Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: MPFFNwTeQnAYSiW+4FnDwRaOcsmlSuHRPl7nz9OA+Y0=
Subject key identifier: 7C:93:AC:A4:3F:56:2A:7D:BF:E7:BB:7F:D7:B6:E2:90:EF:CF:20:FD
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 019D38D319074CD592301069F075F8BACF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 0AF5
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: jdJMLyi8JH97aa94gl4t2WyNFhVrRX5KW12FHmmvjbE=)
2: wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa (hash: TYdOeOy0mx3TMxWyBFFWn8nDjGPanVPmVWlj7zHMp90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:07:4c:d5:92:30:10:69:f0:75:f8:ba:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=7c93aca43f562a7dbfe7bb7fd7b6e290efcf20fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:f7:bb:f8:43:10:98:ba:87:c5:51:96:d1:
54:db:e1:fa:16:cf:05:80:14:01:a0:d9:d4:cd:c9:
7d:19:55:ed:93:e2:6f:1f:a4:c0:cc:95:f1:e9:dd:
16:1f:6a:98:1b:34:2a:1e:5a:66:19:3b:61:6d:89:
4e:82:40:3a:6b:0e:6d:74:12:05:52:d6:00:32:76:
cc:0c:8f:7f:ba:a2:10:49:dd:3e:10:db:aa:d6:33:
68:1d:ac:7f:42:ce:25:fa:98:ce:4e:83:1b:f9:41:
ba:4b:fb:bf:f8:53:26:11:5b:83:4f:b4:cb:7e:ea:
2b:1a:8c:3c:f7:52:10:6a:04:dc:db:ed:1a:49:99:
f1:9b:7b:6f:53:c7:27:7b:e2:80:ad:96:c8:1d:f7:
f7:89:46:92:08:71:a0:07:e8:57:27:95:63:8a:41:
25:cc:50:b8:b4:e4:fd:ac:b8:df:90:4b:17:f0:fe:
c4:a5:74:af:ce:f5:98:14:c2:0e:0a:b8:ac:0d:9e:
90:de:8f:3d:4f:5e:92:1a:5d:f3:9b:fb:24:31:ba:
62:b4:c7:33:d1:7d:f8:d6:54:de:71:ba:cc:c6:e2:
3b:78:a9:81:c8:e8:b7:f2:f5:91:f0:05:87:9a:f9:
86:63:eb:a0:ff:f3:f7:44:46:23:a4:46:6e:9a:e3:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:AC:A4:3F:56:2A:7D:BF:E7:BB:7F:D7:B6:E2:90:EF:CF:20:FD
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:62:1b:b4:48:7a:56:03:64:b2:9a:e1:11:67:90:4c:65:
0f:ca:e8:60:4b:74:0b:86:59:18:61:18:d8:33:0c:44:0c:85:
80:aa:32:f6:e3:94:55:6b:98:fa:4c:2c:38:29:eb:2d:1a:f3:
91:d8:55:89:45:e3:9b:0b:33:de:17:23:90:22:be:73:9a:23:
94:b8:3f:5b:b4:07:7f:6f:15:25:72:3c:08:b9:9e:43:50:99:
a4:1f:a8:5b:e4:40:63:f9:cd:5f:af:e8:cf:42:ec:ad:e3:8c:
65:58:79:68:dc:89:1b:70:89:70:cf:29:9a:c6:e5:a5:3e:0b:
37:94:ce:8a:52:d6:63:59:d0:26:32:9d:a9:d1:03:59:be:44:
5f:fd:20:77:b0:92:c3:39:55:8c:f1:7f:8b:87:19:95:72:44:
4f:45:6d:bb:32:04:4e:15:d8:50:01:92:6b:1f:01:5b:dd:4a:
0e:46:4d:19:98:0a:c6:f6:de:9c:49:12:df:f3:a5:0d:87:bc:
05:d7:f0:8f:41:6e:4f:34:c6:e0:bc:31:56:64:8f:fc:df:3c:
4f:3b:42:47:04:0a:62:c0:47:49:2f:c2:45:b2:0a:7e:55:d3:
b1:26:eb:fe:55:72:63:64:45:01:51:94:41:5c:fd:56:8d:f5:
f7:63:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:48 2026 by rpki-client