Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
File: SKLoEfALrhakR0I_EeJCFxQs_3w.mft (raw, json)
Hash identifier: K9OO32wFPhxP9F7nDpMr2BQhaHvBrnzXUU5HwvnsUUs=
Subject key identifier: F5:B4:01:68:3E:54:61:36:10:9D:A3:BB:E5:1F:8C:DB:AD:84:C7:C1
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019CAEA35E33B91ED7DFC1AE300CDD7C3479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
Manifest number: 029F
Signing time: Mon 02 Mar 2026 13:01:07 +0000
Manifest this update: Mon 02 Mar 2026 13:01:07 +0000
Manifest next update: Tue 03 Mar 2026 13:01:07 +0000
Files and hashes: 1: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (hash: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM=)
2: E0WOservMgR3JKWcCGOeeSVBFRU.roa (hash: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=)
3: SKLoEfALrhakR0I_EeJCFxQs_3w.crl (hash: 55i5NjvMEzfazBNmAQyEWCN0B6FSdlyBQJUVBjOFiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:5e:33:b9:1e:d7:df:c1:ae:30:0c:dd:7c:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Mar 2 13:01:07 2026 GMT
Not After : Mar 3 13:01:07 2026 GMT
Subject: CN=f5b401683e546136109da3bbe51f8cdbad84c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:17:11:c3:3e:c7:0f:c7:0e:96:3c:e0:ef:
f6:54:78:d0:a3:43:c1:7d:9e:01:ce:95:83:20:f0:
b0:f5:9a:35:20:00:17:7f:a8:1c:a4:b7:d5:f2:fe:
d0:b2:33:42:89:7e:b9:11:3c:e5:0d:c1:18:ac:35:
d5:33:e9:f3:0c:30:10:ab:dd:d2:4b:e4:5a:e6:37:
3e:e3:7c:41:27:a5:6d:e0:49:ef:e4:60:e7:8d:db:
2b:59:1a:79:3f:c2:11:29:5a:53:63:4e:b9:b4:7c:
19:ee:5b:69:03:af:d1:a2:d4:9a:cd:44:89:a4:8d:
85:92:0b:4e:e8:1c:d3:72:33:74:db:09:53:b7:3e:
af:c0:ec:74:a7:aa:b0:c7:5c:92:a3:b4:91:3a:bb:
4d:54:7f:7a:db:eb:89:0c:7a:75:cd:2a:a5:cc:48:
2a:91:e0:90:c6:87:ab:c5:f0:f1:4a:3d:c8:d9:81:
e6:ef:cf:5a:33:44:b7:a6:e2:b4:99:1b:e4:77:e7:
db:77:05:7b:8c:a5:43:f5:9e:72:40:e6:4f:fd:ba:
09:fc:23:6f:88:51:cc:41:af:e2:50:a2:3d:a0:8c:
81:bc:49:ee:8c:90:f8:27:61:eb:8f:35:03:73:f1:
c2:37:15:b4:c8:ca:20:65:87:2e:97:e2:c9:c1:71:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:01:68:3E:54:61:36:10:9D:A3:BB:E5:1F:8C:DB:AD:84:C7:C1
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:04:9d:32:1b:7e:25:5a:7c:df:7a:e4:2c:b6:9a:69:75:a0:
59:1d:21:26:01:8f:6f:18:d8:7a:2c:d3:99:3c:f3:e3:42:57:
e9:99:16:4b:71:51:b9:14:ae:3c:39:39:50:58:61:d3:f6:85:
79:d8:e6:d9:e8:97:47:4c:1d:d0:69:0d:9f:f4:2c:14:59:06:
0a:44:d7:67:a2:7c:b8:1c:fd:0c:34:3b:0d:7d:cb:08:ce:8a:
f3:97:ae:4f:90:06:b9:79:fb:81:04:17:a3:12:d4:f0:ab:e4:
8b:c1:44:cb:f8:5e:fa:80:9f:fa:cf:b6:4c:6f:1d:c1:36:b9:
60:b5:e9:aa:9b:a2:e4:bf:6f:45:13:f1:d9:3e:6b:99:ad:3e:
a8:1b:f1:0f:76:c4:67:7a:00:1c:f6:9b:5c:a0:4a:94:fe:d2:
9a:12:16:69:d1:14:6d:15:93:6f:56:9c:45:c8:0e:4e:33:9d:
72:db:57:81:7f:e1:cc:8d:22:50:a9:1d:74:d6:a9:3d:9f:20:
7f:89:46:c5:4c:b6:f6:cb:01:48:d5:64:45:41:31:53:62:51:
f7:df:4c:11:52:12:e6:73:2f:f4:8d:42:54:22:b0:4c:03:9b:
c5:10:da:7d:7b:83:35:09:18:32:c0:be:e9:6f:f2:4e:e0:92:
b7:da:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:29 2026 by rpki-client