Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: ghhX7kx7IXzKI/4Zjmr0g19CRdhx0ipzv+psaV+dFyE=
Subject key identifier: F1:8C:1B:D0:82:61:54:17:42:09:0A:86:75:30:0E:3F:69:65:DE:D7
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019CABD9A6B6949C84B7D893E2A12828755A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 1764
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: srREXqoFq4isEYUDiZl6lmTW3hFYjNA0bzbWaeb/Pv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a6:b6:94:9c:84:b7:d8:93:e2:a1:28:28:75:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=f18c1bd08261541742090a8675300e3f6965ded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cd:6c:55:fc:1e:26:e7:39:e4:ff:84:6a:7f:
12:eb:d5:c5:e6:8c:a7:df:75:dc:3e:4c:73:76:a7:
df:22:8a:55:ee:89:a5:c5:4b:e4:49:6e:ca:b3:eb:
d0:36:f3:8a:6f:19:1c:0a:5f:1e:9f:b2:02:da:b7:
0b:4e:7b:38:c7:6a:73:6c:9f:26:be:e6:98:71:97:
55:bc:6d:ad:c7:f8:96:20:3a:e1:40:aa:d4:20:84:
7e:0b:3b:50:d3:74:bc:63:d6:b3:39:80:28:e7:87:
00:54:70:20:b1:94:a9:a6:99:c7:47:b2:4b:a3:42:
2c:5b:8d:9d:33:ca:99:3c:19:15:63:a8:31:9b:9f:
0e:d1:a5:af:19:49:05:08:f9:8c:8e:75:99:5b:04:
01:0f:32:e8:4a:39:b5:a6:c3:f5:8b:a8:aa:48:53:
c5:83:e2:81:07:6f:ce:25:d1:ea:1c:77:1e:09:e1:
c0:a1:96:c9:6f:ef:48:5e:7c:51:8c:3e:5d:7d:00:
d7:94:f4:8e:79:98:27:0f:a9:5a:d1:64:ef:d7:1f:
ee:1d:e1:9e:5e:17:80:9d:68:ec:bb:74:28:ed:d8:
9c:50:0c:8c:6a:4e:75:89:59:9a:12:df:91:0a:45:
78:b9:5f:e2:e7:0f:f5:be:61:53:9b:52:ad:ce:3a:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:1B:D0:82:61:54:17:42:09:0A:86:75:30:0E:3F:69:65:DE:D7
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:b3:b5:61:01:d1:4d:e9:87:cc:e6:14:8d:ce:02:80:14:
b7:69:8e:65:d5:c1:98:44:e2:49:6a:91:e4:ad:0d:4d:8d:1b:
5a:08:23:f9:76:a9:9c:2a:d3:7e:d9:55:48:5f:7e:c1:38:85:
fa:38:1c:fb:56:ec:29:e0:50:34:b5:60:23:d2:f5:01:b0:ab:
a4:42:e2:69:f8:67:8e:c0:e7:3d:d0:cd:38:4c:c9:e3:11:57:
16:29:ce:05:6f:9a:6f:80:99:b8:57:fe:92:31:63:d0:03:16:
fb:32:95:bd:94:ee:cc:c7:68:7b:c2:52:53:84:6e:f8:c8:ab:
f5:7e:b1:d9:d8:79:01:2a:1e:b0:62:7a:b0:7e:76:72:55:94:
7e:d8:65:9c:9c:cd:4f:b9:dc:1c:75:35:9f:ec:96:a5:7c:1c:
fa:1a:72:a4:ba:69:22:65:2c:be:40:45:75:8e:97:e7:21:31:
3e:63:db:fc:6e:28:65:49:b5:0a:20:e1:34:cd:da:9f:97:9d:
78:f5:0e:c4:13:b0:c2:8c:10:df:48:3d:c3:6a:66:45:2c:6f:
e8:f9:66:c7:e5:cf:50:51:79:c0:e0:32:0d:ae:a0:3f:3a:b4:
17:b4:a6:95:38:de:cf:5f:9e:fa:ca:43:eb:32:cb:09:df:23:
05:49:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:41 2026 by rpki-client