Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File: B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier: wEF8Z5YAzO3cRUgNGZBl4zKtLwcgXfV0diPh+SIccnQ=
Subject key identifier: 1B:9D:03:DD:53:F9:32:0B:20:33:87:77:9C:66:AC:07:12:BD:C6:79
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial: 019D390A417C0F529DC3774F05A20F85C5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number: 06EB
Signing time: Sun 29 Mar 2026 10:01:06 +0000
Manifest this update: Sun 29 Mar 2026 10:01:06 +0000
Manifest next update: Mon 30 Mar 2026 10:01:06 +0000
Files and hashes: 1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: 70aexqIm7Z5TyOMR8xSxwd7ViAkf6V15WwyQo4QMrPE=)
2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:41:7c:0f:52:9d:c3:77:4f:05:a2:0f:85:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Validity
Not Before: Mar 29 10:01:06 2026 GMT
Not After : Mar 30 10:01:06 2026 GMT
Subject: CN=1b9d03dd53f9320b203387779c66ac0712bdc679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:8e:3d:e7:1f:b8:20:e3:1a:1d:96:4d:4e:
ae:3e:49:a6:71:13:9c:a8:78:a0:3b:8e:01:cc:ed:
d0:9f:cc:ee:4f:72:7e:92:b2:e1:35:3c:bc:ac:67:
b4:3d:ef:01:25:52:c6:ce:37:9b:dd:8b:01:d5:a1:
3a:0f:2d:c3:ff:90:cc:df:98:0d:4f:9f:27:31:a9:
72:05:a5:73:89:54:f5:01:89:65:ad:9f:51:e0:6f:
14:dc:bc:3f:7f:fd:78:28:d1:45:b3:2a:5e:49:3d:
65:b6:de:88:81:8a:70:c9:76:9c:56:48:ac:74:f2:
74:c1:ee:13:39:d8:b9:fa:b6:c9:5d:7d:03:12:e0:
f8:1a:6d:d9:35:3f:1b:fc:5a:20:b7:74:20:2d:8f:
be:bf:fa:94:c8:1d:c7:af:27:a6:8b:56:8f:23:dd:
7e:71:29:7e:cc:f2:f1:d7:de:21:84:25:05:a5:cf:
b1:16:3c:eb:3e:29:1a:a7:05:d4:38:26:be:3a:75:
c1:64:c3:d7:60:aa:e4:ae:34:98:f4:18:06:5d:a1:
06:59:9e:af:5b:b7:07:c4:b9:2a:d0:42:64:3b:bc:
c0:e1:f8:2b:d1:1a:84:56:9c:07:33:22:5e:da:e0:
7c:3c:ea:c0:12:51:88:7c:10:d2:9f:71:1d:b8:f6:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:03:DD:53:F9:32:0B:20:33:87:77:9C:66:AC:07:12:BD:C6:79
X509v3 Authority Key Identifier:
keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:b5:b9:51:cb:42:46:8f:a9:a0:30:68:30:f6:7e:15:29:
c5:d8:ca:ce:26:c4:61:1e:14:a2:24:0b:ca:37:a1:ff:07:d1:
d3:6b:8a:92:3a:75:89:86:88:d9:e0:a0:02:41:66:a1:49:19:
ce:f0:ff:17:c2:55:bd:ea:bd:32:c1:ab:71:96:8e:8e:33:b6:
2b:09:76:51:0e:f9:d5:19:2c:3c:ec:f3:36:28:49:e0:0e:39:
45:66:79:ce:a9:ee:18:ff:9b:83:c9:75:d5:3a:35:5e:d9:26:
b5:50:94:ea:ba:2c:f7:52:60:39:b1:2d:01:3e:be:bf:8e:fb:
b6:93:f1:69:1a:49:65:6f:2b:93:f5:40:a6:bf:cd:19:90:43:
da:09:6e:b8:4d:e4:e1:8d:b6:dc:0b:51:56:57:0f:a1:0a:99:
8e:83:45:f3:5d:3d:99:9e:c2:bb:bd:c7:a1:14:12:a2:e3:40:
4e:08:f3:d4:17:0f:15:d6:98:9e:82:6c:df:42:85:14:6c:2f:
ef:5f:3e:a0:b3:e8:e4:10:1d:55:ec:c2:46:3c:9d:09:0c:ab:
ee:c8:c7:c0:b8:fc:47:e6:02:52:66:78:99:00:f8:3f:fc:cd:
5c:20:1f:fa:66:72:4d:25:7e:11:eb:80:f4:3f:71:8c:89:91:
f9:ad:5f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CkF8D1Kdw3dPBaIPhcXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmZkMjkwMzg3ZGQzNGFjMDc5MGM2YjlkN2VlOTlmZWRi
NzgxNDkwHhcNMjYwMzI5MTAwMTA2WhcNMjYwMzMwMTAwMTA2WjAzMTEwLwYDVQQD
EygxYjlkMDNkZDUzZjkzMjBiMjAzMzg3Nzc5YzY2YWMwNzEyYmRjNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UqOPecfuCDjGh2WTU6uPkmmcROc
qHigO44BzO3Qn8zuT3J+krLhNTy8rGe0Pe8BJVLGzjeb3YsB1aE6Dy3D/5DM35gN
T58nMalyBaVziVT1AYllrZ9R4G8U3Lw/f/14KNFFsypeST1ltt6IgYpwyXacVkis
dPJ0we4TOdi5+rbJXX0DEuD4Gm3ZNT8b/Fogt3QgLY++v/qUyB3Hryemi1aPI91+
cSl+zPLx194hhCUFpc+xFjzrPikapwXUOCa+OnXBZMPXYKrkrjSY9BgGXaEGWZ6v
W7cHxLkq0EJkO7zA4fgr0RqEVpwHMyJe2uB8POrAElGIfBDSn3EduPYJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBudA91T+TILIDOHd5xmrAcSvcZ5MB8GA1UdIwQY
MBaAFAf/0pA4fdNKwHkMa51+6Z/tt4FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ODUzOGEtMjRlYi00ZjlkLTk4MTEt
NTI1OTU5ZTZlZTIyLzEvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ODUzOGEtMjRlYi00ZjlkLTk4MTEtNTI1OTU5ZTZlZTIy
LzEvQl9fU2tEaDkwMHJBZVF4cm5YN3BuLTIzZ1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaO1uVHL
QkaPqaAwaDD2fhUpxdjKzibEYR4UoiQLyjeh/wfR02uKkjp1iYaI2eCgAkFmoUkZ
zvD/F8JVveq9MsGrcZaOjjO2Kwl2UQ751RksPOzzNihJ4A45RWZ5zqnuGP+bg8l1
1To1XtkmtVCU6ros91JgObEtAT6+v477tpPxaRpJZW8rk/VApr/NGZBD2gluuE3k
4Y223AtRVlcPoQqZjoNF8109mZ7Cu73HoRQSouNATgjz1BcPFdaYnoJs30KFFGwv
718+oLPo5BAdVezCRjydCQyr7sjHwLj8R+YCUmZ4mQD4P/zNXCAf+mZyTSV+EeuA
9D9xjImR+a1frQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client