Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
File: SkmHwMS96SdcCXxrtkfo4agrRi0.mft (raw, json)
Hash identifier: IPmmfmDxa0KdAhxJjMT7ylqPAXHvPnc0EH/f+Kj26f0=
Subject key identifier: 37:3A:8F:92:02:91:DC:78:5A:19:B1:51:FB:02:E3:E5:A9:51:29:5D
Authority key identifier: 4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
Certificate issuer: /CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Certificate serial: 01A0C669FF5110E3DA4E3DCAAACF55B1C20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:30 +0000
Manifest this update: Tue 22 Sep 2026 00:00:30 +0000
Manifest next update: Wed 23 Sep 2026 00:00:30 +0000
Files and hashes: 1: 5l85adI4WOXSit-4c6HEIjPKoHc.roa (hash: ojOA0XRvDOdTK/IWm8Xmo8VtAPCFqWD6gLMlWBk8nYM=)
2: SkmHwMS96SdcCXxrtkfo4agrRi0.crl (hash: lZpUf8Kq4TxW2hnu1+wrS1tYbP3ADejhgXVK1GvbOdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:ff:51:10:e3:da:4e:3d:ca:aa:cf:55:b1:c2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4987c0c4bde9275c097c6bb647e8e1a82b462d
Validity
Not Before: Sep 22 00:00:30 2026 GMT
Not After : Sep 23 00:00:30 2026 GMT
Subject: CN=373a8f920291dc785a19b151fb02e3e5a951295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:8c:38:01:b8:6e:01:d0:7f:8f:49:ad:41:
5c:2d:87:11:a9:2e:81:c4:cf:af:b5:9a:9b:c8:29:
07:5f:aa:86:d9:b8:3d:ea:4f:6f:d8:cb:0a:ff:5d:
e1:c0:f6:1a:e6:ad:5d:1a:62:9f:a2:21:4f:2a:e5:
72:75:8a:14:0c:76:2a:b6:cf:f4:71:c1:d2:da:ee:
a9:84:3d:b3:15:7a:7f:41:0a:47:96:e1:09:c0:a9:
b8:24:15:ad:63:83:dd:e6:c8:a8:3b:02:d7:43:00:
bf:b6:3a:99:b3:8f:a9:2f:11:60:55:f6:f0:b2:56:
40:f3:39:c4:ae:d6:e0:c5:f8:a8:20:1b:ef:fa:11:
a6:f7:9e:ee:e0:98:84:55:ea:37:ea:2f:b9:f9:08:
48:d3:86:2e:cd:66:77:78:83:0b:36:ca:78:f8:a0:
27:77:0c:f4:19:63:2b:35:5c:c3:52:cc:0a:6b:d7:
ef:ff:75:63:79:ba:fb:54:df:e3:cf:41:9b:4c:68:
e4:01:1f:b2:94:64:a0:f9:af:cd:3c:9c:cb:cb:3f:
22:a0:a1:9f:4d:28:29:98:34:f7:a6:16:e3:5e:1c:
14:d5:72:af:d6:49:69:5e:31:fa:e1:cc:12:df:db:
d8:95:29:7f:45:67:8b:25:3d:d3:1f:d4:68:ee:bf:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:8F:92:02:91:DC:78:5A:19:B1:51:FB:02:E3:E5:A9:51:29:5D
X509v3 Authority Key Identifier:
keyid:4A:49:87:C0:C4:BD:E9:27:5C:09:7C:6B:B6:47:E8:E1:A8:2B:46:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkmHwMS96SdcCXxrtkfo4agrRi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/SkmHwMS96SdcCXxrtkfo4agrRi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0a:4b:2d:01:a6:3c:ac:ec:5a:eb:51:be:ec:75:40:24:0b:
16:34:d3:5e:38:99:23:32:f0:df:53:2c:5e:45:a2:45:ef:8d:
b2:f3:f4:9d:d1:17:fb:95:9f:d3:56:cb:67:b1:6f:af:50:b1:
e8:9c:71:aa:cb:fb:ac:65:c6:f6:7c:c1:ab:db:8e:63:d5:52:
c8:1c:b2:93:1e:98:f3:35:18:00:97:42:1a:5c:2d:dc:fe:d2:
bc:24:3f:63:1b:59:26:bc:2a:50:44:fb:af:48:ed:27:44:b8:
54:8d:2e:7e:59:a1:43:59:fd:3d:23:c1:e8:37:69:6c:7d:34:
55:52:51:4b:3b:39:8c:d7:b2:8d:fc:6c:ad:36:3a:6b:05:1b:
8c:be:85:81:cd:f6:e2:0b:ad:ab:bc:55:da:cd:db:fa:1c:f8:
56:16:45:cf:a1:77:f0:ab:79:cf:86:69:67:58:d8:3c:24:14:
f0:78:03:f7:34:06:e1:97:8c:94:37:0c:59:4d:8a:70:29:25:
a5:07:eb:8d:71:31:85:7c:49:f6:55:b0:27:5f:31:95:a9:af:
87:1e:39:15:ec:09:7f:fc:6f:ba:2b:c1:13:4a:04:67:78:a5:
a5:9b:2b:07:1b:b3:79:2b:51:8c:a4:73:02:cc:1e:f3:7e:1f:
70:be:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:45:58 2026 by rpki-client