Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: lnWfMI02y5TCYHFXWMWf4NnDDX75jhUkXL3uTB4e34I=
Subject key identifier: 7A:F3:3B:5F:CB:0B:2F:E9:D6:EC:35:37:2A:9A:3D:E6:CA:99:08:2F
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 019D39AF768400C7AE6437B4CA5B2DA8E5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 12C7
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: qwC2Qa61-K92mibT4xQ6QPDFeGk.roa (hash: UFLL3aT7fmcKZdAjIGdfo8UCBZ0v+aHyEhVXBSuvgE0=)
2: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: EB8fsSdNUH6+bcXKgz3QqjPb1eZo15j+lT6tMKVzh+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:76:84:00:c7:ae:64:37:b4:ca:5b:2d:a8:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=7af33b5fcb0b2fe9d6ec35372a9a3de6ca99082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:89:be:5e:a3:10:cd:01:54:90:31:a1:a6:
71:8c:0f:71:d3:92:24:cf:19:56:d6:2b:92:e2:da:
07:51:df:9d:6a:6f:37:ec:d0:97:87:92:a1:31:61:
16:d9:f5:44:92:b3:4a:03:b5:43:fc:04:fa:78:31:
9e:36:c2:ad:7b:dc:6b:af:33:23:9c:d0:f0:de:6c:
8e:88:13:21:d0:0f:58:01:91:76:c5:00:82:a9:71:
ad:76:a0:6b:59:a0:a5:16:0e:3e:2b:4f:8a:eb:7e:
ee:9d:b5:47:a8:11:59:57:43:0e:77:52:97:8d:f6:
70:e2:ab:ae:f7:e0:e7:16:de:e7:9e:67:c2:f4:21:
f5:41:12:2b:b9:66:77:66:ed:67:ff:d1:5a:7e:8d:
fc:8f:6d:72:c6:87:b3:c5:c6:bb:2f:d5:0b:7c:f4:
59:bb:7e:a0:91:96:02:cb:2a:1b:49:e6:f0:95:48:
f1:e4:2c:fc:6b:d4:fa:22:33:d1:5d:71:db:e2:63:
4c:63:4e:d5:f5:d0:97:ad:83:d2:01:34:9c:4c:a3:
88:b3:d9:46:55:4d:23:e7:c3:e1:85:ea:67:d2:5b:
ec:6a:e6:7e:98:5d:01:ac:c8:cc:bc:73:5c:eb:7d:
55:99:2a:14:6d:5c:7f:f8:2c:3b:72:f4:c7:23:fb:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F3:3B:5F:CB:0B:2F:E9:D6:EC:35:37:2A:9A:3D:E6:CA:99:08:2F
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d1:5b:bf:4c:ae:20:ee:be:d8:64:2d:32:99:0c:d4:b4:fe:
8d:32:a2:20:56:7c:bd:f4:fc:5a:d1:83:88:7c:ca:d4:fe:90:
a8:df:ae:ff:f9:96:79:e7:c0:79:d7:eb:00:fe:a6:21:d2:e5:
06:80:d6:58:0b:47:46:c2:21:10:2a:bc:cf:ac:19:55:4a:88:
fb:fc:46:ca:6a:6f:8a:79:5e:3c:04:bb:6d:c4:4b:d7:18:52:
63:0c:29:54:33:10:62:de:64:f4:99:a6:5c:07:f1:3d:14:cb:
da:b8:12:1c:98:c9:39:3d:a0:70:00:44:58:d3:37:9d:26:62:
1d:4b:b7:a4:8e:9f:f0:74:de:b1:62:41:bc:0b:7e:ac:11:4c:
de:95:6e:9b:91:21:a8:a1:f5:61:30:08:3c:3c:5f:f2:00:1a:
39:7b:02:f0:d0:36:08:e9:c1:26:91:14:15:63:ba:c1:8e:e2:
e4:5b:1a:6a:94:29:67:e5:e5:7d:92:f9:69:e8:8c:0c:da:df:
20:d0:cb:c2:2e:ab:db:98:c1:61:36:ff:ca:16:99:8c:4e:a1:
24:b6:18:99:ee:1a:0c:23:cb:1a:04:94:d2:2e:65:b7:79:d7:
e3:de:84:02:b7:fc:c6:d9:94:84:b8:4b:dd:6e:ea:ef:02:93:
e7:76:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:15 2026 by rpki-client