Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier: Khzcv/V5KCghoK6QcpFk5QEUauKQa24KEnJy+zc8dE0=
Subject key identifier: BA:F5:BB:D2:CC:48:3D:9D:34:C8:4F:4E:01:42:90:45:22:72:48:B0
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019D9B878CCF0E7547B205634F58DC418E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number: 07DF
Signing time: Fri 17 Apr 2026 13:00:45 +0000
Manifest this update: Fri 17 Apr 2026 13:00:45 +0000
Manifest next update: Sat 18 Apr 2026 13:00:45 +0000
Files and hashes: 1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: oKvB7wFojXYYuRAXG6g1KksDI/dlwtWywc1ou7/UIMs=)
2: cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa (hash: D7Hy4SDe+u2iQvMr4uFM192GN65qy0Iw55cUiW6a9ys=)
3: xN2tlbslAO9Hhzxol73kyIlksfo.roa (hash: 0KNISEhduMT4pUQpo6yJ7mPJDI8W5U5qrMtAEUOQhz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:8c:cf:0e:75:47:b2:05:63:4f:58:dc:41:8e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Apr 17 13:00:45 2026 GMT
Not After : Apr 18 13:00:45 2026 GMT
Subject: CN=baf5bbd2cc483d9d34c84f4e01429045227248b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:d3:c8:f6:a8:06:ed:31:18:b4:da:28:2e:
39:de:6e:fc:90:f8:02:2a:94:7c:02:51:58:d5:49:
e4:98:99:97:99:28:1d:91:c5:29:a8:f1:0d:2b:b0:
2a:60:5a:2a:ca:89:04:b5:6e:45:c5:3f:bd:fc:35:
6c:d3:9b:29:43:4c:7b:4c:b6:c4:b7:59:98:27:c9:
5c:69:09:1c:4e:09:4a:17:50:9e:2b:ac:53:bf:85:
16:b3:5c:b6:c8:e9:c3:ed:6d:b2:7d:64:c6:76:77:
25:0a:ac:86:89:17:e2:d2:65:96:bb:55:03:2e:38:
48:18:ca:8e:a2:37:95:a3:16:c2:58:04:9b:e2:c0:
3c:10:f9:db:1c:68:69:62:d0:ec:79:0b:78:3f:4a:
79:c4:7d:34:41:e6:6d:8d:8a:4a:88:a3:33:0a:39:
03:fb:5f:73:8b:fa:7c:4d:a0:bd:c1:6f:b0:0a:f0:
12:6d:10:16:71:36:43:19:56:f9:33:f0:80:75:6b:
75:24:01:ac:74:d7:91:f8:ee:41:70:db:4d:59:5f:
35:4f:fb:a4:cd:08:dd:b6:61:8c:16:f6:3c:f9:4c:
76:6b:5f:b9:d2:b3:72:c6:c3:53:66:97:bf:19:9f:
3b:a6:8c:db:84:c5:a5:ff:bd:a4:ce:31:6a:33:4a:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:BB:D2:CC:48:3D:9D:34:C8:4F:4E:01:42:90:45:22:72:48:B0
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:42:f7:38:06:ba:b8:5b:02:81:70:b6:06:d3:6d:9c:db:0f:
05:c0:5c:e9:7f:07:1c:77:c5:9f:9e:e4:5f:9c:c1:70:6b:90:
3e:6b:88:69:2f:34:93:05:bb:d6:7b:be:5a:d6:b7:2d:31:38:
02:6c:da:0f:65:bc:d5:4a:74:fe:88:4c:41:2a:9a:9f:d0:9b:
85:d2:dd:b0:64:52:9d:85:83:7f:56:49:fb:2e:20:e2:2a:ee:
5c:6e:c8:0c:cc:92:e6:02:24:18:e5:2d:69:53:5e:bf:82:ac:
16:e8:ee:3a:83:82:92:e2:d0:d7:91:0d:59:54:ce:f0:24:2a:
14:8e:25:c2:76:2b:c8:e7:a2:0a:e1:46:f2:a0:27:72:97:dd:
79:ec:ff:ef:c9:5b:c9:ec:22:59:bd:68:31:90:a9:d3:d5:97:
0a:87:47:ec:9f:cf:95:29:1f:c7:cc:c4:8c:bb:6a:7f:b3:e4:
47:29:3f:65:4a:5f:2b:13:8c:69:15:56:29:ef:69:9d:17:22:
b3:6c:16:bf:1d:6c:3e:0d:61:2f:db:63:9f:09:ba:46:1d:9f:
f6:35:da:b6:b5:d2:52:3a:9b:b2:98:b7:ee:ef:f5:bb:8b:ff:
14:c5:a5:c2:11:88:cd:e4:99:af:d8:24:4e:83:63:c8:9a:fd:
e4:9f:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:05 2026 by rpki-client