Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File: B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier: 626xNLpxBKYdSpWk8ef673H7qbh6GF/lOjR1FRJYH9E=
Subject key identifier: B9:95:3D:F3:80:35:58:99:09:64:BA:D9:95:88:E9:BE:BA:AB:00:0F
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer: /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial: 019DA52F790E8AD0A53F1685DF2BEE2B8EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number: 0723
Signing time: Sun 19 Apr 2026 10:00:44 +0000
Manifest this update: Sun 19 Apr 2026 10:00:44 +0000
Manifest next update: Mon 20 Apr 2026 10:00:44 +0000
Files and hashes: 1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: T20P0O9Gg1XEHtdEf5IYuH/LF9febO+e2atkvh/oaz8=)
2: JMYckd3O4R94e0dIWCU9TcMBOwk.roa (hash: G3W5Mbj1PNpJeFm+I/0G1qoXk7VmJE2xhaUZNZtpyQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:79:0e:8a:d0:a5:3f:16:85:df:2b:ee:2b:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Validity
Not Before: Apr 19 10:00:44 2026 GMT
Not After : Apr 20 10:00:44 2026 GMT
Subject: CN=b9953df3803558990964bad99588e9bebaab000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:d3:7d:31:3b:62:a7:ba:12:8d:37:8b:78:
be:92:03:5b:6d:ee:09:ab:7e:47:59:c1:d8:b5:c6:
83:15:b2:14:60:76:c5:99:02:64:ca:c1:56:b7:ad:
88:27:6d:72:e3:b7:fe:21:6c:9c:de:a8:bf:1a:5b:
24:b0:76:34:37:e6:6a:23:a0:01:6d:13:62:35:74:
e3:c8:10:d3:64:21:49:30:b9:f2:42:a6:c2:6d:db:
9e:2d:f5:f0:94:6d:37:96:d4:b7:5d:9b:04:59:59:
f2:6b:b7:a9:a8:7b:3f:57:05:a5:8d:ff:a4:3c:44:
5f:ce:5d:4a:33:03:50:d2:6a:ac:82:28:08:80:69:
3c:bc:08:50:ce:79:60:7d:ff:a6:a1:a9:02:4a:02:
a7:c9:77:d8:08:f7:79:a3:b4:2d:20:9a:60:b9:d9:
d7:43:8d:66:d7:bc:f2:53:c7:67:22:14:8c:44:56:
31:7e:f4:ba:30:66:d8:12:6b:21:f2:1e:ba:74:ae:
bf:db:f3:9e:17:94:60:74:5a:d9:5f:98:c7:c3:78:
26:21:9b:80:0e:e6:d3:b7:eb:43:6f:b7:97:ea:4b:
3d:4d:8b:c6:cd:cf:c3:2a:5b:3e:4f:b0:2a:50:f7:
e6:c2:c9:29:cf:39:8a:3b:bf:23:e7:db:61:4e:aa:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:3D:F3:80:35:58:99:09:64:BA:D9:95:88:E9:BE:BA:AB:00:0F
X509v3 Authority Key Identifier:
keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:55:0d:fc:0c:21:df:bf:f7:af:d8:15:e2:c5:56:28:a7:5b:
b0:a2:85:5c:14:57:e1:38:c3:51:c5:f2:56:ca:2b:0c:fd:f7:
f8:d0:b5:d4:3b:af:69:be:2d:43:8f:5a:21:23:91:9d:6b:c3:
be:44:59:5b:2c:b1:e1:fa:fe:be:4e:4b:45:fb:03:2f:e4:bd:
61:4c:bb:4d:bf:f0:da:e4:e1:5b:03:17:bf:4a:ce:bd:42:49:
7e:2b:0e:59:15:ce:04:20:1e:34:01:d6:28:b1:82:6f:2c:dc:
ef:c1:a4:00:a3:42:2d:fb:41:8f:c6:66:18:19:e5:46:71:58:
d4:3d:23:e6:f7:05:f0:fb:8a:f6:e9:b3:32:17:17:34:09:d9:
ab:47:0b:c9:de:aa:98:36:8e:a5:14:27:e7:df:c0:af:d0:51:
ed:30:78:ac:2f:c4:17:90:ef:9f:07:94:b4:14:24:e3:a0:3d:
22:ba:d0:8f:a0:2d:ab:c7:a6:bf:be:4d:75:b1:e9:b2:6e:97:
cb:92:75:e6:17:08:a7:09:99:dd:47:ef:3c:12:25:80:d4:05:
42:5b:3f:92:f0:4d:8a:0b:db:56:bb:32:68:82:f6:c2:88:8f:
1f:a0:d8:ec:5d:14:fc:46:89:9a:05:7e:39:ad:7f:8a:79:ee:
e7:08:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:08 2026 by rpki-client