Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: z9WlHsFHErp1HrSafAIQUw/n6V0QldaCrbH1djx9QRY=
Subject key identifier: 64:A1:5E:2B:5C:22:88:83:BB:5E:F6:09:FF:05:A5:59:EF:51:1C:EC
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019D38D3A8E7953E61554BAB07CB77CA7B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 12F5
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: /Pe7rKROGljrfaQxdYd1RQukExkUihlrCbmU300rSJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a8:e7:95:3e:61:55:4b:ab:07:cb:77:ca:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=64a15e2b5c228883bb5ef609ff05a559ef511cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:d7:78:67:54:59:25:7e:9a:9b:6b:0a:e7:
c1:0d:a4:62:0e:9f:ac:0c:d5:46:5a:d5:1c:c5:d6:
7e:8d:a7:58:e1:98:07:93:b0:37:ce:34:d3:ce:6e:
be:ff:49:b3:97:92:30:f0:17:f1:60:00:68:aa:a5:
a3:67:f6:28:7b:c7:90:a5:fc:8e:85:fc:a8:d0:ce:
1f:a0:83:09:07:d7:91:52:13:08:e1:18:a1:a9:7b:
86:43:3e:a9:07:9e:5e:76:10:18:9d:5e:86:28:6b:
ac:07:d8:6e:31:16:26:59:ce:35:76:c7:d4:d1:45:
26:46:2b:2f:4f:bd:8c:62:7c:96:d3:af:db:40:bb:
83:b4:b3:57:32:a5:36:8b:3c:54:3d:22:80:70:b7:
42:e8:03:0f:ca:b9:32:f0:f3:9b:79:50:70:9f:b5:
09:01:95:93:a4:05:8d:ad:8f:9e:78:25:55:f8:07:
36:a2:87:4a:3b:87:e4:e4:e7:aa:dc:4f:d7:ea:21:
31:51:b5:83:a4:2b:62:a4:59:d5:79:7c:1b:3b:6b:
bf:51:40:a3:f2:0d:92:40:bd:68:30:dd:b9:11:c8:
10:12:b7:47:08:e2:93:a5:31:b7:ad:4c:b0:ad:ab:
ef:87:2a:5e:a7:da:58:b3:70:cf:35:1d:84:0e:76:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:5E:2B:5C:22:88:83:BB:5E:F6:09:FF:05:A5:59:EF:51:1C:EC
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:93:d7:b5:2d:8c:b1:73:22:f2:12:43:fa:c5:77:7e:38:
1d:6f:fc:87:9a:b1:65:3e:00:b1:8a:89:11:df:7a:0d:31:90:
03:fd:11:2e:8d:e5:a0:49:74:0e:5d:88:a1:db:1a:76:74:d3:
22:10:a6:0c:53:7e:0e:6d:06:e2:ff:4e:4e:e7:18:cc:39:19:
da:4c:b0:53:d0:a6:cc:55:cd:30:95:2c:be:69:ae:32:68:7b:
ab:71:e7:8a:64:a5:2a:aa:a6:b0:4d:12:86:58:c9:77:9c:81:
4a:f6:bb:1e:5b:c8:58:e9:a4:d3:61:60:1f:98:0e:4d:0e:33:
78:49:54:75:f8:6f:a4:b1:04:26:72:bb:87:02:f2:a0:39:9b:
d2:cb:67:50:1c:bb:46:be:87:4a:eb:0b:5c:22:5f:d9:20:85:
fd:64:3f:bb:99:c6:24:46:ca:51:3a:39:78:6b:2a:50:ac:41:
98:a8:bd:9e:6c:bd:04:62:63:db:1f:82:21:2f:6a:9b:fc:88:
cf:ff:fa:cb:1e:dc:50:82:f1:e9:9b:d5:aa:13:4c:17:cd:75:
ed:9d:f6:83:6d:09:eb:f6:5a:c6:f4:12:53:ec:fb:0e:b4:22:
97:2a:f2:a0:f5:27:5b:5c:1c:79:fe:ac:79:07:13:8f:ee:4d:
ef:79:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:06 2026 by rpki-client