Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: u5y/Xha2kpYSpivIs+Bnhy6dRgzH7tVKBNo3lfHJXnU=
Subject key identifier: F6:9C:21:81:8D:90:11:A2:5D:B7:B3:FF:1B:74:11:30:8C:51:E1:7E
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019D389C21768BBBF60EE30E7F6B6F3F69B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
2: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: peLtkmI9ruHYuMSCU+ulnfp96CniV6dVdZMAGMtB6Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:76:8b:bb:f6:0e:e3:0e:7f:6b:6f:3f:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=f69c21818d9011a25db7b3ff1b7411308c51e17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:21:e2:ae:07:af:68:ce:36:c1:97:fc:85:
5c:fb:1b:27:04:52:bd:f7:e0:de:df:95:a5:78:cd:
61:d5:a0:55:c5:cf:44:3a:2f:2a:a9:cf:35:91:41:
bc:29:e9:6c:6c:02:d1:0c:43:cd:15:82:9a:31:9c:
6b:eb:9a:22:d6:92:25:b6:9a:9a:48:7c:0b:33:14:
fa:a9:9d:13:ac:2f:3d:8e:ac:86:fd:bc:b1:d7:34:
9f:85:c6:31:85:67:5e:35:42:8e:98:d8:71:d6:73:
d6:96:16:e8:f5:f5:25:4c:52:7b:95:0f:07:7a:7f:
e4:74:5b:55:bd:f3:25:19:2c:f8:38:fe:53:1a:9d:
4b:4a:2d:e9:34:d2:0e:04:a0:74:65:25:79:3e:88:
f5:29:c6:3b:b8:d9:ac:0e:bc:09:52:d8:46:ef:f6:
b2:bb:0b:99:df:88:24:e5:d5:60:86:cc:97:5d:91:
d2:bc:bf:8d:ac:43:7d:95:bd:84:68:a8:10:fe:0b:
35:0e:60:f7:60:4b:98:29:b3:fa:7f:97:04:4b:43:
00:d7:27:a9:8e:c9:2f:65:5f:64:6a:98:c8:83:98:
9d:a8:44:84:ea:f7:dc:b2:ef:6f:5e:0c:ec:d5:5a:
32:d2:4c:43:16:31:a8:9c:4a:21:1f:d8:f3:70:41:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:21:81:8D:90:11:A2:5D:B7:B3:FF:1B:74:11:30:8C:51:E1:7E
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:d6:41:99:d9:4d:2f:1a:ad:35:65:11:bc:b0:08:73:14:
a5:1c:9d:30:ce:b6:88:ff:b3:73:8b:bf:e0:3d:56:16:bb:75:
eb:b6:1d:97:98:c4:dc:3b:4d:48:52:ad:74:56:c8:fb:f0:22:
b0:c4:ce:80:f0:d2:1a:e5:f4:e0:17:92:8c:13:80:9e:04:fc:
74:1a:62:c4:f5:da:9d:10:44:f1:68:00:b1:b8:c8:7a:ff:23:
15:0e:bb:5a:c7:67:df:63:b4:e0:bd:c6:e7:de:be:a8:cb:24:
43:cb:ef:d3:19:a7:bd:92:ad:f9:46:f4:07:5d:b8:bb:c7:9c:
18:62:7c:ef:86:8a:f9:42:e2:0a:6f:da:1d:02:aa:7c:f9:62:
96:2f:10:38:12:a4:9e:76:7f:27:08:50:fc:38:65:09:92:02:
9d:df:8a:05:0e:1d:04:03:9c:1a:d2:db:bb:15:a7:19:59:e5:
90:e4:67:45:13:01:bd:f4:a7:85:c9:e5:95:0a:69:9a:74:ae:
3d:3c:7d:b3:58:31:28:ad:a7:04:a5:02:19:82:f1:e8:36:a0:
39:ed:4f:34:3a:65:c2:35:00:67:90:30:a6:f5:63:e6:ab:6a:
b8:2a:3f:d3:70:9b:62:da:92:73:eb:82:03:e7:a0:b5:da:0c:
5a:85:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:48 2026 by rpki-client