Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: xFGjLKct6+zT0vwOnYThqwaqlkkUvNGkSUZbWvoLRDE=
Subject key identifier: 0B:61:74:F2:C4:23:0C:D8:50:4D:D1:EC:B2:CE:76:9E:2A:10:98:43
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 019D389C1B1842275133B535DB667E3AA887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 07C8
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (hash: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: EFx2sIOLeK1ojHQwgYLo5X3nU25lcelE08xp0lmO71c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1b:18:42:27:51:33:b5:35:db:66:7e:3a:a8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=0b6174f2c4230cd8504dd1ecb2ce769e2a109843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:9a:d3:2a:d9:4a:d3:e8:e9:6e:da:00:20:
44:e6:6e:84:d2:b5:48:f8:f0:bb:fa:bd:ae:49:b0:
ee:63:53:05:74:52:98:2a:f5:58:8c:bf:0f:8e:4f:
5d:45:d5:bf:9d:cf:dd:e0:35:5a:b0:ec:cd:10:84:
94:87:4b:a6:d5:35:9b:6b:02:0b:ab:bb:34:47:61:
10:e7:aa:8a:40:88:02:0f:50:45:ee:ff:34:77:dd:
17:47:2a:6a:1b:fa:8b:05:22:2d:cc:46:b4:44:c6:
6d:75:ad:7c:4e:37:1c:3e:9c:31:ad:db:a3:7f:11:
e7:98:c5:98:15:5b:2b:56:7a:fc:6b:0f:17:40:e5:
13:a2:d2:fc:6e:80:44:9d:0f:ed:d7:1b:0d:d0:be:
24:1d:5e:bd:54:5d:74:4c:30:b3:0c:f1:94:4a:6e:
cf:6a:b3:f8:f9:8c:66:c3:e4:dc:79:82:4a:71:9f:
24:56:98:68:87:44:58:09:3d:86:08:b2:a1:f7:2d:
49:59:08:a3:05:41:91:2c:c7:75:cd:6f:87:2c:58:
54:29:35:fa:72:3b:94:8d:8c:27:df:e9:5c:96:9e:
93:d6:74:f2:1f:de:dc:96:a5:c4:db:c4:0b:4d:4d:
b5:ba:27:07:6a:3a:32:3f:a6:03:e9:aa:0a:cb:cd:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:74:F2:C4:23:0C:D8:50:4D:D1:EC:B2:CE:76:9E:2A:10:98:43
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:57:09:44:95:4d:06:82:de:fa:f8:b9:d0:ca:12:5a:ae:5b:
22:39:42:6d:5b:6e:0d:55:08:ef:b9:f2:5e:cb:29:52:c2:81:
f9:be:f3:ec:c8:0a:8d:4f:9c:9b:c7:73:37:42:26:7b:cb:48:
00:02:8a:9d:86:16:98:c3:13:41:7b:a9:7e:5d:70:ba:2d:ca:
8f:09:28:65:0c:1f:53:56:e9:d4:2d:91:a2:9e:88:db:74:4c:
c4:cd:a6:54:6b:5c:32:09:6f:fe:09:4c:a4:16:4d:08:75:47:
2b:e1:5f:b9:27:69:ca:4f:c2:e6:72:c8:9f:6c:23:3a:09:1e:
88:c8:3c:be:3e:fc:3f:c0:e5:2a:2f:e9:ee:05:e1:cb:f9:76:
f5:e3:45:db:54:c5:e0:fe:52:03:00:ab:32:87:c7:2a:e0:87:
42:c5:8f:80:d5:74:7a:52:38:6d:7a:b8:51:45:50:4e:b6:a3:
bf:ef:da:fc:7f:14:a5:00:e6:71:bb:a9:0f:37:20:e6:b4:33:
38:29:e8:09:77:f6:ed:41:5b:9b:75:83:12:f3:02:ad:c1:6f:
88:9c:cc:a2:b6:b6:9f:27:46:3a:bf:c5:2b:55:76:1a:33:a9:
10:17:00:05:a2:d9:c8:22:ef:fd:f1:92:f9:7d:79:db:17:12:
5b:f6:ed:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBsYQidRM7U122Z+OqiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTlmOTA4MzBmZTIyNmM5MDhlYWRkYjY3YjViOTA5NmM1
ZTkxYmMwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
EygwYjYxNzRmMmM0MjMwY2Q4NTA0ZGQxZWNiMmNlNzY5ZTJhMTA5ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsWa0yrZStPo6W7aACBE5m6E0rVI
+PC7+r2uSbDuY1MFdFKYKvVYjL8Pjk9dRdW/nc/d4DVasOzNEISUh0um1TWbawIL
q7s0R2EQ56qKQIgCD1BF7v80d90XRypqG/qLBSItzEa0RMZtda18TjccPpwxrduj
fxHnmMWYFVsrVnr8aw8XQOUTotL8boBEnQ/t1xsN0L4kHV69VF10TDCzDPGUSm7P
arP4+Yxmw+TceYJKcZ8kVphoh0RYCT2GCLKh9y1JWQijBUGRLMd1zW+HLFhUKTX6
cjuUjYwn3+lclp6T1nTyH97clqXE28QLTU21uicHajoyP6YD6aoKy81kKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAthdPLEIwzYUE3R7LLOdp4qEJhDMB8GA1UdIwQY
MBaAFJOp+Qgw/iJskI6t22e1uQlsXpG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQt
MDY4MDZhMGJkMTgxLzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQtMDY4MDZhMGJkMTgx
LzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzVcJRJVN
BoLe+vi50MoSWq5bIjlCbVtuDVUI77nyXsspUsKB+b7z7MgKjU+cm8dzN0Ime8tI
AAKKnYYWmMMTQXupfl1wui3KjwkoZQwfU1bp1C2Rop6I23RMxM2mVGtcMglv/glM
pBZNCHVHK+FfuSdpyk/C5nLIn2wjOgkeiMg8vj78P8DlKi/p7gXhy/l29eNF21TF
4P5SAwCrMofHKuCHQsWPgNV0elI4bXq4UUVQTrajv+/a/H8UpQDmcbupDzcg5rQz
OCnoCXf27UFbm3WDEvMCrcFviJzMora2nydGOr/FK1V2GjOpEBcABaLZyCLv/fGS
+X152xcSW/btAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:57 2026 by rpki-client