Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
File: skmuabOnLsLm6a25kJDYEqHSmVE.mft (raw, json)
Hash identifier: PU+z6o9eI8lTbn/2v1bA/TLhfAhH2x6esUwl8DEbNsU=
Subject key identifier: 70:85:6A:E3:97:BF:0D:E6:F4:ED:EE:35:CD:0A:12:C0:0E:50:33:16
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 019CAAC66F487E58C808C3E0CF0952D3D8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: mBarFDGWX74TA5Zzt2YAA4dJipo.roa (hash: CId8nPwT9kwu7694B2Snf7hm053RirlYLW2TmMowCn0=)
2: skmuabOnLsLm6a25kJDYEqHSmVE.crl (hash: Klz0JlZqHMcyD5eR6bIqHZcFd346umn5Jq1UU3JKWCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6f:48:7e:58:c8:08:c3:e0:cf:09:52:d3:d8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=70856ae397bf0de6f4edee35cd0a12c00e503316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:fe:dc:37:fd:bd:3e:4b:8d:a8:1f:73:b4:
b8:97:b8:89:1a:71:83:a4:a4:28:c5:34:80:94:48:
2b:12:11:ce:66:1e:d5:03:bc:10:b4:7a:7c:24:2d:
b6:d4:bf:62:49:3f:0b:30:70:98:86:ad:8d:e4:86:
c0:49:ef:61:35:b3:9a:2f:02:c9:a6:5a:3e:7b:a3:
ef:08:40:c2:2e:86:bf:f2:06:1f:20:96:f9:cc:52:
78:9b:09:cb:b4:80:11:09:97:3d:c5:20:e8:c0:f1:
62:a7:27:fe:fe:4b:cb:c8:4c:48:48:53:f4:c1:09:
ec:3a:76:ea:c4:75:7a:03:ed:64:38:3b:31:0c:7a:
70:72:d5:b4:f4:58:d6:59:8a:54:ee:44:09:84:b1:
39:e3:fa:f9:c2:74:36:95:b1:6f:56:d7:e4:d0:0a:
67:5d:ce:cd:9e:81:b2:a7:b5:d7:00:22:29:bb:c7:
94:6f:f3:00:38:70:e8:4f:45:1b:fa:e3:3a:8d:b2:
4c:ac:83:b1:5f:cd:84:92:20:e2:fc:09:42:15:b8:
f5:51:44:1d:68:ca:8e:42:05:fb:e0:d6:b0:c1:b6:
93:20:36:7f:b6:fb:e5:84:ea:71:27:11:c2:43:a1:
3b:5c:05:b3:77:d1:b1:9e:bb:8e:62:ea:8b:dd:6a:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:85:6A:E3:97:BF:0D:E6:F4:ED:EE:35:CD:0A:12:C0:0E:50:33:16
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:7d:1d:de:cf:cb:e7:a2:b3:7b:80:85:f1:5d:71:e0:37:
a9:0f:23:21:ec:7f:57:24:46:8b:71:19:b2:8f:07:03:c4:62:
4c:70:96:f1:da:17:4a:1c:3d:ef:f9:9a:9a:98:e7:30:0f:01:
71:c0:d7:73:68:98:bf:d2:2b:ca:88:52:8d:f2:8b:b0:cb:e0:
31:73:d9:82:11:1a:21:ca:5b:ab:65:8c:4e:4a:12:f4:31:df:
39:34:fb:fd:4e:59:f4:36:7c:c1:a2:fb:11:dc:f3:0f:1f:c4:
be:83:f1:f3:d6:30:ea:52:c4:ba:26:1b:73:ae:94:50:82:39:
da:76:f3:14:3a:9e:e8:ce:c8:3c:fe:91:8f:b1:64:de:16:b4:
31:d0:f3:10:ba:cb:ed:77:a5:4b:92:65:7a:9e:1b:0c:d6:01:
37:85:5d:e3:0b:1a:d6:70:e5:5d:c8:47:be:1a:1d:06:b2:d3:
5c:42:ce:88:94:ef:88:c1:9d:3f:99:12:bf:ca:09:b6:18:89:
40:a2:9d:f6:d7:a2:a4:e6:b4:e9:94:7e:38:55:1d:73:91:a2:
ae:9c:b2:cf:8b:b2:ec:ef:5e:36:b2:81:0a:81:48:d9:2f:c2:
4a:79:59:50:31:b0:8e:af:c4:d6:67:34:c1:ac:ba:7c:3c:6c:
ba:b3:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:21 2026 by rpki-client