Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: L0i/PRI6O0JNHtfknuTH9ZY2SelZm6ArR9QugOlWYrA=
Subject key identifier: 38:4D:FC:3B:56:7D:67:C9:D0:48:0F:99:05:AB:6F:68:C5:EF:64:27
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 019D99CFDA6F8B37DC480E1C0EBC34995666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: KmK468VUGFPUo7JfDhMsvIpIqq0.roa (hash: cCrY/FIccEUQ7wqZOlDpct0+9wnpRcWkBHCPotLe8Cw=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: C+Qza5b/ezSXdgridc6QBl+hEJ4dt1XiCjG/yDKb3qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:da:6f:8b:37:dc:48:0e:1c:0e:bc:34:99:56:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=384dfc3b567d67c9d0480f9905ab6f68c5ef6427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:83:24:68:58:2c:62:aa:8b:d2:78:f5:db:
cf:0c:05:20:7d:ca:5d:cc:58:06:8f:10:59:de:9a:
bf:cd:c6:65:40:45:ee:80:80:e9:be:7d:80:c5:06:
6b:dc:88:d1:50:69:e3:35:59:d9:12:ce:fd:42:5f:
da:3a:d9:67:8f:ad:3f:0c:37:5d:40:3d:70:ee:a5:
7a:b1:7c:7b:fb:56:c9:4b:f4:13:68:09:7c:1f:6d:
15:e0:2d:3b:07:60:27:8c:32:54:bd:bf:2e:1a:b3:
4b:ec:7d:2e:c0:bf:4c:60:01:7e:91:b4:c5:41:bc:
a8:1c:41:82:81:47:50:b3:41:59:09:a8:90:bf:74:
18:e1:75:27:c9:d9:72:bb:0e:f5:38:1f:2a:33:dc:
0d:ed:e8:82:de:b0:20:18:e9:6f:f0:3b:7e:58:7d:
48:04:14:39:a9:d3:63:0a:2f:c9:cd:f3:a1:57:36:
29:d3:43:89:0a:a7:b4:06:ff:f6:62:61:c3:a2:5a:
19:06:21:92:8a:59:94:35:d1:bc:e0:6f:4a:93:3c:
05:90:00:31:63:fc:fd:8c:52:c3:e9:f8:d2:93:31:
b2:a0:c7:b2:94:24:f3:38:84:7c:c1:f3:64:a7:94:
ed:01:c6:c7:e6:ec:40:2d:61:e6:93:23:9c:0f:0f:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:FC:3B:56:7D:67:C9:D0:48:0F:99:05:AB:6F:68:C5:EF:64:27
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:92:11:4b:01:b8:30:b0:04:84:26:32:9d:10:73:76:73:
5c:53:b3:41:8f:40:88:a2:44:73:e0:74:a0:6c:9d:a3:54:04:
e5:93:89:13:28:47:b6:ca:15:c3:9a:17:23:b5:9b:99:12:0c:
c1:c2:03:ed:fe:1d:61:be:18:c6:19:bc:ec:66:60:7a:fd:10:
bb:26:71:68:ad:b4:8d:4a:be:ef:2f:2d:16:8d:30:59:8d:02:
39:08:e0:ca:05:bc:7b:d1:19:c7:6d:7d:a0:fd:f0:b2:0c:30:
29:42:b8:15:ee:db:56:b1:97:b5:45:ab:4a:f5:a7:fe:36:8d:
66:9a:92:8b:71:11:df:e1:28:2a:91:55:ec:ed:a1:8f:b4:5a:
05:db:f0:41:a0:4a:ec:a5:04:96:a2:3e:44:55:21:77:9a:4d:
2e:86:4c:47:46:34:d0:24:06:a3:ab:a2:41:b8:fb:5e:c0:1f:
b6:9a:ac:1a:93:4d:85:91:0b:ca:8d:94:e5:89:b4:03:16:56:
95:02:91:8b:d8:77:65:2c:f7:82:fe:55:2f:62:34:b2:c4:22:
07:8b:c5:d9:81:b0:37:eb:ce:df:f7:55:f1:b2:a8:b3:de:02:
43:47:54:c6:c5:51:bd:4a:68:00:d4:fa:7f:3a:31:cc:15:e3:
5b:fb:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:32 2026 by rpki-client