Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File: skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier: G34PzddGPTzPTcDwndDCneI4mUAUVC559VKp+HNW89M=
Subject key identifier: 29:8E:B5:0C:3C:B2:49:3A:7D:7D:10:A7:90:26:B1:BD:73:5C:75:AE
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer: /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial: 019D27041D1B207EFCA90292AB5A91691994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number: 0C92
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: yk1qA203fx1lRaYxBfKsxo9HKdUbEXiEJAaPhSCvPWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1d:1b:20:7e:fc:a9:02:92:ab:5a:91:69:19:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=298eb50c3cb2493a7d7d10a79026b1bd735c75ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:34:78:1c:ef:ab:f2:1e:9f:ba:68:4c:49:
7b:4e:67:9f:2c:bc:91:6e:92:ec:05:27:60:f7:30:
35:ee:d3:a1:8c:4a:9e:46:e4:d5:1e:46:5f:00:80:
e6:f6:eb:dd:df:10:44:28:b2:4b:23:dd:f8:49:dc:
87:3c:4c:99:b3:b0:15:d6:51:38:cc:a1:d2:b9:29:
03:15:62:88:8b:6e:09:7a:e4:6f:b2:eb:a6:19:86:
2a:1b:1a:99:f5:f2:a6:ac:6c:50:70:41:8a:b2:13:
ee:dd:a5:0d:42:05:17:40:22:d0:75:9d:57:af:ca:
8e:61:57:ef:fa:7d:f6:b7:e5:b4:62:6f:3e:df:37:
d0:17:68:9b:1d:2e:43:ef:ef:59:3b:88:b7:62:32:
c3:3f:ae:dc:96:cc:85:99:2b:3f:42:34:cb:fb:2e:
eb:bf:19:7d:1f:1f:b1:05:b9:24:29:4e:7a:02:19:
c3:f8:5e:7f:6b:e3:b7:be:91:42:2c:4e:77:b4:f8:
bb:17:7f:78:02:2e:2b:49:6d:a0:44:c0:9f:04:24:
c6:74:95:94:a1:8d:8a:9e:51:7d:cd:a9:b5:46:d0:
17:9f:4c:3f:07:7a:3f:c4:70:d4:3b:98:14:e8:96:
b2:86:1d:f2:32:b2:fc:8e:57:3e:28:30:e5:e9:7a:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:B5:0C:3C:B2:49:3A:7D:7D:10:A7:90:26:B1:BD:73:5C:75:AE
X509v3 Authority Key Identifier:
keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:39:39:17:28:aa:5a:2e:f5:87:8e:b6:a1:ee:2d:25:c3:16:
76:0c:ae:21:ef:15:89:2e:b4:4c:ac:3c:3c:fb:ba:17:d9:e2:
be:24:15:7a:21:11:c3:39:74:44:0c:6f:43:c8:0c:99:a6:ea:
a2:fb:a5:fd:d3:11:c8:57:6f:36:26:ac:73:83:81:ed:ee:d9:
20:fa:5e:c7:db:fe:9d:47:47:6b:15:4f:45:fa:c0:41:2d:63:
32:e0:c0:d8:eb:1c:01:8d:2c:a9:37:2c:9f:13:eb:7a:83:0a:
46:9e:82:a3:70:68:6d:02:68:4b:35:60:f1:92:15:e2:06:55:
33:fc:3c:75:51:7f:5b:bb:d5:ea:94:9b:9c:ef:23:91:53:a0:
35:12:02:f1:06:de:ba:8b:28:73:69:e3:e6:e2:88:85:65:59:
e8:a1:99:89:4f:3b:c0:9f:81:7f:b2:6e:46:73:9f:2d:c6:3f:
53:0b:85:30:7d:86:b3:21:83:f8:60:4c:06:27:62:d1:fb:21:
cd:49:75:3d:5f:18:8a:1b:67:f5:61:04:cb:c2:0b:bd:c3:2b:
0f:f6:ee:c2:cd:c1:bf:c9:da:e3:03:ae:b0:eb:11:ac:54:dc:
53:30:8f:49:7d:15:7a:40:c5:f6:dd:7e:e3:c7:59:4f:e9:ec:
9b:b8:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:33 2026 by rpki-client