Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
File: SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft (raw, json)
Hash identifier: 5r77/BwUl7Fn3NpWBWsaLk8lPHXWKWca076HPgmhOd0=
Subject key identifier: 1B:A8:6F:AC:D1:78:DC:E9:5F:AF:A4:27:F8:0B:2B:E4:34:58:A5:A3
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019FAC761D7557874FD542DD7FD16ACBE534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 06:00:49 +0000
Manifest this update: Wed 29 Jul 2026 06:00:49 +0000
Manifest next update: Thu 30 Jul 2026 06:00:49 +0000
Files and hashes: 1: I94Bua8PhWkcuXDW_GlAqz2lVS8.roa (hash: fGa0XmOu0OXthX/Q6+SvMygInfdPRZOygkS/xKaY+2g=)
2: SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl (hash: +QjZGbuUqKD/r9eBqhP1kpVQgjvCxp86ZVWWkEUS630=)
3: moo7T-KZOZcRqQSNUP7xeKxh_Ws.roa (hash: ArRurQHIuUojo5zTK1v6H0uX0qChX5C2Q/FHUBFiXF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:1d:75:57:87:4f:d5:42:dd:7f:d1:6a:cb:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Jul 29 06:00:49 2026 GMT
Not After : Jul 30 06:00:49 2026 GMT
Subject: CN=1ba86facd178dce95fafa427f80b2be43458a5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:36:62:99:ca:7e:be:ef:4d:49:de:51:07:
90:00:95:12:1b:16:fa:0b:dc:3c:c9:73:47:b1:a2:
28:b4:0b:4a:b2:2b:f7:81:ed:d5:46:b5:d7:20:e4:
70:41:94:48:5b:ce:1b:ce:e6:b9:1b:88:18:32:d6:
6d:f2:3e:52:c4:aa:4b:d0:14:31:c0:2f:12:bc:f5:
68:7f:4b:1c:13:4b:cc:51:4b:10:fd:e3:f1:75:38:
1b:c2:0c:b8:3f:96:62:ca:78:88:48:48:a3:ae:01:
40:b2:0d:0d:25:4e:bd:00:8c:b0:1c:e1:0b:89:8c:
99:af:02:3b:67:69:67:20:6b:9b:85:b6:34:f1:6f:
a5:01:91:8c:e3:5b:8e:b2:43:3f:86:ee:70:ed:27:
dd:45:50:f4:af:bd:c9:92:de:e6:79:95:b3:2f:dc:
0f:cf:03:c1:10:d1:c8:66:95:b3:9a:2e:1d:99:64:
9b:c7:5c:ab:99:67:b2:b8:04:c6:8a:d4:91:20:d6:
82:46:43:33:55:83:cc:c1:5d:e4:54:fc:bb:e2:ac:
12:01:0b:2f:55:05:17:5e:bd:fe:ee:66:ab:aa:8f:
7c:1c:b4:d7:70:87:f2:d7:4d:f9:8b:7a:b5:54:0e:
56:55:3e:8c:2e:a1:9a:28:5e:85:d4:80:bf:96:44:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:6F:AC:D1:78:DC:E9:5F:AF:A4:27:F8:0B:2B:E4:34:58:A5:A3
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c1:ef:d6:37:42:d3:6d:de:34:05:97:db:2c:55:47:a6:f9:
57:e6:63:7b:e9:c8:f7:7a:3b:33:78:20:c2:ac:02:21:f0:82:
20:1e:8e:69:7a:61:be:db:cd:f9:64:56:0d:24:ed:ce:e2:29:
73:0b:7d:cc:04:e4:54:0f:be:5f:69:11:6f:6d:d6:5d:89:01:
65:63:8d:28:62:38:ff:ea:96:cd:e4:33:dc:f4:32:24:82:85:
cd:88:7a:8d:23:fa:79:7e:13:7c:d6:80:94:fb:a8:0b:86:3c:
49:5e:93:3c:5b:30:1e:16:b5:0b:c7:90:f4:d1:e8:0f:ff:40:
6f:25:e9:4f:d4:7d:20:43:0c:30:60:f8:a0:b6:7f:e2:22:19:
a8:5e:c0:24:ad:35:d6:8b:ba:2b:8c:1f:05:66:c2:7c:b7:8f:
74:9d:07:0f:b3:91:39:69:48:22:e1:35:e2:e7:c9:01:c6:44:
9b:8c:96:44:17:93:d8:f3:14:27:21:36:df:c6:24:c8:b1:52:
09:92:eb:9d:f1:1c:10:af:2b:54:12:4e:f7:e5:ac:ec:2a:47:
2c:08:17:7a:c6:3c:53:a2:f0:0b:48:cc:a0:2c:47:ef:0e:41:
7c:62:18:73:41:d1:be:0a:52:db:c4:5c:f4:ef:f3:31:26:21:
88:b4:7c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdh11V4dP1ULdf9Fqy+U0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGFkMDNhMGY1OTJiYjljOTdjMzA1MmE2OTAxMjVkODQ2
NDE1YTQwHhcNMjYwNzI5MDYwMDQ5WhcNMjYwNzMwMDYwMDQ5WjAzMTEwLwYDVQQD
EygxYmE4NmZhY2QxNzhkY2U5NWZhZmE0MjdmODBiMmJlNDM0NThhNWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9w2YpnKfr7vTUneUQeQAJUSGxb6
C9w8yXNHsaIotAtKsiv3ge3VRrXXIORwQZRIW84bzua5G4gYMtZt8j5SxKpL0BQx
wC8SvPVof0scE0vMUUsQ/ePxdTgbwgy4P5ZiyniISEijrgFAsg0NJU69AIywHOEL
iYyZrwI7Z2lnIGubhbY08W+lAZGM41uOskM/hu5w7SfdRVD0r73Jkt7meZWzL9wP
zwPBENHIZpWzmi4dmWSbx1yrmWeyuATGitSRINaCRkMzVYPMwV3kVPy74qwSAQsv
VQUXXr3+7marqo98HLTXcIfy1035i3q1VA5WVT6MLqGaKF6F1IC/lkTY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuob6zReNzpX6+kJ/gLK+Q0WKWjMB8GA1UdIwQY
MBaAFEpK0DoPWSu5yXwwUqaQEl2EZBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMt
YTlhYzY2YmU0OGY3LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNjc5MDMtZjQyNi00YmYwLTkyMzMtYTlhYzY2YmU0OGY3
LzEvU2tyUU9nOVpLN25KZkRCU3BwQVNYWVJrRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMHv1jdC
023eNAWX2yxVR6b5V+Zje+nI93o7M3ggwqwCIfCCIB6OaXphvtvN+WRWDSTtzuIp
cwt9zATkVA++X2kRb23WXYkBZWONKGI4/+qWzeQz3PQyJIKFzYh6jSP6eX4TfNaA
lPuoC4Y8SV6TPFswHha1C8eQ9NHoD/9AbyXpT9R9IEMMMGD4oLZ/4iIZqF7AJK01
1ou6K4wfBWbCfLePdJ0HD7OROWlIIuE14ufJAcZEm4yWRBeT2PMUJyE238YkyLFS
CZLrnfEcEK8rVBJO9+Ws7CpHLAgXesY8U6LwC0jMoCxH7w5BfGIYc0HRvgpS28Rc
9O/zMSYhiLR84g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:16 2026 by rpki-client