Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier: cw1mrKFjkhhn9W5PCEz/4ZeemvQeX2wXDji6KCCshhE=
Subject key identifier: 2A:76:42:60:31:AC:8E:B0:52:D7:78:39:38:DE:51:DF:F9:25:08:DF
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 019CAB344414C0BAEA95353A9C62D0066BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: ky3voF2sy2_TgHkgb3QQ1UPW7S8.roa (hash: o6KbfAsBN8N6++Ydy1AmV5C+RsQD1rP6/4fRX1c0900=)
2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: 0GrTOZO7QKOGcTaMBb1hg68Ub29USIM5Z/T/bS9WHlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:44:14:c0:ba:ea:95:35:3a:9c:62:d0:06:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=2a76426031ac8eb052d7783938de51dff92508df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:d4:9d:81:6b:cc:d7:f5:ec:b5:cb:7e:ef:
3a:90:28:38:13:b9:dc:cb:27:a4:22:cc:20:24:4d:
33:92:28:ab:d6:21:be:c3:12:0b:50:5e:a3:82:ad:
1b:1b:5f:8d:e6:67:28:5c:a1:8d:24:8e:93:ea:bc:
62:19:8d:63:bb:67:62:d3:ba:7f:bc:39:32:23:dc:
db:3f:2d:9a:30:4c:72:af:1a:45:22:95:ef:e9:e7:
7b:f2:da:6c:d9:10:4a:b4:75:85:57:ac:7c:94:55:
45:be:e7:20:c4:53:e4:c4:eb:c8:f4:bc:c6:f0:49:
0e:14:47:6b:b0:75:52:db:e2:50:97:36:4b:b4:d2:
06:d9:2d:b0:40:fd:0a:2c:da:e8:21:0f:95:cf:d0:
d4:e3:47:07:bb:a7:5a:f1:84:03:e8:b2:9a:26:1d:
77:45:1e:c4:08:28:e3:34:05:56:5e:0d:ac:51:c9:
42:67:8c:5d:d2:6d:ed:b2:ae:fa:a5:51:0f:aa:e1:
bf:42:27:ee:5b:92:b1:b5:ea:ed:bd:05:50:b1:85:
df:2e:fd:2c:a4:18:8c:55:5f:eb:ba:89:44:0d:d5:
5c:45:c2:3a:ac:9a:60:fe:76:e8:49:0f:76:22:5b:
9d:ea:1f:ba:49:21:17:e7:ce:ff:fe:35:5b:03:73:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:42:60:31:AC:8E:B0:52:D7:78:39:38:DE:51:DF:F9:25:08:DF
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:a2:d8:4d:79:d5:0e:1b:2a:79:1d:cd:53:e6:97:74:6f:
e8:f7:e6:64:7e:39:97:d1:78:fd:5c:40:da:97:a8:9c:3b:0d:
34:a6:32:10:4b:aa:f9:ff:3b:21:92:f1:95:04:cf:36:c8:85:
34:3f:90:20:fb:dc:ad:bb:4f:9a:e8:db:5f:78:d5:4d:29:b3:
41:26:6b:b1:24:c4:ba:6d:df:92:31:0e:79:3e:85:0d:08:78:
1c:1f:17:3e:e9:1d:8d:7c:5f:50:06:6c:bf:86:15:22:a2:15:
16:47:e5:bd:fd:12:db:94:05:eb:09:09:71:ce:ba:fe:e1:3d:
69:be:2a:02:0a:de:b7:bf:c8:9f:ba:e6:86:c5:79:e5:32:14:
b7:f5:6b:4f:87:fe:83:b5:f1:02:d6:74:e6:65:43:14:82:bd:
9d:6f:ca:97:b3:f8:6b:2e:80:78:0d:66:89:41:18:51:10:31:
e2:18:c6:33:22:59:cb:12:56:51:c9:e3:01:9d:d3:33:f4:c4:
0a:95:9e:85:ba:05:61:81:36:77:4a:91:9e:71:13:fa:7c:85:
02:d8:4d:ae:67:f1:3c:44:54:84:b8:82:28:60:10:4a:dd:11:
d3:b2:70:3c:02:e9:2f:4d:c1:bf:ac:ff:25:99:99:20:35:db:
21:e3:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:33 2026 by rpki-client