Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: beN2uDRs851k7CcJlBzk+qd+upBNfpYhYHV5JkYBRN4=
Subject key identifier: AE:28:35:2F:E3:F3:9D:3F:4F:AD:5E:AA:9B:84:74:F3:5A:AC:3E:C6
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019D9C2C54FA69D2A155866F9857767A0258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 031A
Signing time: Fri 17 Apr 2026 16:00:44 +0000
Manifest this update: Fri 17 Apr 2026 16:00:44 +0000
Manifest next update: Sat 18 Apr 2026 16:00:44 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: chL5oCXaJiT6Q/gmRJwTHPae0GnBpfLDnrtyzUHznD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:54:fa:69:d2:a1:55:86:6f:98:57:76:7a:02:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Apr 17 16:00:44 2026 GMT
Not After : Apr 18 16:00:44 2026 GMT
Subject: CN=ae28352fe3f39d3f4fad5eaa9b8474f35aac3ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:18:55:9f:71:73:cf:e5:12:a7:81:c5:bd:
d8:90:40:38:91:8f:59:b7:4b:e8:79:54:f5:3f:8e:
99:c1:05:9c:85:fb:93:14:00:6c:e2:2d:1a:be:8b:
58:6d:8f:02:b8:d3:f2:96:e4:c2:17:03:b3:5e:8e:
f9:96:4a:2b:67:95:77:20:ac:2d:43:d8:8c:3f:70:
18:fa:7f:f8:8c:71:9b:fa:25:22:f1:4b:37:a3:30:
f7:05:07:f7:4f:bf:0c:b9:bb:d3:49:1b:b9:f1:d6:
ce:14:0e:11:a4:e3:75:93:16:00:2f:ce:a9:b6:56:
84:77:66:b5:87:f5:81:5a:bc:78:85:e9:c2:6d:b0:
61:c9:c1:e4:67:15:a5:fd:81:07:0b:ef:b1:1b:04:
c0:17:21:59:8c:e6:99:95:01:6b:be:7e:7b:e9:f2:
65:1c:b8:bf:8b:6e:ef:c3:11:4e:a3:2f:c1:84:5f:
d9:f8:65:15:7f:b4:87:6b:60:86:2e:22:e0:a8:bb:
ee:61:99:cc:97:c7:31:d7:f1:22:ef:70:1d:dc:1a:
84:90:3d:48:ad:35:02:1c:51:e5:3b:67:70:d0:d4:
a6:49:4f:c5:ae:92:83:dc:20:f4:08:5d:d7:ef:d1:
16:f0:10:f0:f6:a8:cd:8e:61:eb:83:19:4e:18:2b:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:35:2F:E3:F3:9D:3F:4F:AD:5E:AA:9B:84:74:F3:5A:AC:3E:C6
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:05:94:81:0e:0b:4a:a7:5f:c8:55:5d:85:0c:0c:a1:d8:
e1:42:c0:f0:82:28:aa:14:8b:63:19:50:5f:02:07:5a:82:1e:
b6:98:63:2c:21:8e:47:6a:90:f4:ec:69:96:30:8a:21:b6:5b:
af:3a:75:1a:9d:d4:f2:ed:e3:56:48:69:87:1b:46:55:06:69:
f9:cc:6c:9f:ff:7c:c0:b7:6e:97:4d:c3:0e:ea:b4:ba:cf:5a:
f4:e5:ec:c3:42:ba:28:6d:41:9b:c8:bb:e0:23:53:e8:a7:6c:
ac:f3:b3:05:9e:4e:15:20:26:bd:6e:e7:b1:0b:94:8c:8e:59:
3b:b9:6a:af:69:2c:7e:d3:5f:31:0a:85:9a:50:3a:33:82:35:
6b:b0:db:1e:77:ef:31:80:48:5e:2a:f6:20:2f:67:2b:7b:0c:
b6:1e:51:47:f8:97:fe:0d:5b:34:45:77:16:9e:54:ab:b8:4b:
8f:23:b6:38:20:f0:3c:7b:ca:39:cb:b0:ee:ba:05:4a:9e:5b:
68:28:79:bd:7b:6c:bc:2c:ea:54:16:02:6a:2a:9b:51:ea:99:
28:de:16:89:0c:8a:a4:df:c7:bf:4f:b3:33:93:95:91:51:3e:
a4:d0:45:3d:96:2d:84:3e:dd:c6:99:17:62:7f:81:80:d3:ef:
49:e0:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:47 2026 by rpki-client