Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: GGa/x6zUYLQRmCnrBxI691V8nJUqO8wl5cy41nCiZoc=
Subject key identifier: 3F:DF:BA:9E:21:68:BF:AC:42:10:F9:29:98:A2:1D:99:A0:50:44:98
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 019D38D30FCD8EDC78E6CA0EC3DE2443FE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa (hash: jOtVSSPZObpK8XqzAlQVoc0c5TSMX2XvXMtPwq4gvlk=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: ALnjnTDvvPgmyBHA5mFbSN9q64xZ39wjfQP72Vj6+Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0f:cd:8e:dc:78:e6:ca:0e:c3:de:24:43:fe:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=3fdfba9e2168bfac4210f92998a21d99a0504498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:e0:b0:43:c4:d9:b4:86:9d:1d:fd:87:f2:
d0:2a:d9:a1:09:a3:d2:6b:ce:9c:12:1d:b7:60:84:
4b:06:95:11:73:2a:41:c2:e7:7d:7e:f2:45:8b:43:
14:e7:d5:96:e9:f5:9f:80:4a:82:c8:7e:6e:e5:b5:
82:cc:68:7c:d3:bb:8a:94:36:7d:ef:65:d8:33:1b:
9a:58:e6:31:8f:0d:68:35:5d:25:99:d8:83:92:47:
b8:59:b2:2b:4a:29:ea:c4:49:cf:08:f7:a8:53:ca:
47:c3:e6:d6:aa:ba:8c:f9:4d:af:c9:5e:72:9d:dd:
80:7c:80:b0:a8:28:60:1a:4a:35:1c:e7:8d:e3:b8:
f6:e4:8c:ae:b7:b9:c2:57:8c:c4:62:89:99:9a:45:
a6:bf:6c:43:9f:c2:dc:79:b5:dd:f9:ca:db:d8:38:
8e:49:59:f6:37:61:fc:27:cb:2b:ae:7b:22:e5:c5:
63:93:d7:c6:0c:a1:d0:7a:5e:76:7d:eb:c0:13:f6:
08:43:e6:d4:56:10:6b:d0:f9:2b:17:f0:fd:10:ea:
9c:07:b8:a7:67:7d:c8:8e:19:fd:95:34:74:30:60:
e8:e4:8a:5e:ed:c3:a2:b5:d3:6e:e8:ba:b0:93:91:
25:dd:31:d2:a7:c1:48:4b:f6:78:40:75:f6:1d:d9:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:BA:9E:21:68:BF:AC:42:10:F9:29:98:A2:1D:99:A0:50:44:98
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4a:b9:01:ec:f7:39:e4:20:98:62:fd:31:05:ee:da:56:48:
3f:6c:da:fb:23:eb:91:d6:9b:f3:5c:c3:04:ab:82:d6:e0:cb:
a7:4b:e0:f4:d3:8a:4b:e8:73:68:a3:4a:51:e0:eb:bf:ce:a1:
c6:58:6e:06:47:bf:6f:46:52:da:9e:c8:c5:81:27:51:76:f1:
57:c4:1e:1c:08:89:ab:4a:4e:c1:ad:5a:cf:cc:12:aa:4f:9b:
cf:dc:fa:d0:4e:e4:4e:ec:cd:cf:b6:b3:92:d3:1b:9a:87:e9:
b4:bd:12:ea:5e:bb:9f:73:df:35:67:1d:a7:25:8d:a2:c9:59:
80:bb:33:3f:4d:a7:85:ef:70:72:97:c0:03:31:68:4c:f5:ba:
55:81:b4:8a:85:53:a7:38:63:85:8c:82:85:39:7b:26:66:b2:
60:ef:fd:0e:47:5b:da:61:5e:a7:a6:e2:de:15:7e:93:f1:f7:
8f:1d:cf:df:ed:e9:95:09:ec:47:06:8d:6e:08:75:bb:4c:80:
d0:ba:6d:c0:db:93:35:3b:a4:a2:3d:0b:c5:97:8b:22:37:0b:
f5:53:4d:68:34:c6:16:1a:55:36:52:24:4a:61:f6:c3:5e:23:
cd:6b:96:0d:d1:ae:07:2b:8d:ca:6d:b5:85:71:38:ca:71:e3:
dd:66:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client