Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: kxeMWU2daAte7hItVv3RcjUbFr76f7OH4UaqoE0iBPk=
Subject key identifier: EA:49:63:A7:24:68:62:41:03:1F:37:89:DB:33:95:C9:B7:13:6B:9A
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019D39AF3BC34E5FD9FE1C9D07FCD1CB88B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: 8EMMRLq1ba74wsT5jVIHYHbcc00.roa (hash: OWkinLuII34KhV3crRd1+k5jvfaxcPKAbZAj2n4o9vI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: +ZqI6KgnkeC8s896v9x8r/Fwqcglwl2LSu8hShjvNjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3b:c3:4e:5f:d9:fe:1c:9d:07:fc:d1:cb:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=ea4963a724686241031f3789db3395c9b7136b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:30:fa:a0:31:66:19:b1:48:96:3f:76:69:
73:90:6b:ff:c5:08:60:71:57:6c:07:6f:f2:1d:e5:
2a:12:ae:12:be:dc:8f:4f:45:e8:4c:6f:a9:46:db:
b0:ea:cb:9e:35:e1:9b:5b:cc:aa:09:a9:34:41:d5:
7c:19:2d:60:f8:ac:46:3e:df:aa:a3:ef:33:12:9c:
c1:f2:5e:30:8d:68:57:64:9a:5b:22:6a:c5:e7:4c:
31:64:33:a4:97:41:6c:6f:21:85:e0:6c:f5:f7:46:
30:18:84:be:b6:79:80:42:2c:0d:7b:67:8d:09:9a:
f0:b2:03:fb:21:fa:71:ad:4e:e4:1c:87:26:d5:ef:
68:36:e6:4b:e1:ae:55:0d:08:5b:fd:5d:6e:7d:94:
ba:80:2d:55:5b:c1:1c:92:4b:d2:ef:82:e4:d9:40:
09:ae:2f:63:2c:13:74:10:20:76:d4:ef:82:6b:d0:
90:64:4c:ef:c5:4d:b1:e0:96:19:b3:8e:8e:e8:50:
94:60:a4:f2:9e:f1:80:92:28:e8:30:3c:4a:8f:6d:
06:59:56:01:02:30:96:d5:ec:9d:b7:95:29:67:df:
bb:1d:1f:48:8d:3e:51:bb:58:90:35:4d:fb:d5:0f:
1b:f9:a4:40:73:7c:d1:d2:9c:4d:ce:69:d8:ad:1d:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:63:A7:24:68:62:41:03:1F:37:89:DB:33:95:C9:B7:13:6B:9A
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:22:39:31:31:0e:a6:cf:64:79:73:02:23:c7:77:aa:ee:9c:
15:ae:c3:21:7a:3f:9d:1a:18:a0:6d:0b:49:9c:e6:9b:de:72:
4a:cf:9f:69:ed:09:ce:d9:9f:9a:1e:0e:a9:2d:57:cb:75:1f:
36:93:38:9a:6a:dc:27:87:89:bb:5b:99:8f:7a:f2:3c:98:4e:
38:0c:86:f5:30:3c:f1:f9:fe:02:3b:5d:03:1d:39:88:b0:04:
0c:51:73:b9:83:6a:81:a3:ef:76:77:70:e5:44:0d:36:79:4c:
87:5a:3c:dc:3d:01:63:b3:d8:f5:89:60:58:51:58:9f:74:e7:
e0:e1:d4:25:5a:72:d6:4c:2d:4d:6c:2f:ef:ec:fa:79:9e:36:
27:36:cb:bc:88:5e:b8:37:20:b3:27:96:39:53:6a:e2:10:b4:
0b:bb:c9:d3:62:18:4d:fe:89:b7:5d:2a:a9:05:53:e2:d3:86:
b2:a5:d5:c2:8c:3c:a8:d3:2b:7f:ce:eb:24:0b:e0:02:c7:f0:
e1:ad:cf:ae:32:91:60:56:04:7b:13:70:9e:36:ef:68:c6:38:
d5:83:b5:30:cd:40:8a:7b:e1:bf:e9:8e:b8:1b:ad:4d:63:e0:
c0:92:26:ff:64:69:90:b4:5e:ee:0f:7d:64:c8:c4:b9:97:c4:
f2:ae:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:17 2026 by rpki-client