Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: aD0pIn8vhcOcBHEvGj+qcifmhtpfli7sIj1IFU+oEKY=
Subject key identifier: 76:84:D4:55:81:1A:38:97:2A:F2:7E:B8:59:CE:47:B6:DE:76:10:79
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 019CAAC7196AB57E0F3EF69721ADBB341235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 0754
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: kOO1LjkAnxoyai9V6b39KhBJkZBZDfpZ1ir5MmSyotg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:19:6a:b5:7e:0f:3e:f6:97:21:ad:bb:34:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=7684d455811a38972af27eb859ce47b6de761079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:d5:26:02:66:cd:fa:d3:ae:c3:0b:21:ec:
6d:5a:f4:fe:bc:64:e4:9e:c7:36:c1:af:43:a4:18:
11:50:42:5f:23:22:f3:5e:29:41:c2:fe:ab:f2:f4:
39:9f:91:1a:c3:09:ea:5f:ff:b5:85:96:45:65:dc:
0f:a5:1c:b1:e7:b2:d8:82:35:ee:51:ef:45:20:15:
85:41:dc:cd:60:27:b9:ce:dd:32:5b:1c:e4:77:89:
8e:25:8d:a1:bf:d9:04:58:ac:68:63:b6:eb:55:56:
20:b2:94:47:32:d2:7a:93:51:2f:3c:a7:3d:af:d3:
59:22:47:77:18:2a:ec:ef:78:24:da:f3:27:7d:9c:
d9:a2:33:19:22:23:c8:aa:93:28:81:e7:fe:13:34:
f3:6e:8c:65:25:89:ea:b1:b7:2e:bf:ca:12:32:58:
8a:5f:a7:29:3c:1d:c4:a5:6e:9d:90:97:5a:b2:41:
8a:68:95:b7:6e:91:5d:8f:e3:e0:11:87:46:33:bd:
21:b1:44:8f:c0:ae:96:40:f6:b4:d2:fb:01:3b:fe:
3b:93:7b:e2:3c:c2:fe:67:30:7e:af:9f:37:ff:51:
77:9d:c7:b3:c4:bb:e3:b7:1b:00:34:e7:6e:97:d2:
17:d8:d2:7b:88:a6:7f:a6:67:49:00:da:be:5d:02:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:D4:55:81:1A:38:97:2A:F2:7E:B8:59:CE:47:B6:DE:76:10:79
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:63:cc:84:78:a1:9c:ab:f4:7f:54:1a:3d:bc:81:e4:c6:e4:
ed:bd:1f:62:7d:cc:c2:25:d8:d6:9d:ad:b9:97:7a:8d:ef:b7:
47:2c:8e:e2:07:76:c9:15:ba:28:e1:01:f9:03:40:da:bd:8a:
86:5b:10:22:21:c9:f9:37:72:41:b7:62:78:23:32:8c:b0:3e:
c1:7a:bf:a7:93:66:b2:b5:8a:5d:c2:b0:28:20:da:25:04:26:
0a:44:52:9a:83:0a:6c:1c:20:b6:bf:a1:c1:a9:4c:d4:cb:05:
8f:86:b6:9f:77:87:c2:fa:b8:33:e5:c0:99:f0:d9:f6:41:83:
88:45:e5:cd:3e:47:02:52:42:ad:9d:2d:01:12:fc:69:8d:07:
aa:c8:9d:24:c1:cd:dc:8a:79:dd:d1:f4:c3:4b:1c:44:44:8f:
01:65:ed:e7:ca:c2:55:a7:81:4c:a6:9c:dd:5e:c0:82:e6:38:
a8:1d:19:44:b0:09:30:f3:5b:87:d3:33:ca:48:04:8c:cf:ec:
2d:f8:67:fb:9f:14:ae:c0:55:55:54:9f:61:57:e6:20:f9:a9:
c2:b1:c7:1b:dd:a7:76:53:9a:a6:90:12:e5:36:09:eb:2b:10:
1d:d1:73:25:05:2c:b1:8a:e5:76:6c:da:0d:b0:e4:f6:77:88:
39:9c:f8:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxlqtX4PPvaXIa27NBI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YWM4MDZiNWJjYTRjN2Q5MTZkNTAzZDVjNzkzYzhkZjQ0
ZWU2ZDMwHhcNMjYwMzAxMTkwMTQwWhcNMjYwMzAyMTkwMTQwWjAzMTEwLwYDVQQD
Eyg3Njg0ZDQ1NTgxMWEzODk3MmFmMjdlYjg1OWNlNDdiNmRlNzYxMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1fVJgJmzfrTrsMLIextWvT+vGTk
nsc2wa9DpBgRUEJfIyLzXilBwv6r8vQ5n5EawwnqX/+1hZZFZdwPpRyx57LYgjXu
Ue9FIBWFQdzNYCe5zt0yWxzkd4mOJY2hv9kEWKxoY7brVVYgspRHMtJ6k1EvPKc9
r9NZIkd3GCrs73gk2vMnfZzZojMZIiPIqpMogef+EzTzboxlJYnqsbcuv8oSMliK
X6cpPB3EpW6dkJdaskGKaJW3bpFdj+PgEYdGM70hsUSPwK6WQPa00vsBO/47k3vi
PML+ZzB+r583/1F3ncezxLvjtxsANOdul9IX2NJ7iKZ/pmdJANq+XQJIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaE1FWBGjiXKvJ+uFnOR7bedhB5MB8GA1UdIwQY
MBaAFEisgGtbykx9kW1QPVx5PI30TubTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzIt
NzIzYmFhOGU2ODhhLzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MThhYzMtNDlhNS00YTMyLWJkNzItNzIzYmFhOGU2ODhh
LzEvU0t5QWExdktUSDJSYlZBOVhIazhqZlJPNXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2PMhHih
nKv0f1QaPbyB5Mbk7b0fYn3MwiXY1p2tuZd6je+3RyyO4gd2yRW6KOEB+QNA2r2K
hlsQIiHJ+TdyQbdieCMyjLA+wXq/p5NmsrWKXcKwKCDaJQQmCkRSmoMKbBwgtr+h
walM1MsFj4a2n3eHwvq4M+XAmfDZ9kGDiEXlzT5HAlJCrZ0tARL8aY0HqsidJMHN
3Ip53dH0w0scRESPAWXt58rCVaeBTKac3V7AguY4qB0ZRLAJMPNbh9MzykgEjM/s
Lfhn+58UrsBVVVSfYVfmIPmpwrHHG92ndlOappAS5TYJ6ysQHdFzJQUssYrldmza
DbDk9neIOZz4Iw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:30 2026 by rpki-client