Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: iaqutSmcTSqKyPPlHa2h5L19TwZqGhy+Xl1bZhsMaL8=
Subject key identifier: 1C:FC:BE:69:DB:89:3F:BA:9D:F6:0D:7E:EB:7A:11:0A:DB:ED:CA:32
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 019D382E6BE99A96E8EACDC94406DEB6B26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: xN39mkrylm1mjk+eVGzg7SDfECykRg0xSWqnZE+V1pw=)
2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6b:e9:9a:96:e8:ea:cd:c9:44:06:de:b6:b2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=1cfcbe69db893fba9df60d7eeb7a110adbedca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:ce:a7:fa:c1:21:a5:9e:37:c9:10:6c:50:
75:0f:38:a8:68:b5:41:53:d9:34:a9:84:60:92:08:
48:22:b2:b6:75:62:f7:ba:1a:15:cd:a6:48:e2:a1:
1e:bc:cc:13:42:04:a6:f8:21:a5:88:4e:28:be:ab:
e0:32:8a:0d:fa:1b:8a:7f:86:5b:37:9d:da:ab:62:
cd:87:8e:71:28:d5:4a:2d:be:bb:8d:21:b7:5d:03:
4d:4d:c6:8f:41:92:2a:5f:fe:d5:b4:44:89:0b:4e:
d3:02:49:92:27:e5:fa:e3:d1:8c:f6:f2:7e:10:bd:
f4:d3:ba:21:ca:69:63:81:74:36:2f:6d:c9:de:a9:
53:7d:52:d9:fc:dd:85:a3:3a:d6:dd:23:4f:36:17:
84:d2:3a:67:55:7a:05:b1:5b:5d:fd:8e:94:40:ca:
41:2f:54:6a:6e:ae:60:6e:9c:11:08:87:f3:a5:81:
14:4c:f7:e6:79:8e:48:e4:2b:d6:91:41:43:2a:a0:
03:b5:a0:bb:91:8a:b6:86:67:b2:f2:b7:2a:81:bb:
56:4f:10:53:37:4d:83:fc:37:2a:dc:52:9f:0a:92:
40:27:3a:b3:cb:d7:f3:47:c1:7c:19:56:cc:fc:5d:
fb:ae:b7:ec:56:83:0e:48:81:c5:9b:2e:cb:2c:41:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:BE:69:DB:89:3F:BA:9D:F6:0D:7E:EB:7A:11:0A:DB:ED:CA:32
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:78:e8:6f:0d:89:3d:2f:27:98:d2:27:4e:5b:7f:fd:5f:5e:
f4:3e:3e:b8:68:77:7b:e1:19:53:aa:7b:0c:55:4f:e2:e3:bf:
0c:67:cc:b0:fe:8d:9c:18:cb:b6:27:13:dd:95:b4:43:de:71:
39:97:2b:9d:ea:a1:fc:d8:34:ca:1a:c3:b0:bb:d2:51:3c:ce:
3a:c3:20:1b:53:40:b1:8f:c2:b9:eb:32:65:42:3b:c3:55:b4:
ae:01:10:c2:36:7d:4a:8d:88:85:58:4a:a2:98:0b:42:bc:66:
75:c9:42:d1:17:82:b2:ca:ac:f7:af:5b:e2:42:86:09:f8:dd:
7f:70:29:08:e5:79:df:f6:32:c8:ab:17:0f:19:ad:98:1a:f3:
08:de:83:07:36:01:d1:fb:e2:a7:f1:85:f1:2a:f9:4c:67:3e:
20:f1:8b:62:88:63:d2:16:88:3d:ba:0c:2c:4f:1a:c3:05:90:
a4:5b:45:ca:c8:ff:de:d9:e7:90:b1:0c:6e:44:0c:8e:3c:fc:
14:e3:24:86:10:11:2d:54:6c:d1:ba:d2:78:a3:ba:78:87:7d:
e8:1e:ed:fd:5e:2a:1a:1d:68:a0:9a:0f:d9:af:87:b2:05:c4:
5d:79:bd:e8:cd:29:81:4c:8b:87:ae:c1:14:f4:df:4d:e9:3e:
ad:9b:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client