Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File: B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier: KEiDmTNDj3jw+GfMOPDD7uR8klg8Wu1AawPBZBUb5Xg=
Subject key identifier: 52:DB:6E:3C:53:9E:1E:D8:BE:64:84:A2:0A:D4:84:F1:E7:E9:6C:E2
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial: 019CAC0F9C33EF6CB927112460FC691E4F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number: 06A2
Signing time: Mon 02 Mar 2026 01:00:29 +0000
Manifest this update: Mon 02 Mar 2026 01:00:29 +0000
Manifest next update: Tue 03 Mar 2026 01:00:29 +0000
Files and hashes: 1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: u9MnK5eMlc4XCRrx6yEbpY2FnQNmzMhJK5ZBSnVFdT4=)
2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9c:33:ef:6c:b9:27:11:24:60:fc:69:1e:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Validity
Not Before: Mar 2 01:00:29 2026 GMT
Not After : Mar 3 01:00:29 2026 GMT
Subject: CN=52db6e3c539e1ed8be6484a20ad484f1e7e96ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:2a:24:97:69:a4:fc:fd:e7:84:7e:2d:26:
b1:34:7c:b9:74:99:48:cd:76:d3:07:49:3a:a6:5d:
7c:50:4c:54:0f:4d:22:c0:1b:97:3c:5f:7a:05:22:
49:60:62:2a:ff:a3:dd:a6:51:5a:11:28:ee:18:79:
13:b5:66:99:68:48:6c:08:ee:3d:55:08:d6:10:a3:
e3:5f:c5:e3:64:ca:24:70:0a:5b:09:3e:49:e1:f9:
9f:d5:fc:e7:89:d7:41:b3:76:10:11:91:be:0c:3a:
bc:b7:76:a3:0d:52:57:53:9e:52:3e:1c:2a:75:f6:
9f:6b:1b:22:52:d1:99:4c:51:d1:7f:dc:2a:52:c0:
23:a5:ff:0a:74:62:00:c0:65:26:ce:fd:ff:5d:b0:
2e:fa:fa:56:8b:bd:b9:ce:d9:a2:89:2b:05:25:8b:
89:90:99:1a:12:eb:52:83:05:9f:87:a3:fb:62:86:
5c:67:95:73:06:2b:fe:25:d1:02:3c:ec:71:da:8d:
48:7c:a4:3d:d8:d2:09:35:9e:e3:38:35:de:f0:b4:
83:f6:bf:13:20:16:c8:e0:f9:32:80:c0:13:a1:56:
3f:a6:b6:2b:35:09:de:cf:a7:9c:9c:06:59:0d:77:
d9:37:3d:88:19:3b:8a:23:83:c6:0e:29:63:7c:bd:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DB:6E:3C:53:9E:1E:D8:BE:64:84:A2:0A:D4:84:F1:E7:E9:6C:E2
X509v3 Authority Key Identifier:
keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:ec:54:e8:0a:fd:1c:11:c0:fd:a6:c4:d3:a0:68:d3:11:
7d:04:30:b5:af:53:61:d9:1c:94:d4:b8:bc:56:c7:d9:a2:82:
cc:26:09:ba:5c:87:5b:cb:bf:fe:0b:f3:54:d4:a3:10:d4:b4:
5c:8a:ae:ac:5e:42:a0:5d:ed:6a:fb:67:fc:cb:f0:52:bb:64:
60:dc:ef:b7:fa:77:0f:1f:c8:eb:ed:bd:12:be:60:40:4b:5d:
ce:bd:50:11:d2:fd:62:1c:99:7b:f3:06:f5:b2:8b:9e:58:46:
95:f4:83:2f:2d:b4:15:ad:78:67:58:c6:17:32:47:17:fb:82:
93:21:5c:a8:05:b7:69:0d:8e:fa:7b:bc:5d:6c:fd:fd:97:87:
94:ac:a5:fd:5d:a8:70:d0:65:48:b3:fd:f4:80:23:01:fc:0b:
76:85:c4:47:e1:81:3e:e6:b9:3e:91:ca:41:8b:09:19:76:25:
c9:59:ee:c0:62:22:a3:a1:70:cf:a0:19:26:6d:70:01:df:ba:
ad:7d:c8:58:d8:16:ca:e4:7b:6b:2a:e7:e6:08:19:a0:88:5b:
04:d0:0f:a0:49:55:d7:25:24:7c:53:96:d2:89:4f:f7:4a:d5:
21:2b:8c:e3:13:9f:5c:dd:46:1c:67:49:7c:51:e7:5d:b2:35:
2c:f5:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:57 2026 by rpki-client