Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier: vqjEtY+oyFvlxlb1UWMyAQLDG3N4jbp9lKlvOfENykg=
Subject key identifier: F0:1A:1A:01:21:EB:C0:BF:3D:B7:F3:BC:EC:02:8C:0F:E9:1E:2D:32
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer: /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial: 019D3A1C2B035B4B4F393C9593EEE118240A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 15:00:17 +0000
Manifest this update: Sun 29 Mar 2026 15:00:17 +0000
Manifest next update: Mon 30 Mar 2026 15:00:17 +0000
Files and hashes: 1: Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa (hash: 4ZwetJ9wkwYRliRJIgccov9XYXiW/suuU+RhySazg+s=)
2: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: WX8EaDFOEG6TEWIjWXwNTiVtgruX5xKx3NVhUAnNd+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:2b:03:5b:4b:4f:39:3c:95:93:ee:e1:18:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
Validity
Not Before: Mar 29 15:00:17 2026 GMT
Not After : Mar 30 15:00:17 2026 GMT
Subject: CN=f01a1a0121ebc0bf3db7f3bcec028c0fe91e2d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:91:eb:c0:1c:61:15:d3:95:9f:f6:11:c0:
d8:0b:6b:17:48:0d:cb:7c:8f:80:e7:c4:a1:0c:95:
44:d6:82:48:4c:83:e8:11:bb:2a:2b:43:89:e5:d4:
af:6e:19:83:55:8f:ed:22:ec:10:bf:dd:61:43:d6:
aa:34:60:8f:67:47:05:c9:12:eb:c5:52:2b:cc:99:
88:1c:41:26:10:61:0f:14:47:15:a9:ed:77:7f:bb:
87:ad:6c:03:10:41:e3:ea:87:95:3d:0f:0a:0b:2f:
cb:0e:3b:59:7c:6d:8d:aa:dd:d8:c4:b9:f4:fd:dd:
73:47:48:e2:8e:31:99:90:d4:c3:52:ff:bf:8a:cc:
e7:e2:ee:6d:4f:a8:e2:1e:05:17:a7:98:f6:0d:6d:
76:09:64:52:ae:4d:de:e4:08:a1:aa:00:b6:5f:17:
3f:1a:02:2a:b5:9e:05:00:2c:68:1e:19:d3:6c:dd:
04:6e:6f:c2:a1:15:e3:f4:1d:22:43:82:f0:3e:99:
2a:c6:77:8e:59:5b:83:50:d1:55:6f:46:43:ed:63:
1b:02:2f:2e:a8:2c:d4:2e:e6:f3:8d:72:a7:86:6e:
e8:b5:ff:76:da:48:59:8d:f0:bf:11:73:75:70:9c:
92:84:9f:a9:24:17:c5:67:be:c0:98:a5:9a:df:f7:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:1A:01:21:EB:C0:BF:3D:B7:F3:BC:EC:02:8C:0F:E9:1E:2D:32
X509v3 Authority Key Identifier:
keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8d:b3:a4:21:e5:c1:bf:9d:87:41:65:e7:08:6d:3c:e0:5f:
73:c1:52:df:91:1d:a4:3c:5c:50:71:3e:91:44:6a:95:87:52:
cc:31:73:66:b8:8f:ad:86:57:82:ee:42:c1:51:75:d3:7f:f5:
66:3e:1a:41:96:00:a9:dc:22:8c:31:8a:94:ab:ab:2a:3f:f5:
11:8b:ee:d3:45:71:64:93:f5:e6:d9:eb:c8:0e:f9:06:fc:d7:
e5:51:1d:6b:f9:81:28:ec:df:5c:97:db:1f:19:f7:3a:8f:08:
ac:ba:2d:6d:0a:10:4a:df:38:04:ec:b9:5c:bf:ed:a8:db:69:
4b:24:de:ae:4c:36:bc:32:2d:6b:fe:ad:4f:c8:de:73:5d:6a:
6b:b8:84:11:17:85:ef:f8:20:ce:9f:f4:7b:e5:f3:22:d2:26:
c8:d5:9f:da:a9:b8:c7:e7:78:c9:95:3e:8a:36:dc:e5:ae:86:
b9:1c:58:62:77:f0:03:91:a7:81:71:5c:cb:76:ae:a4:6b:f6:
34:b0:b2:d4:28:54:ac:56:2a:eb:45:ed:de:c9:db:d6:e0:69:
7f:6f:ab:0a:22:45:90:f4:00:51:da:d2:ed:ae:95:35:15:c6:
9b:3e:e2:83:37:dd:3a:84:d8:36:ff:76:c9:5d:5c:4b:13:0c:
27:4a:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:48 2026 by rpki-client