
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: 10rlzKa/myRkmh5lYZxZDIEzEkWyg6r6Pxdf5gFIUdg=
Subject key identifier: AE:B5:86:C6:2D:92:64:06:0D:4F:B2:3F:2B:6A:5B:60:CA:90:57:2B
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 01A0E77777F30CD1409EC0AC371C25CA04C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 0994
Signing time: Mon 28 Sep 2026 10:02:41 +0000
Manifest this update: Mon 28 Sep 2026 10:02:41 +0000
Manifest next update: Tue 29 Sep 2026 10:02:41 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: pK0YygiPC4lDbWOUcZ6e8Ych8Sjxo/PzYgN00gm9DFI=)
2: cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa (hash: D7Hy4SDe+u2iQvMr4uFM192GN65qy0Iw55cUiW6a9ys=)
3: xN2tlbslAO9Hhzxol73kyIlksfo.roa (hash: 0KNISEhduMT4pUQpo6yJ7mPJDI8W5U5qrMtAEUOQhz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:77:f3:0c:d1:40:9e:c0:ac:37:1c:25:ca:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Sep 28 10:02:41 2026 GMT
Not After : Sep 29 10:02:41 2026 GMT
Subject: CN=aeb586c62d9264060d4fb23f2b6a5b60ca90572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:fd:fe:eb:d2:b3:56:bc:f5:00:94:3e:bf:
6d:de:26:73:4a:15:a5:99:06:dc:28:4e:01:2b:5b:
c4:f9:cc:77:50:68:fd:96:98:c1:a8:87:46:13:52:
1f:81:2e:b7:bc:b9:dc:af:0e:f9:7d:3a:7c:34:31:
7d:34:0c:fe:29:1f:95:fd:b4:74:f3:3f:8b:e3:b2:
c7:16:1c:cd:0f:f8:b5:f0:5f:b7:c9:13:10:f1:00:
45:c8:7e:e5:06:e1:38:13:eb:08:87:e5:b8:6e:f0:
c8:bc:dc:5c:4c:ce:cd:cc:29:20:86:a5:a7:0f:44:
84:dc:51:07:e0:5b:83:14:e8:90:7b:ac:1e:ba:98:
a4:f5:43:d3:fe:26:75:64:f1:d0:48:55:e6:d5:16:
eb:39:75:ba:df:29:a6:c2:48:e1:31:ac:71:07:21:
0f:0b:07:80:93:b8:84:7f:0a:4b:aa:68:49:02:fb:
d8:5e:1e:7c:2e:cf:22:74:5b:ad:51:67:21:7e:64:
31:bb:1b:82:e6:d3:6c:3a:66:c3:62:8e:b6:d1:ba:
91:18:6e:42:f0:68:17:87:35:1d:bd:99:c0:8d:b3:
2a:e7:0e:f6:97:22:61:f9:02:26:6a:6a:00:c4:73:
52:71:23:b8:c2:74:dd:cd:41:1c:b3:dc:6d:ca:b3:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B5:86:C6:2D:92:64:06:0D:4F:B2:3F:2B:6A:5B:60:CA:90:57:2B
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6c:f2:ab:10:db:fc:a7:0b:ed:f2:09:6f:f5:71:f7:64:35:
14:80:07:63:13:e9:85:ea:5a:37:22:64:99:cd:5f:42:8b:6f:
32:6c:4b:11:d0:8a:f0:dd:63:3d:c7:91:2a:99:32:bc:48:9e:
70:dd:b2:99:fe:2f:2b:b8:31:6d:45:ec:52:42:5b:94:69:42:
57:57:e1:fc:e2:bf:37:b4:e6:09:63:42:c7:ec:0c:61:72:20:
d1:f8:97:ff:7e:e0:5e:fb:69:ac:66:e5:8a:8e:0a:c1:63:f0:
a7:df:85:d5:cc:9e:3c:bc:ac:99:97:2d:42:7f:22:0f:f9:43:
0e:d3:87:46:e0:8e:a4:8c:37:69:02:d7:d3:00:f1:f9:14:85:
0c:7b:76:6b:61:91:f9:15:e1:9a:25:1c:b6:35:c4:b8:9c:4d:
bb:67:72:45:11:d8:b3:0b:19:d0:a5:8b:a8:02:82:a4:c4:5e:
9c:e9:74:58:0e:56:d7:ef:60:7b:50:a4:ca:6d:28:ce:85:d2:
1b:23:34:82:d0:62:32:e6:f1:67:31:8b:c5:4f:78:35:2d:c0:
b0:59:c8:09:42:19:1d:97:ec:28:10:08:28:93:47:b9:b3:97:
d6:5e:c0:f3:59:5f:12:ee:e9:f0:c7:a1:8f:38:0c:9a:e2:db:
8c:fc:6d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnd3fzDNFAnsCsNxwlygTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj
OWQ5OTEwHhcNMjYwOTI4MTAwMjQxWhcNMjYwOTI5MTAwMjQxWjAzMTEwLwYDVQQD
EyhhZWI1ODZjNjJkOTI2NDA2MGQ0ZmIyM2YyYjZhNWI2MGNhOTA1NzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmP9/uvSs1a89QCUPr9t3iZzShWl
mQbcKE4BK1vE+cx3UGj9lpjBqIdGE1IfgS63vLncrw75fTp8NDF9NAz+KR+V/bR0
8z+L47LHFhzND/i18F+3yRMQ8QBFyH7lBuE4E+sIh+W4bvDIvNxcTM7NzCkghqWn
D0SE3FEH4FuDFOiQe6weupik9UPT/iZ1ZPHQSFXm1RbrOXW63ymmwkjhMaxxByEP
CweAk7iEfwpLqmhJAvvYXh58Ls8idFutUWchfmQxuxuC5tNsOmbDYo620bqRGG5C
8GgXhzUdvZnAjbMq5w72lyJh+QImamoAxHNScSO4wnTdzUEcs9xtyrPQNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK61hsYtkmQGDU+yPytqW2DKkFcrMB8GA1UdIwQY
MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt
MTJjMDU4YmZhY2MxLzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx
LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2zyqxDb
/KcL7fIJb/Vx92Q1FIAHYxPphepaNyJkmc1fQotvMmxLEdCK8N1jPceRKpkyvEie
cN2ymf4vK7gxbUXsUkJblGlCV1fh/OK/N7TmCWNCx+wMYXIg0fiX/37gXvtprGbl
io4KwWPwp9+F1cyePLysmZctQn8iD/lDDtOHRuCOpIw3aQLX0wDx+RSFDHt2a2GR
+RXhmiUctjXEuJxNu2dyRRHYswsZ0KWLqAKCpMRenOl0WA5W1+9ge1Ckym0ozoXS
GyM0gtBiMubxZzGLxU94NS3AsFnICUIZHZfsKBAIKJNHubOX1l7A81lfEu7p8Meh
jzgMmuLbjPxt6A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:24:39 2026 by rpki-client