Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: KeINKCilzOXwoBKm8fYW+xiGaG1mppPi7khgueX/bcQ=
Subject key identifier: 5D:B1:9D:DA:84:28:EA:A4:F4:EF:E9:78:8B:F7:F3:36:C2:1B:30:47
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 019D37C08C6B6AED2BB0117B4940A3086EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 138D
Signing time: Sun 29 Mar 2026 04:00:58 +0000
Manifest this update: Sun 29 Mar 2026 04:00:58 +0000
Manifest next update: Mon 30 Mar 2026 04:00:58 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: X8O0BoH/xwsaUUR9u4bBEWY83aEdMtpYvvguZRtvhT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8c:6b:6a:ed:2b:b0:11:7b:49:40:a3:08:6e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Mar 29 04:00:58 2026 GMT
Not After : Mar 30 04:00:58 2026 GMT
Subject: CN=5db19dda8428eaa4f4efe9788bf7f336c21b3047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:89:bd:f7:73:5e:b9:82:7c:8f:bd:1a:c5:
9d:90:7a:aa:45:d4:43:62:55:a3:f4:42:5f:05:1c:
a7:38:5e:57:b2:08:b1:b1:67:07:04:1c:ed:51:2c:
ff:90:19:eb:9a:04:28:f0:38:e7:0c:d0:bb:9d:33:
54:e8:b8:d3:34:2d:00:05:26:fe:46:05:93:d4:29:
0c:31:02:cf:33:dc:2c:38:43:a8:07:32:e7:a8:39:
de:cc:25:b5:20:00:92:6c:5f:ee:c1:ee:b6:c9:cc:
53:8c:bf:73:e9:69:ef:26:fa:63:57:c1:62:50:ae:
e4:85:ff:78:d4:2d:05:4d:4b:ee:1d:96:1b:04:9d:
a5:a3:d5:b3:22:ac:75:7d:f6:5e:ef:2b:8d:b4:c2:
bc:91:b4:ca:2e:07:84:a4:b8:e9:37:3c:d0:58:90:
a2:34:71:80:4c:6e:b0:1c:c7:62:c2:25:53:96:e3:
1b:9a:59:98:df:59:af:28:07:46:1d:c5:41:ed:25:
bc:af:7b:04:fd:fc:14:2c:cb:f7:20:c9:33:06:55:
b4:7c:0b:1f:45:42:b5:dd:69:7a:c9:a6:0e:6b:18:
69:b1:22:85:0f:4d:b6:b3:df:76:9e:d7:26:a5:96:
74:11:c7:fc:90:c2:84:d8:3e:4c:85:1f:5c:93:61:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:9D:DA:84:28:EA:A4:F4:EF:E9:78:8B:F7:F3:36:C2:1B:30:47
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a5:0c:97:77:ca:4d:17:33:1a:06:00:da:c3:fb:02:ab:02:
3c:12:14:7b:9e:34:db:a3:97:26:a2:18:18:6a:87:7c:9a:6e:
27:6b:89:fb:46:ec:f6:c0:0a:9b:10:0f:8f:14:b2:40:a4:61:
eb:9b:a0:15:4c:d8:e0:6d:f6:3e:96:a0:85:9b:36:cc:a7:28:
c7:a3:85:f6:00:d2:5c:ff:ce:87:75:f7:74:11:b2:7d:f7:b6:
35:9a:33:8d:9d:99:26:ee:bd:c8:d1:88:67:cc:db:f8:c4:0b:
6c:aa:ae:3a:8b:12:b8:2e:1d:cf:55:00:f1:fd:f9:df:e2:63:
11:39:a7:e9:fd:b8:ea:71:77:b7:5c:78:ff:ab:01:d1:b9:0b:
c1:12:09:c8:31:4a:12:c1:37:83:5d:cb:1f:00:ef:3d:68:31:
98:55:85:89:da:fe:f1:5f:eb:e8:ab:6b:37:64:b3:a3:eb:c4:
8e:ba:c9:21:83:39:f7:09:d4:8c:61:d8:d0:15:08:d7:f5:ec:
b7:35:f7:42:e7:4e:98:96:c2:3e:da:b0:81:8c:90:cd:cd:1e:
23:f5:db:b0:ee:51:11:b1:9e:8b:f7:98:41:42:3b:0e:ad:0f:
ce:50:39:6a:80:5a:b4:6d:c5:94:92:e7:4e:d2:32:86:9c:71:
1e:47:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:56 2026 by rpki-client