Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File: k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier: BL82FrtqUna/qu/6Nxwz4JyH0rjzmpm523FdSnzd1/Y=
Subject key identifier: 79:40:CC:09:F5:44:E7:CB:CA:C4:35:4C:3D:30:5A:8D:12:15:08:E5
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial: 019D38D39D09FCD30C67D630A0EE7DBDC559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number: 0AC9
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: 1c6OuFpCPaU+sDbeOaySp/ndb33XS0hiBWa3vJ3alI4=)
2: xnGY0GE7g_ENVu56e5gxelHybG8.roa (hash: yJUaHCIzmB9kSFy3GFPElESkvsA2U0DoARJQmC3vS48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9d:09:fc:d3:0c:67:d6:30:a0:ee:7d:bd:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=7940cc09f544e7cbcac4354c3d305a8d121508e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:f4:59:f6:8d:f2:36:29:07:e5:0d:03:bc:
06:45:ae:c9:b1:52:f3:7f:dc:92:68:6f:3f:82:1a:
ff:30:2d:a0:f1:31:f8:0c:75:d9:3d:6e:43:98:ea:
55:ad:f0:9d:f7:a7:70:34:2e:d6:49:e9:0f:eb:44:
19:9e:17:ea:39:62:ba:bf:28:09:10:9a:8f:9c:b9:
18:e9:99:2e:96:d0:82:26:53:d5:38:da:75:c5:b8:
1a:25:97:d8:b8:67:58:4f:c8:cd:c3:01:b0:e8:07:
df:67:46:84:15:20:48:7a:5b:eb:a6:dd:b5:7b:3f:
12:bd:3a:ee:03:5c:65:b5:38:06:28:de:a3:01:e2:
d3:33:6a:ae:06:81:bb:14:e3:1d:e8:ba:e5:5d:77:
0b:b8:dd:8e:fd:92:25:11:30:14:49:11:01:12:43:
b8:45:a7:e4:82:5d:9a:a9:c5:a0:2f:ae:4f:af:cc:
d8:f2:99:c5:98:03:16:9c:cd:b8:e0:0e:f0:42:44:
a6:cd:4b:58:67:8c:72:e8:52:b6:17:ac:c3:f4:bd:
d2:d5:7c:19:03:dd:f7:f4:14:e1:32:40:71:85:cb:
3b:3b:b3:b5:39:ab:9e:93:c0:c5:35:54:fb:ec:dc:
db:5d:8b:e9:05:3a:4d:4f:da:20:10:08:09:f4:cd:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:CC:09:F5:44:E7:CB:CA:C4:35:4C:3D:30:5A:8D:12:15:08:E5
X509v3 Authority Key Identifier:
keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:eb:91:b6:4c:65:83:17:20:0a:40:79:17:00:fa:be:e2:26:
1a:8f:94:83:93:32:9c:7e:16:63:df:37:5b:c6:02:a5:ec:8e:
b1:bf:52:71:77:19:52:65:95:a5:78:2e:eb:37:1a:96:37:f0:
78:a1:1d:f9:3b:78:8d:fb:78:74:81:0c:e1:52:3a:2d:77:98:
db:33:aa:ba:d5:ae:73:75:5e:b5:e2:f7:5a:0b:7f:f1:ef:fa:
5b:0c:ca:a9:9f:11:74:cd:1a:8e:a3:e4:0c:d1:52:27:78:8f:
86:59:82:ab:6e:f2:9a:f5:59:47:7d:98:82:75:c7:6a:49:af:
0a:f9:23:69:4e:06:18:83:12:f9:46:6a:f7:4c:4e:ba:26:53:
69:fc:35:5e:90:46:9f:50:24:cb:b7:de:44:77:c7:c5:32:aa:
b9:be:71:5b:61:58:59:e9:28:11:88:33:6f:75:a2:c6:7b:e7:
5e:fa:30:44:d0:b9:3d:e0:f7:e8:3b:98:a4:73:b4:77:c3:9e:
3f:3f:15:a3:92:a4:22:bc:30:7b:06:bd:e7:31:30:e6:29:62:
68:07:cb:0e:c5:4a:ce:41:3e:ce:b5:30:ee:62:ed:a2:70:37:
28:17:78:08:cf:77:b1:39:00:d3:e6:f1:07:5a:3b:62:3b:9f:
c2:1e:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:33 2026 by rpki-client