Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: qjpvBEmqp99bnJ8j3LD4OojIeIK3E1uPYEqrE+80+jY=
Subject key identifier: 50:DF:4B:09:DE:C6:F0:C3:96:E3:9C:55:DB:42:0B:C9:8C:A3:D9:0D
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 019D38654F0E4F641EF8630D50BFC4F5358E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: TKcmY4x/HuvkQ6X+jFcLxh7zXgsip1Gajpy7Mrj0d/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4f:0e:4f:64:1e:f8:63:0d:50:bf:c4:f5:35:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=50df4b09dec6f0c396e39c55db420bc98ca3d90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:36:48:75:62:5a:25:64:12:c0:25:ae:81:
eb:07:3e:19:23:4a:07:36:0d:ef:56:01:47:ba:7d:
ff:fb:dd:8d:d7:46:b6:ca:bf:62:ab:91:d1:bb:ea:
85:a5:49:6e:e4:44:7d:f6:db:e4:9e:27:5c:22:e3:
c9:8a:62:a2:e6:70:3c:ee:23:96:c8:9e:ed:f6:45:
21:ce:d4:83:59:c7:28:29:4b:a1:6e:74:b3:22:bc:
8c:f9:33:66:e3:33:0d:4b:2a:5c:ef:9d:6f:e1:79:
ac:ee:c0:01:a6:bc:41:cc:43:03:0d:ed:c2:9d:24:
03:fa:44:73:6e:75:1d:a0:47:66:e2:fa:f1:88:94:
c0:a3:2b:d3:8a:9d:95:28:d9:60:c8:6a:5d:b3:d6:
cb:92:bd:7b:34:e6:a7:01:68:cc:b8:54:97:c4:12:
d6:18:a8:77:1c:f7:0e:eb:8b:76:99:ce:f4:2e:79:
da:71:19:f6:62:1b:bb:a9:3d:d1:0a:c8:9b:d5:8f:
3a:1d:5c:dc:4f:76:93:bb:a3:be:d7:cb:e6:14:bd:
c8:2a:fe:79:5e:0b:56:a5:da:16:2e:af:c1:3d:57:
59:25:06:ac:c1:fe:4c:fa:57:f6:0e:e3:19:fa:87:
4b:09:05:1f:bc:af:dd:eb:1c:c0:40:b1:67:a0:73:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DF:4B:09:DE:C6:F0:C3:96:E3:9C:55:DB:42:0B:C9:8C:A3:D9:0D
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:93:80:37:23:81:c0:46:d9:b3:fd:e0:b9:17:ab:7e:0c:
d1:f1:86:29:71:c4:31:88:ee:4b:1a:6e:32:72:09:37:05:aa:
4a:f9:3b:6c:dd:88:af:86:73:75:63:a8:73:6a:0f:c0:ab:a6:
16:86:cb:cb:c7:77:30:2e:67:35:73:b7:63:69:3f:5c:2c:21:
fe:08:c4:78:b8:2b:e5:b5:45:2a:cf:0a:8d:d8:84:a5:8a:95:
a4:72:4d:92:c2:be:63:be:ed:87:ad:25:49:f7:21:f6:c2:a1:
ed:8b:63:a7:c6:32:7e:1f:6d:7d:ee:14:61:26:62:fe:d0:d7:
8c:d2:d9:45:f9:43:55:ee:a0:1f:5e:96:f9:3c:b7:02:39:3c:
24:7b:78:b5:b1:9f:e0:53:55:60:c5:83:44:52:fa:0a:47:bf:
fa:d8:33:1b:0e:8a:97:e8:fe:e1:33:44:29:d2:08:25:e6:43:
64:e7:f4:9b:bc:7f:7e:83:3f:60:72:90:e1:e0:14:e7:58:22:
4e:c7:25:be:91:57:86:36:40:f5:fe:a4:96:4f:8a:ec:bd:45:
c7:a5:3e:7c:54:c2:9f:41:a5:3b:1b:86:98:42:c4:2d:5f:d3:
e9:ba:18:09:54:bf:5a:f2:ad:db:b3:c3:0d:a8:99:e5:1c:90:
f7:58:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:00 2026 by rpki-client