Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: I/ZJxQwWDcSAh+A+elJHXgXMosgLmHycrJ6rHbE3JHQ=
Subject key identifier: 4B:68:A2:BF:84:D8:36:DD:CF:49:44:A0:0F:BC:31:44:22:92:A2:5A
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019DAEA132135F982FB5751BDC06E8D2D361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0FDF
Signing time: Tue 21 Apr 2026 06:01:32 +0000
Manifest this update: Tue 21 Apr 2026 06:01:32 +0000
Manifest next update: Wed 22 Apr 2026 06:01:32 +0000
Files and hashes: 1: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (hash: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM=)
2: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (hash: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q=)
3: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: /mp/YmSsYj/QHIRsBm6Ix/rtWq0tKrI5RLslhk/VeUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:a1:32:13:5f:98:2f:b5:75:1b:dc:06:e8:d2:d3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Apr 21 06:01:32 2026 GMT
Not After : Apr 22 06:01:32 2026 GMT
Subject: CN=4b68a2bf84d836ddcf4944a00fbc31442292a25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:5e:81:4c:e8:3c:6e:c0:44:fd:aa:92:65:
3d:0c:e9:de:b3:e4:a0:51:95:1f:79:56:b9:90:03:
12:00:15:fe:29:4a:1d:22:e2:2d:1d:07:89:cd:14:
05:1d:14:08:31:1d:9f:9c:1e:69:6f:87:41:68:f3:
68:48:b7:b7:a3:d6:95:a6:9a:ee:1f:9f:b2:2b:ed:
f9:d4:7a:2d:cd:97:9c:b8:07:82:a2:ca:e3:3e:d6:
77:82:b9:f9:32:ca:32:c9:a5:6c:a2:9e:ba:8e:f8:
e7:6c:70:50:ee:df:54:89:61:d6:37:e1:e3:5d:3e:
4f:69:b4:0c:57:1c:1d:d8:d6:18:da:a8:83:22:5d:
22:c5:be:5c:ad:4d:03:62:f8:64:90:be:90:7e:fa:
58:2f:6a:2a:0b:e2:38:ac:52:1d:54:38:9d:6e:b4:
3c:c2:85:09:fa:a4:5f:55:4c:c2:9d:88:2e:39:1b:
d4:ad:71:c3:17:b2:34:6a:ae:3f:97:4a:15:1f:b8:
5e:2c:c8:72:eb:70:cd:50:c1:29:d2:5b:16:76:08:
c1:e5:9e:c1:59:bd:56:ce:b5:4f:81:07:da:d3:e3:
69:68:f4:e0:8f:bc:da:f6:d0:21:d0:50:d6:02:cc:
17:dd:5c:94:25:e4:7e:85:be:9a:90:fa:f0:37:7b:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:A2:BF:84:D8:36:DD:CF:49:44:A0:0F:BC:31:44:22:92:A2:5A
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8a:32:09:b7:37:06:fc:33:f9:3d:fc:99:e8:f3:7f:14:92:
84:af:2d:a7:03:3b:ae:d0:95:64:31:09:b7:ae:ba:4e:6a:a8:
5d:29:2b:59:be:c0:04:0b:4b:4d:6e:39:45:f2:68:b3:02:87:
bc:a1:e8:2b:85:b5:c4:74:94:1d:65:20:61:5f:d3:4b:70:04:
a7:73:de:f6:56:a6:78:65:be:63:4b:a9:6e:76:d3:af:0b:f1:
71:70:a9:7b:c3:b0:37:fe:52:64:ea:bf:b2:62:06:46:ed:9d:
df:8a:27:80:5b:9b:14:fc:71:5b:03:a9:35:76:78:9f:f9:76:
3c:a2:2d:a3:f4:d4:76:42:a1:b6:ad:7e:fa:1d:ea:83:a1:f8:
10:77:eb:77:e9:5a:b5:55:d5:e1:40:76:c9:51:c5:31:5c:7f:
30:8d:fb:6c:d5:fe:9f:01:a8:be:64:7b:97:fd:1c:c2:b0:82:
65:7a:9b:5e:29:59:34:9b:15:9f:a9:36:fc:5f:5a:49:69:e3:
02:fa:fe:10:bd:8d:92:ce:ab:5d:8b:19:68:51:64:05:5d:47:
ad:7b:4c:30:d4:7e:c3:b0:52:85:30:f2:62:fe:e3:b4:6a:fd:
54:fa:a5:7d:74:ca:b0:29:f6:3f:0d:e0:a4:53:cb:df:34:f5:
cc:e6:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:35:57 2026 by rpki-client