Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File: 93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier: TqBMG6Fj71m4KT8AHlmBP+3HDS5uFrdhIkZcpl+kZGs=
Subject key identifier: 8E:17:23:CC:40:71:11:C3:3B:6A:8A:29:17:AA:22:01:0D:AB:2C:29
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 019D38D2EEAD602FF3B9C11EC0599AC213E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: nyJn9SmGWgEZZQaucu2bKMFGs8U0Gf8u6p/ECA1kpbg=)
2: c06tR7wEve3BgRsZfi2xd-31eVA.roa (hash: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ee:ad:60:2f:f3:b9:c1:1e:c0:59:9a:c2:13:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=8e1723cc407111c33b6a8a2917aa22010dab2c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:7b:f9:7e:cd:b1:4d:1a:db:da:49:85:39:
37:01:1e:86:ea:9c:12:35:33:4f:06:f6:a8:b7:1e:
13:8e:17:90:17:bc:c6:88:a3:f9:35:9c:0c:1c:f2:
db:e5:85:ad:b9:06:24:f8:65:a7:ad:d2:9d:cc:1c:
bf:ab:66:12:d8:9b:3e:82:64:d3:15:7f:d1:89:04:
9e:ca:dd:7c:78:52:5d:a7:33:41:ac:f4:b4:e2:ba:
72:7f:87:fd:de:68:e9:b2:e7:d9:f2:cb:3e:bf:5d:
6a:3a:76:80:68:f3:7e:b1:1e:d9:b0:3b:6a:b8:73:
b2:1c:0e:2b:a3:fa:ac:c9:58:8d:b9:58:27:f6:04:
d0:53:4a:25:2f:a2:05:ad:74:15:15:0c:e2:5f:5d:
ff:9e:80:73:60:2b:de:d1:84:da:81:d4:bd:0a:cd:
24:75:c9:e8:42:e3:b5:00:19:2b:ee:e7:25:a0:cb:
d3:fe:b1:fa:1a:36:a7:fa:78:c1:93:a6:c5:83:02:
ed:22:f7:d8:47:f9:a9:df:56:97:15:eb:6f:cc:ee:
0f:ac:d6:18:c1:b7:a1:c1:f2:f6:81:b7:fc:cf:28:
34:c0:e9:f2:ab:91:7d:b6:00:16:31:22:b3:9c:20:
75:dd:90:87:23:ce:02:fc:57:63:ab:ef:95:00:78:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:23:CC:40:71:11:C3:3B:6A:8A:29:17:AA:22:01:0D:AB:2C:29
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:11:e3:9a:74:bd:cb:cf:62:fe:60:58:59:cc:ae:78:44:bb:
89:f1:ec:aa:9f:1b:33:5a:15:d0:7e:3b:9e:93:c4:e3:fd:c9:
66:fb:f3:25:f1:4d:5a:19:03:94:5d:04:25:f3:6f:e8:0b:7e:
3b:30:65:2f:87:d1:e0:ef:12:f5:dc:f5:8e:71:8b:ca:50:2f:
49:23:0a:13:0f:49:ba:ec:ef:13:6f:35:54:9e:d6:37:57:e0:
42:55:94:d0:b0:a2:16:32:2c:88:de:70:66:fc:25:30:60:31:
1b:d0:71:ed:db:da:28:37:a3:8c:fd:35:4f:32:e6:c4:c8:06:
7c:06:ec:73:89:8b:44:e4:61:1c:71:ca:d4:ea:53:21:68:1a:
3f:13:55:a1:32:2e:ce:9a:e8:5f:c8:b0:cb:29:d5:1d:90:88:
2e:b3:0a:ba:46:e5:44:a9:de:4f:3c:06:4e:68:f9:3e:5f:64:
4f:dd:7a:0d:9f:fc:eb:e2:84:f8:5e:af:47:5a:f9:30:c0:af:
d9:b1:19:49:76:26:57:e3:13:16:a4:5f:1e:5b:31:94:45:4c:
36:5e:24:0d:2b:f3:34:8c:cf:46:1a:5d:fd:6d:36:bb:cc:df:
d8:00:e3:8a:a8:dd:9e:3c:f3:41:fc:45:c1:58:15:b4:4d:60:
96:4d:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:33 2026 by rpki-client