Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File: SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier: StTZZ/fsZbPO9ylT0eALoXFPo1TPjRglBGKTIonvvFg=
Subject key identifier: 55:AF:8C:EF:8A:0C:09:24:82:9C:BD:B3:92:EB:F5:E6:F8:91:FF:37
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019FAC76D4D7CD833F0A2D529B26CAADE9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number: 18F2
Signing time: Wed 29 Jul 2026 06:01:36 +0000
Manifest this update: Wed 29 Jul 2026 06:01:36 +0000
Manifest next update: Thu 30 Jul 2026 06:01:36 +0000
Files and hashes: 1: LY2SZaS4pei18ToSlPlrLXW5sMk.roa (hash: nROSVRfoddVkaul+J1xodezFnhIj684VanT5Ow2R/wE=)
2: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: vx8CSVHCyzvO5rTODuzupDrefPDJrCgHCSouB5jBnfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:d4:d7:cd:83:3f:0a:2d:52:9b:26:ca:ad:e9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jul 29 06:01:36 2026 GMT
Not After : Jul 30 06:01:36 2026 GMT
Subject: CN=55af8cef8a0c0924829cbdb392ebf5e6f891ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:0e:d2:46:ce:8e:95:e0:32:0e:2f:0d:7a:
80:b5:92:56:b9:f4:86:fb:4e:cf:48:41:c5:20:aa:
47:2e:ab:49:b5:8b:30:b0:8b:c2:1c:99:09:92:8c:
05:ff:c0:5d:50:7a:d2:c7:df:2e:26:d0:82:7b:0e:
9a:6b:fc:71:b3:e3:85:f5:20:1b:c4:37:fb:64:13:
96:86:59:cd:41:10:99:c7:fb:dc:bd:11:54:c4:d1:
27:db:21:e7:f4:79:71:79:62:81:32:71:a4:aa:d6:
62:53:e2:d9:ad:75:1d:68:5e:6e:0f:3a:78:d6:a5:
cf:26:49:2f:8b:b0:66:26:0b:d8:3a:3f:00:61:3b:
0e:7a:02:7f:42:30:63:13:00:ab:2f:32:d4:0d:25:
44:ff:9a:d3:b4:17:d4:14:68:a4:31:fb:5a:97:0b:
f3:58:23:eb:85:b1:1c:05:87:49:5c:ce:34:3b:ab:
19:e4:f3:c6:02:7c:4c:7d:9f:36:ea:55:33:a6:28:
5e:f4:f6:38:85:53:c2:40:d5:84:90:ba:5a:66:fe:
16:27:05:90:73:d0:97:91:80:47:00:5e:4d:cc:eb:
19:e6:8e:3f:a8:aa:0f:07:f2:89:a3:07:a3:27:3f:
7c:02:f8:a0:62:73:28:17:93:2f:dd:8d:0d:cb:2f:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:8C:EF:8A:0C:09:24:82:9C:BD:B3:92:EB:F5:E6:F8:91:FF:37
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:af:17:43:c4:02:6f:68:02:be:6c:4e:1b:c1:96:e7:9d:
38:d6:83:e1:ea:63:31:48:98:ce:be:38:6b:d2:33:01:da:72:
a0:32:94:e0:af:a7:8e:a9:1e:85:a4:13:7d:64:24:5f:8f:c2:
d4:e7:4c:88:c8:f9:d6:ac:7b:9a:21:42:63:5c:73:f6:01:e7:
bf:09:fa:d0:24:1e:d9:d1:50:08:3a:1a:72:ca:fa:3c:44:ec:
a0:76:b5:08:37:06:51:4b:ba:07:b1:43:cf:08:b8:cc:3c:57:
4c:70:3d:a5:15:39:33:f0:63:11:b4:f1:35:3a:10:01:55:69:
43:d1:68:02:9c:cc:5d:c5:67:78:cf:13:78:1e:52:1c:15:ab:
c5:1c:91:99:b3:5d:bb:bd:bb:bd:0c:15:08:1d:0e:00:66:5c:
a9:61:a3:6c:ac:ea:78:89:c6:52:08:29:db:0e:d8:90:62:b1:
e1:d7:1c:0c:e7:9c:df:8b:9f:25:73:70:75:ff:ea:cf:67:ba:
b0:ed:11:30:79:55:ca:6c:9e:64:20:ed:db:9f:fc:14:82:d5:
f7:82:3f:50:a0:8f:3a:37:6d:d0:a6:06:09:a3:8d:99:15:41:
f3:bd:ad:cd:37:9a:fb:3f:97:d6:fc:41:af:ba:83:35:96:5a:
6e:76:d7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdtTXzYM/Ci1SmybKremyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGIxN2QwMzJiOWZiNWY3ZTViYzlmZDI2OGRmYjgwZWRl
ZWQyMWQwHhcNMjYwNzI5MDYwMTM2WhcNMjYwNzMwMDYwMTM2WjAzMTEwLwYDVQQD
Eyg1NWFmOGNlZjhhMGMwOTI0ODI5Y2JkYjM5MmViZjVlNmY4OTFmZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd8O0kbOjpXgMg4vDXqAtZJWufSG
+07PSEHFIKpHLqtJtYswsIvCHJkJkowF/8BdUHrSx98uJtCCew6aa/xxs+OF9SAb
xDf7ZBOWhlnNQRCZx/vcvRFUxNEn2yHn9HlxeWKBMnGkqtZiU+LZrXUdaF5uDzp4
1qXPJkkvi7BmJgvYOj8AYTsOegJ/QjBjEwCrLzLUDSVE/5rTtBfUFGikMftalwvz
WCPrhbEcBYdJXM40O6sZ5PPGAnxMfZ826lUzpihe9PY4hVPCQNWEkLpaZv4WJwWQ
c9CXkYBHAF5NzOsZ5o4/qKoPB/KJowejJz98AvigYnMoF5Mv3Y0Nyy946wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWvjO+KDAkkgpy9s5Lr9eb4kf83MB8GA1UdIwQY
MBaAFEpLF9AyuftfflvJ/SaN+4Dt7tIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYt
NzU5YWM1MDQxNGRlLzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83NTc4NWYtMGU4Mi00ZDQ2LTg0NTYtNzU5YWM1MDQxNGRl
LzEvU2tzWDBESzUtMTktVzhuOUpvMzdnTzN1MGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId2vF0PE
Am9oAr5sThvBluedONaD4epjMUiYzr44a9IzAdpyoDKU4K+njqkehaQTfWQkX4/C
1OdMiMj51qx7miFCY1xz9gHnvwn60CQe2dFQCDoacsr6PETsoHa1CDcGUUu6B7FD
zwi4zDxXTHA9pRU5M/BjEbTxNToQAVVpQ9FoApzMXcVneM8TeB5SHBWrxRyRmbNd
u727vQwVCB0OAGZcqWGjbKzqeInGUggp2w7YkGKx4dccDOec34ufJXNwdf/qz2e6
sO0RMHlVymyeZCDt25/8FILV94I/UKCPOjdt0KYGCaONmRVB872tzTea+z+X1vxB
r7qDNZZabnbXEQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:41 2026 by rpki-client