Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
File: SkoOHJOfCurGcQfqB_2uUWvb9wU.mft (raw, json)
Hash identifier: vGN9R29e4DykFj9LH5ooxR70Oq/O6z7+taVOrpZQoHw=
Subject key identifier: 9E:A9:BD:54:D2:28:35:7C:FC:2D:42:E9:71:AB:96:6D:A7:74:32:E3
Authority key identifier: 4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05
Certificate issuer: /CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
Certificate serial: 01A0C068433A51A4957D0A879774DB974C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 20:00:53 +0000
Manifest this update: Sun 20 Sep 2026 20:00:53 +0000
Manifest next update: Mon 21 Sep 2026 20:00:53 +0000
Files and hashes: 1: SkoOHJOfCurGcQfqB_2uUWvb9wU.crl (hash: ld8pNpukxuhhPC3yx5B8iwLI5TcU9N47RX1PHxtONdo=)
2: abPQvZftn6KJAeQY-dEytO7cxZY.roa (hash: R8vNG4brLgkvsyByQsU/FMzt+IrfXl75oZ8JXs9klhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:68:43:3a:51:a4:95:7d:0a:87:97:74:db:97:4c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4a0e1c939f0aeac67107ea07fdae516bdbf705
Validity
Not Before: Sep 20 20:00:53 2026 GMT
Not After : Sep 21 20:00:53 2026 GMT
Subject: CN=9ea9bd54d228357cfc2d42e971ab966da77432e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:d1:32:55:7e:a0:99:82:b3:2c:df:b8:33:
4d:07:1d:81:84:c0:5d:a0:a8:71:ed:e2:1d:db:b1:
52:c8:2a:ca:c9:a3:89:2a:8c:5c:12:cd:71:67:a4:
c5:e0:98:a4:c3:ed:2a:00:82:cd:1d:da:c4:33:88:
6d:a8:55:60:16:04:b5:8e:9b:34:90:5d:02:be:df:
db:d9:da:7f:09:90:a8:9e:ee:79:93:01:75:6b:6a:
ec:c8:1b:a1:95:0e:de:71:7c:b4:74:fd:c9:6a:3e:
08:6d:cc:3e:11:0f:0f:98:64:28:98:d1:85:01:06:
26:5e:4f:d3:96:88:c2:c9:20:c6:fe:5c:47:9c:17:
e3:30:d6:19:5f:ba:0e:3f:11:11:f9:c0:87:49:b5:
18:dd:55:21:63:89:35:cd:00:6f:6d:8f:34:6d:5e:
51:50:1d:e5:5c:d3:78:d5:c7:a6:a1:b8:be:94:25:
1b:ff:3b:bd:5e:25:5b:1e:c4:9c:34:fd:e7:b9:62:
35:02:6d:ff:fa:31:b4:e0:9d:10:c3:df:5c:27:87:
f7:f5:41:1f:4e:b1:4b:f3:74:60:69:f2:26:48:11:
b0:12:09:81:7b:dd:13:5d:56:91:fa:c9:72:8c:c4:
2c:df:f4:76:bb:e6:69:7f:34:8a:1e:e2:c4:d5:4e:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:BD:54:D2:28:35:7C:FC:2D:42:E9:71:AB:96:6D:A7:74:32:E3
X509v3 Authority Key Identifier:
keyid:4A:4A:0E:1C:93:9F:0A:EA:C6:71:07:EA:07:FD:AE:51:6B:DB:F7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkoOHJOfCurGcQfqB_2uUWvb9wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e91955-76b7-4af6-98ac-17d01c1eebc2/1/SkoOHJOfCurGcQfqB_2uUWvb9wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:ae:a5:f9:54:cf:4f:05:e3:a7:2c:d7:04:f8:aa:6d:7c:
ac:53:21:db:2e:36:0f:d5:98:87:26:e8:e5:f9:54:2b:b7:4b:
fb:bc:d0:16:47:db:c2:d2:bf:10:b6:ec:b1:f4:2f:1d:71:a0:
b7:30:60:41:d2:5f:db:9c:d3:0c:b8:fa:ad:13:8c:f4:21:61:
87:0b:04:a3:be:ee:b6:ce:a4:e6:73:73:c3:43:73:ab:43:9a:
a7:58:8b:e1:94:08:7c:2b:90:42:91:b6:aa:f2:bd:4d:31:e5:
aa:c6:9a:89:18:d3:9f:f4:18:aa:7e:6d:a3:60:18:89:80:01:
03:da:73:07:91:b3:2e:ae:19:28:f4:6b:d6:3d:bf:bc:f0:85:
84:c1:7a:dd:af:89:bd:7b:2a:cc:bd:49:42:6e:ce:dd:ba:f3:
d1:07:65:0b:8b:2f:50:ee:83:97:b6:a5:07:70:53:6a:b9:89:
3d:ec:7a:7a:75:0b:db:90:af:bd:c0:4e:34:28:e9:ed:ed:a6:
c3:f8:8f:ec:07:cb:0d:95:7b:61:0a:5f:ae:75:5d:59:de:6c:
47:88:5a:c1:d3:e6:53:79:41:2d:4d:08:dd:76:41:b7:f0:4f:
82:ed:04:49:49:48:3a:45:96:02:92:94:be:2b:8a:91:0d:33:
7d:87:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:14:28 2026 by rpki-client