Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File: SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier: 0R0LX2xOSZu2XrU4PM2wXo9HUIW7PZwtw6EsCTTvMGA=
Subject key identifier: D9:6B:14:96:92:9A:A7:24:2C:53:C4:54:3D:C7:6B:F1:04:56:95:8A
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 019FAD1AFA7B959BE3B62B4C27995F31D250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number: 12D2
Signing time: Wed 29 Jul 2026 09:00:54 +0000
Manifest this update: Wed 29 Jul 2026 09:00:54 +0000
Manifest next update: Thu 30 Jul 2026 09:00:54 +0000
Files and hashes: 1: 3EeJh95vWlbqkBMJsY8WJvQJZSQ.roa (hash: HKt/H+HcjtF1ud6gYULu77Dwf2Spakt+G/k1RzaE2tU=)
2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: vr0Uj6MfN7pL+WhmcIaL5OufYrJ7rG+DiWERnibPW84=)
3: wvUTboW8ZBUP6kKOMK2PMJNwHKA.roa (hash: qmo6aS/eJTUU20epsF5LshfZ02w0I+n/dRPdKj8OTLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:fa:7b:95:9b:e3:b6:2b:4c:27:99:5f:31:d2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Jul 29 09:00:54 2026 GMT
Not After : Jul 30 09:00:54 2026 GMT
Subject: CN=d96b1496929aa7242c53c4543dc76bf10456958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:19:37:d1:33:08:7d:68:52:b1:66:67:39:
79:fb:60:8a:9d:0c:60:3d:5c:4e:2e:53:31:dc:82:
47:de:1a:e5:53:e3:38:96:e9:8d:37:d1:5c:b2:af:
d5:ec:ab:36:7f:09:3c:26:56:49:b2:99:b9:4e:c1:
36:5b:39:fe:62:5e:39:60:21:ac:68:4d:1e:7e:53:
c7:aa:8c:28:65:de:9c:2a:fc:6e:9a:1f:d9:37:00:
e3:c7:6a:5c:be:8c:b1:6c:d1:f6:ba:2e:27:1e:87:
18:13:fa:5b:a6:ee:09:cc:f1:66:6c:37:e5:94:32:
9c:5c:9d:63:07:4c:17:90:51:93:42:fe:8d:b5:50:
00:1f:88:38:75:a5:f7:fe:91:e5:ac:1d:50:a0:04:
85:3c:d9:d3:b4:42:ea:ba:9f:e4:78:37:96:54:b7:
f8:e6:94:34:b7:9f:11:83:1e:cf:b0:1e:62:ee:cf:
bf:15:b4:f0:d8:a0:b3:37:ca:2d:6f:20:ce:c5:ee:
f3:49:bd:cf:ca:34:b0:2c:51:32:4f:08:4c:ff:40:
21:dc:4e:16:90:d7:1c:d4:3a:c6:f3:58:2a:7b:19:
86:57:c9:92:b7:15:ca:0d:f5:b9:8f:56:fe:31:97:
5c:3f:61:a7:71:f7:ff:79:ae:c4:fa:fe:c5:f0:4a:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:14:96:92:9A:A7:24:2C:53:C4:54:3D:C7:6B:F1:04:56:95:8A
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:0e:27:bd:e3:f9:45:2c:21:ae:07:7f:85:e9:e8:7a:0b:
f7:ca:2e:4c:4e:9b:78:ef:37:dd:79:da:98:b3:29:47:0f:ed:
c6:68:aa:ed:30:20:ef:2e:ba:dc:25:34:d7:dd:ac:87:e3:99:
ed:f7:e7:bc:3a:5d:e1:ad:38:98:e7:29:5c:92:8c:c6:1a:93:
09:3b:d9:3b:25:39:ab:dd:6c:0b:82:e5:e2:c9:c5:9c:e7:3d:
cf:4a:8f:bc:d2:a5:85:6a:ac:a0:55:29:d0:90:51:7d:91:12:
e0:72:a9:57:a7:c2:2c:94:0c:4a:6e:e9:55:ad:3b:90:7c:30:
21:e5:16:de:11:00:86:a0:03:28:02:d1:24:b6:87:07:4d:d8:
06:02:91:54:11:09:45:a0:06:15:13:b1:cd:a0:5d:08:59:4b:
4d:69:11:3f:93:42:3a:b5:71:28:e2:f0:ae:09:3a:ba:39:10:
88:49:d7:99:92:d9:b3:f5:36:0d:42:58:b1:1d:54:ef:42:15:
7d:f4:d2:a6:dc:a2:36:90:e7:b1:eb:7f:03:d3:77:78:46:4f:
4c:89:8e:75:98:46:78:ee:aa:60:6b:24:e3:d9:4d:77:3f:b2:
79:17:2b:f0:7d:1c:54:4e:14:22:dd:f3:52:1e:f1:53:8e:73:
ef:e6:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:16:20 2026 by rpki-client