Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: eG1Ny0Sf+aW7PQtWoTjJqXU+Q8zVwrg9K4eJuREpUmA=
Subject key identifier: 94:22:6A:01:79:5B:38:14:E9:A0:5B:8F:A6:B8:B0:E6:8B:F6:A2:04
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019D977419ED7A5EEC5D8E1E0E39ADF0C8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 17DE
Signing time: Thu 16 Apr 2026 18:01:01 +0000
Manifest this update: Thu 16 Apr 2026 18:01:01 +0000
Manifest next update: Fri 17 Apr 2026 18:01:01 +0000
Files and hashes: 1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: 0gO5imZqaDoML6SNqi76+Dr2uQU8jSdLs2OWOtrYihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:19:ed:7a:5e:ec:5d:8e:1e:0e:39:ad:f0:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Apr 16 18:01:01 2026 GMT
Not After : Apr 17 18:01:01 2026 GMT
Subject: CN=94226a01795b3814e9a05b8fa6b8b0e68bf6a204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:57:70:6f:af:65:1d:68:58:e5:f6:1d:d1:
c5:fe:09:1e:ba:3b:57:31:c1:7b:b2:d0:26:a0:db:
95:4a:41:c4:a1:db:2b:ba:43:1d:3f:38:b4:5c:bd:
a0:bf:9f:91:58:3f:77:1a:d8:99:79:64:30:d5:34:
96:30:fb:63:47:30:2b:28:fd:17:25:42:76:32:1f:
9b:cc:0e:75:0f:4e:9d:98:a8:e7:90:d9:2e:45:78:
92:37:90:1c:3b:93:80:0a:45:db:33:d7:76:e4:e8:
27:34:a4:fb:f9:ef:a1:cf:a3:4d:08:d9:8f:7f:0a:
64:de:b1:cc:b1:04:e6:41:c3:a6:51:e1:60:ac:2e:
2f:88:b7:44:b1:3d:12:ec:0a:03:e0:02:e9:f4:48:
73:54:db:e2:58:23:ab:cf:a9:6a:88:4f:77:8e:e8:
15:f1:7f:1e:bb:6b:d7:09:98:ee:c6:6f:83:f8:c7:
5f:fc:30:c2:80:26:e3:3a:0f:6a:58:9f:97:b1:12:
00:0d:8d:20:b0:8e:21:73:42:ee:59:97:b9:80:f4:
cd:db:87:60:27:9c:f2:d2:42:09:31:06:f5:47:91:
97:23:0d:c8:e6:00:a1:4e:ba:4e:00:ba:0d:0a:ff:
e0:49:60:2a:06:f6:ca:30:3a:8b:e8:48:9c:91:ae:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:6A:01:79:5B:38:14:E9:A0:5B:8F:A6:B8:B0:E6:8B:F6:A2:04
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fe:a4:c7:63:4b:0d:35:bb:43:d5:97:b7:80:4c:df:45:94:
bc:3d:e1:89:3b:e1:d1:d2:65:50:04:c4:f3:15:9d:f4:d0:db:
60:09:39:b9:55:62:80:3f:1c:97:dc:1a:e1:3b:fc:da:0c:8f:
38:92:be:37:81:f0:a3:40:bc:72:1e:63:7b:72:20:99:3c:1a:
0a:3a:12:35:71:f4:ec:2f:1f:29:f6:df:18:8f:55:af:93:4d:
8c:a0:e9:40:f5:33:e0:5d:9f:41:ef:95:de:56:3c:d3:37:c0:
84:71:b2:68:1d:e1:31:c8:fa:8d:bb:ae:99:00:9b:86:e7:16:
ed:f2:2b:b5:11:35:eb:0f:5e:6c:85:b2:79:fd:d1:e6:90:86:
00:77:a0:e8:12:35:5b:bf:83:40:58:ef:c3:5e:f8:1d:c2:53:
28:d3:58:bf:4d:0d:89:e4:55:24:84:96:d9:92:e0:e2:a8:ee:
c7:d4:af:1b:91:a6:16:92:11:52:3c:e7:04:cc:69:7c:87:66:
98:5d:32:c5:41:7f:b1:b5:de:37:31:f2:d5:98:5f:9d:08:b0:
5e:8b:59:35:75:34:26:a3:e8:f6:ea:9f:ca:ec:d9:5c:5e:13:
e5:22:d6:11:c4:f8:b1:50:c9:bf:af:5d:a3:5c:b5:22:09:d7:
6b:27:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:59:14 2026 by rpki-client