Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
File: SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft (raw, json)
Hash identifier: ZiVTWDzLn4wu5SN6DgAi72Iud9AvpHflAwSiHrSICtY=
Subject key identifier: 88:90:A2:ED:E1:80:04:55:45:96:1E:20:BD:6E:57:80:83:43:B2:D1
Authority key identifier: 48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
Certificate issuer: /CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Certificate serial: 019DA3E6E3280782FEBF336E2568DFD25C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
Manifest number: 07D5
Signing time: Sun 19 Apr 2026 04:01:50 +0000
Manifest this update: Sun 19 Apr 2026 04:01:50 +0000
Manifest next update: Mon 20 Apr 2026 04:01:50 +0000
Files and hashes: 1: SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl (hash: o1FnII/u2Fq7JgThpVbyrjh30Yl6xqnQ2MYf6F/UHCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e3:28:07:82:fe:bf:33:6e:25:68:df:d2:5c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ac806b5bca4c7d916d503d5c793c8df44ee6d3
Validity
Not Before: Apr 19 04:01:50 2026 GMT
Not After : Apr 20 04:01:50 2026 GMT
Subject: CN=8890a2ede180045545961e20bd6e57808343b2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:b4:3a:d5:5f:73:2f:a2:05:ba:86:94:27:
ee:35:9e:67:1a:0b:77:c6:59:c6:14:2e:e9:82:07:
ee:2b:9e:b8:3e:54:b4:9e:62:be:0b:b8:c1:2b:a9:
d6:eb:fc:c4:38:75:4f:6e:8b:54:d8:85:ba:38:b1:
76:70:8d:70:8e:a6:e1:64:d9:9e:b4:78:d6:14:51:
e7:c4:2a:d6:f7:48:88:ad:92:4a:a8:13:c4:03:f5:
f7:98:01:30:9f:88:18:9f:58:66:c1:ab:27:67:58:
33:0a:a5:e0:a0:6d:30:2b:5a:9f:4f:4b:d2:60:ff:
6e:d7:8d:f8:1b:dd:11:d5:84:16:59:15:c2:e6:25:
56:33:59:84:60:d9:fc:1a:29:00:1f:ef:76:6f:07:
f4:ee:7c:99:f2:db:31:0e:be:7e:e0:e1:d9:bd:6e:
23:17:1b:a2:7a:c9:89:46:d4:ea:44:35:9b:e7:97:
a7:5d:af:bb:05:a6:81:41:aa:3f:0d:f6:26:fb:a4:
5c:38:7a:a5:da:d6:9c:53:2a:d1:22:42:0d:5c:4e:
9a:4e:b6:99:07:51:46:96:94:1f:f1:c1:43:de:b4:
a0:1e:42:02:d5:15:c3:1e:5f:df:61:b4:45:cc:a2:
a4:c7:16:94:0a:04:25:0d:51:5e:08:89:79:ed:b9:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:A2:ED:E1:80:04:55:45:96:1E:20:BD:6E:57:80:83:43:B2:D1
X509v3 Authority Key Identifier:
keyid:48:AC:80:6B:5B:CA:4C:7D:91:6D:50:3D:5C:79:3C:8D:F4:4E:E6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKyAa1vKTH2RbVA9XHk8jfRO5tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/918ac3-49a5-4a32-bd72-723baa8e688a/1/SKyAa1vKTH2RbVA9XHk8jfRO5tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:65:63:34:d9:0e:be:8f:af:30:93:8d:b8:61:f0:53:d6:65:
38:79:69:17:85:ce:0b:7d:fd:23:a3:6d:e9:65:14:2a:8d:d5:
7d:8c:f8:39:9e:2c:16:da:60:b9:1b:9c:ae:d1:c7:06:30:ff:
bf:f5:a9:e1:56:44:2c:e0:5d:59:0a:30:24:6f:e7:14:cf:d2:
38:f8:bf:ed:f4:71:8a:3a:bd:51:15:c7:6c:5f:0b:24:2b:fb:
e2:27:d7:1f:b1:5b:e9:6c:d6:54:7b:ff:67:d1:b8:26:3f:dd:
24:9f:11:5f:50:98:59:a1:39:7d:70:f5:b3:c2:9a:66:65:40:
0a:63:7b:52:1f:a0:f4:b5:36:a1:87:c2:d2:c5:33:77:07:60:
24:10:68:02:16:4d:a3:a5:83:e3:4b:95:76:b4:fb:e9:7a:c7:
39:6d:3f:1c:7e:c3:5d:75:11:b9:df:e7:4d:ce:37:00:46:84:
26:9c:da:99:f8:1e:4b:44:64:a0:1f:74:fd:8e:6c:70:e1:31:
af:70:14:32:18:bb:a1:a9:03:ba:8a:ea:d9:41:2e:a1:6b:d0:
9c:22:b9:c5:22:1d:82:03:e0:01:ac:61:6e:89:c4:4e:3e:83:
fb:bd:cc:26:bf:e2:23:82:45:4a:aa:6b:c2:b1:bc:19:57:71:
c0:f9:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:31 2026 by rpki-client