Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: fiThM6dxmcUjWcl6gfoGBPhafTyvLDNWQDc1blwzZpM=
Subject key identifier: A9:9D:F6:25:45:7B:0A:C3:E8:04:B7:63:A1:5B:5C:50:EE:4B:F5:35
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 019D3865C9CF8AE546DD1C1072E517BE440B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:01:28 +0000
Manifest this update: Sun 29 Mar 2026 07:01:28 +0000
Manifest next update: Mon 30 Mar 2026 07:01:28 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: 4QkR6CnazhsHV8Q3Eqnn4EgUA/ROy9HNWOg4obvlV/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c9:cf:8a:e5:46:dd:1c:10:72:e5:17:be:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: Mar 29 07:01:28 2026 GMT
Not After : Mar 30 07:01:28 2026 GMT
Subject: CN=a99df625457b0ac3e804b763a15b5c50ee4bf535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:08:b1:1d:c8:86:8e:a2:67:95:65:a8:ac:
75:16:c8:f7:a8:2b:98:46:5d:fb:5c:47:13:30:fe:
4d:91:61:26:ce:6e:d5:9b:65:36:d4:e5:d3:6f:c7:
73:1c:bc:aa:0f:30:63:22:fd:b1:5e:28:98:0e:bf:
5c:7d:cf:1c:89:21:98:2f:de:bb:19:49:d2:03:5e:
27:e9:e1:70:8d:8d:3d:ab:a1:3f:eb:5e:58:da:ab:
73:4b:35:85:29:a2:b4:93:7a:a1:66:f7:96:d4:90:
b0:9e:29:a8:76:55:4e:70:5c:c7:25:21:d0:69:3c:
10:30:2b:47:7f:0d:19:1b:6f:b5:85:ee:ee:2a:5e:
57:51:95:eb:4d:99:14:16:3a:8e:2f:87:7d:b3:32:
df:e4:f2:ac:2a:e0:ed:02:8a:24:55:03:b6:6e:d1:
20:b0:ec:2d:0e:df:10:1c:39:a6:e5:05:e1:07:c0:
1c:d6:e7:44:3b:91:57:2d:b5:2f:de:b6:2d:50:a2:
44:0d:1e:38:ed:03:72:e2:b3:26:73:83:cb:7e:bd:
17:79:74:cf:95:6d:01:f3:a4:74:53:82:69:5b:1b:
4e:82:96:e5:e8:2b:c7:b0:8e:af:7f:75:f0:87:fa:
7d:62:95:29:7f:f5:51:58:a1:ef:64:04:82:46:1f:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:F6:25:45:7B:0A:C3:E8:04:B7:63:A1:5B:5C:50:EE:4B:F5:35
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:04:c7:7d:67:e0:11:f8:5f:a5:f8:96:8d:f6:97:99:8c:02:
66:77:81:c0:6b:63:66:78:1f:7f:7b:fd:3a:dc:9d:21:d1:90:
75:65:95:2d:8f:6f:67:28:e3:c7:78:7f:88:17:e4:37:9a:08:
06:f7:e7:c7:a3:d5:dc:4b:61:bf:a4:43:1c:97:21:8c:82:5e:
64:4f:e4:f9:a8:81:c9:c1:da:61:b1:9e:75:0a:c5:c4:58:01:
c9:79:f8:67:e9:4d:85:21:f1:54:9d:f6:ae:4b:10:23:36:9a:
b6:43:ed:4d:36:a0:3c:71:79:1e:03:40:a9:48:3e:5a:b1:4c:
e9:15:75:fd:9c:a2:d0:a8:f2:b6:26:4f:8e:99:9a:79:b6:06:
9d:51:db:99:3d:76:bc:47:2a:b2:83:5a:01:39:7d:2c:e5:32:
e4:45:7b:5f:81:e3:a7:b3:32:cb:b5:b7:86:b6:c5:63:bb:50:
78:a9:ed:97:29:ac:14:bb:d6:38:c5:c5:02:ee:2b:ee:ec:f5:
f6:3c:48:e9:99:27:d2:47:c2:c0:3d:56:c2:c0:34:a1:78:30:
e8:5b:37:d9:55:98:b3:8e:45:f8:d1:91:0f:bb:bf:eb:a4:40:
fd:2a:30:2b:0f:0c:ae:bf:a0:b3:21:8d:2c:fa:6c:7c:0e:1f:
f3:71:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:08 2026 by rpki-client