Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: A2Zg0EtG0NphSFZv8g53x8KQinYmxxZuAWS2y76BEXY=
Subject key identifier: 8E:76:F3:AB:E6:58:AE:B4:07:46:35:C3:82:53:59:05:62:35:02:D6
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019D39409022C3EFB6B1A5B3371CB0E08B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: 0077uC1iCNPi-kwOujwsZ8frO5Y.roa (hash: qDkQY0n1EPoxmy8QXmSxuAMRtBldxO3WD2gudtx59D8=)
2: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: yNwD7K77T7reLed/m7A1b/6vcI1rKZ73FgwcZL/2JlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:90:22:c3:ef:b6:b1:a5:b3:37:1c:b0:e0:8b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=8e76f3abe658aeb4074635c382535905623502d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:8e:f1:14:3a:15:4e:e3:58:9b:5b:b6:38:
9f:2c:92:dd:5b:1f:72:2f:9a:f0:58:18:54:46:7e:
94:a4:79:49:a8:35:e4:57:e8:8e:51:ac:38:e1:9d:
a7:92:7e:ae:04:b2:03:c0:d8:92:f9:db:b0:65:14:
b8:d2:89:49:9e:ac:5f:ce:c1:42:35:f7:91:9d:fc:
84:ec:81:6d:dc:e0:19:a6:36:ca:43:0c:e0:51:d5:
9c:49:3b:e1:b1:fb:74:dc:9b:1c:95:cb:c1:df:08:
1f:30:a3:21:08:9d:34:aa:d9:a7:ad:4e:25:28:bd:
a7:1c:02:a7:a6:e2:3b:2e:3a:5a:a9:2c:2f:0c:73:
50:74:97:ab:f3:85:3e:31:4f:77:c6:00:f0:d7:36:
d5:83:4b:24:57:c5:05:c4:1e:3a:ce:d2:9e:73:b6:
e3:34:fd:50:80:6f:ec:a9:e3:9c:ed:b2:ea:d7:d9:
f4:12:54:d7:24:1a:4b:e6:5c:98:df:0c:21:53:eb:
43:05:7d:7a:04:9f:14:cf:e7:88:fd:e5:83:79:e9:
eb:11:47:f1:85:66:48:ea:c5:9b:a7:2f:58:a2:6e:
22:e0:c2:58:fa:44:8b:91:22:7a:6f:2a:ff:bd:da:
ee:d8:4f:36:42:75:22:c1:d6:40:1c:d8:3b:8e:cc:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:F3:AB:E6:58:AE:B4:07:46:35:C3:82:53:59:05:62:35:02:D6
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3b:f9:e7:74:78:dd:df:00:a8:43:37:f6:e2:ea:c0:72:a5:
e7:a0:95:05:d4:8b:9b:0d:04:c8:05:d0:20:19:9b:6c:12:89:
ba:a0:95:85:f0:39:f9:7d:64:1b:98:fc:3d:30:9a:59:1b:54:
bd:49:de:5a:15:d5:32:52:c9:6d:2e:e5:9e:5e:3a:39:2b:86:
6f:90:58:42:49:4e:7c:ec:75:88:35:23:16:9d:9f:61:d3:e4:
cb:20:4f:d4:9a:c4:60:dd:25:18:8a:29:16:e1:e6:91:0b:a5:
6e:dd:d5:d9:f9:37:21:bd:80:ca:1b:ea:c0:1c:c2:ea:0e:3e:
6c:d8:ef:c0:01:30:1c:55:e9:4f:70:6b:ce:50:73:fe:3c:19:
68:0d:1b:42:bc:06:8f:1b:86:0e:05:1c:7d:7d:a7:be:4b:aa:
55:5b:07:6b:03:76:2e:03:c7:af:89:0a:86:e2:ea:77:02:30:
1a:42:23:68:92:9c:4e:77:8f:bf:5b:7c:65:36:1f:c2:b1:0d:
c8:2a:3f:bb:40:d4:5a:37:e5:3e:c5:f9:f1:bf:b6:ff:e2:6d:
fe:d7:23:97:7d:68:2d:99:69:5c:8a:c0:30:87:81:6d:7b:3d:
23:af:f2:08:36:87:d9:a0:ce:50:7b:f2:31:86:00:88:62:32:
04:ac:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:11 2026 by rpki-client