Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier: OQvVYy4BldAiN3y0g7wdQWn7iQlq9psWLGabKVmFljQ=
Subject key identifier: 3B:21:69:F1:46:02:0A:EC:20:9D:CC:2C:55:D7:7E:4D:8C:AE:AC:24
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 019D28BB1A65CA7EF01DF9CF3D59AF6FB989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: ky3voF2sy2_TgHkgb3QQ1UPW7S8.roa (hash: o6KbfAsBN8N6++Ydy1AmV5C+RsQD1rP6/4fRX1c0900=)
2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: F4Xx/vQUDmloxCGSg6nKQ6/f0QO6te2gjZBBVWIimr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1a:65:ca:7e:f0:1d:f9:cf:3d:59:af:6f:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=3b2169f146020aec209dcc2c55d77e4d8caeac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:a1:2f:e1:10:a0:9b:dd:08:3a:f5:61:cb:
30:ad:6a:cf:41:fd:77:f7:d9:91:6a:41:7f:38:89:
c7:30:f8:db:6a:a0:94:68:ab:5b:78:df:2d:3a:2a:
88:0e:61:d3:51:3e:fc:6e:f8:ae:b6:b5:77:4b:2e:
86:55:2d:a4:f5:ff:40:f7:e2:e8:32:8b:05:2c:96:
b2:91:6e:f9:1c:4f:35:a6:89:9f:b9:46:72:bb:1a:
5e:fd:2e:78:5f:2b:63:27:87:59:74:d7:fa:12:30:
f6:07:6e:bf:e4:38:b4:91:ed:85:0c:ad:e6:44:65:
1f:10:7d:75:0a:d6:c7:0d:1c:64:e4:79:95:ce:ee:
01:84:3f:f4:73:41:04:7c:5d:d9:11:86:77:0b:72:
70:b4:b6:52:88:c9:ec:ca:60:ae:a4:1c:9e:c6:4b:
be:10:99:06:89:f2:d1:30:4e:46:05:c4:d0:58:4a:
e0:eb:46:40:b5:95:85:ee:ce:95:f1:db:cb:b6:b1:
42:38:11:d2:44:10:9c:81:57:58:67:0e:df:1b:18:
ca:09:3e:cc:be:17:c8:01:a8:78:ef:fb:06:d1:c1:
44:0a:cd:7a:cf:80:89:b4:95:a8:12:f7:3e:20:a8:
08:f5:56:55:f9:7e:dc:d8:fb:3e:56:87:73:8a:11:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:69:F1:46:02:0A:EC:20:9D:CC:2C:55:D7:7E:4D:8C:AE:AC:24
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:da:1d:d2:27:dc:d1:56:aa:05:68:d3:72:42:71:0d:00:
9d:78:20:d5:ca:b2:b4:ad:8b:ae:dd:19:28:e9:2c:ea:2b:a2:
b5:6f:2d:2c:ba:e6:bb:2f:2c:99:a3:67:15:5e:65:05:e1:61:
38:46:21:63:c8:5e:ce:f9:f4:48:5c:c3:23:15:0d:e1:0a:98:
38:18:9f:35:be:60:b3:4d:bc:46:72:90:33:22:6d:32:58:9b:
b0:11:69:e6:4b:ed:c8:f5:cf:cd:77:04:ca:97:d5:58:a9:71:
96:f7:a5:19:7a:f1:e0:b4:e0:54:a5:ff:0e:79:1c:55:49:ae:
13:52:6c:da:9c:73:b4:16:45:93:dc:1e:e7:48:dc:22:d2:a8:
08:0e:38:03:78:03:67:f2:75:a9:25:af:29:a5:e4:6f:dd:d0:
d1:fb:1c:28:fd:3b:25:0f:4c:b5:97:4c:5d:c5:96:d5:10:c8:
05:5f:5d:60:c3:c6:31:6d:74:0c:1c:12:e9:ad:e5:de:a8:50:
f6:83:cc:bc:50:8d:d5:c2:9c:95:52:9c:25:d0:9c:e0:d4:fd:
72:fd:db:75:61:58:cf:19:d1:a1:1b:3d:72:a7:46:23:89:ca:
c6:95:b9:83:f6:b8:62:b3:04:c7:34:ab:18:cc:be:9b:6c:f9:
cc:25:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:22 2026 by rpki-client