F169FBB0480A2E3524769A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: LHOIF6PECdXvAOtFXp/rCLALsQTBbaVuvG3Xhc6KZpI=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1b:89:58:f1:69:fb:b0:48:0a:2e:35:24:76:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=2ad92d0b01cd8ed0779106d337215fc80d2eb74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:22:d2:26:14:a5:bc:f8:cb:55:d8:6d:6d:
1d:27:fa:32:0c:de:b6:06:dc:36:bf:b0:05:15:ed:
41:63:39:5b:90:0c:c6:ab:a9:c5:49:10:ab:34:29:
ca:33:fb:e4:e9:73:86:4c:9c:59:e4:03:50:c3:42:
78:84:1c:56:6a:ab:04:a1:40:a8:36:77:74:51:5e:
3b:95:c1:89:ac:5c:fd:50:ba:30:a5:8f:7f:f5:d4:
93:13:54:7e:e6:e0:72:93:8c:b4:84:27:70:85:fa:
67:b1:e4:72:81:1c:41:e6:c6:0e:48:93:8f:da:6c:
5b:55:51:cc:5f:aa:38:b0:37:3a:bb:e2:91:22:63:
83:fa:83:3d:6e:2a:e1:2d:69:30:79:43:a6:1f:58:
4a:c5:2c:2d:d6:a4:44:ec:92:36:fb:df:e9:54:91:
8d:4c:ea:09:7f:fa:4d:a0:e9:f3:25:da:57:a0:f9:
8f:5a:5e:b5:ea:85:d8:d0:79:42:12:0b:d7:4a:91:
ed:28:10:a5:fb:69:3a:39:78:2e:d9:79:7d:f5:3e:
99:6f:a2:e2:99:35:88:f8:70:68:2f:a8:57:48:bc:
0c:a7:28:67:e7:32:ea:91:88:89:32:a3:48:7b:5e:
a5:3f:3c:1e:f6:3e:48:88:d1:fa:f7:d9:33:8a:4e:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:2D:0B:01:CD:8E:D0:77:91:06:D3:37:21:5F:C8:0D:2E:B7:4C
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ab:70:da:fa:81:85:39:90:ff:9b:1e:9b:54:0c:a4:ca:5f:
89:46:d8:36:7d:07:db:fa:6e:a9:66:4c:7b:cf:84:03:06:78:
7c:ac:5c:2c:e3:66:be:c4:2c:1d:63:3f:64:47:e8:d3:be:ea:
7e:f0:88:db:15:3a:b1:66:56:47:8e:dc:f5:26:23:7d:68:76:
22:53:dc:e1:c5:57:97:74:39:bb:98:4b:b1:68:db:79:e9:10:
12:00:2b:53:32:af:bf:a2:89:07:ec:91:91:6f:78:51:d3:15:
95:d5:8f:e4:d9:c6:be:f1:e3:25:5c:68:93:75:6b:22:62:de:
d0:0c:e4:16:7e:14:71:3e:a9:fb:84:d4:b0:92:e7:3e:33:34:
ea:cc:ac:c3:99:a9:aa:98:bd:37:10:fb:5e:3d:da:22:9b:6f:
9f:cd:46:c5:c7:98:9a:d3:4e:3c:11:fd:d3:4c:65:99:21:2a:
d3:30:49:0f:61:99:4c:d9:77:d2:18:ee:7a:fd:17:a9:eb:df:
58:46:ff:71:b1:5c:ef:d3:cc:a1:29:75:88:73:20:9f:0a:32:
b6:41:fd:ba:f8:6b:c3:66:6e:c3:63:33:54:06:b8:a6:df:bc:
ec:7e:4e:85:65:47:16:7c:d3:22:a1:93:e5:1b:99:19:be:21:
63:29:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:26 2026 by rpki-client