Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: uq4euADyHQqsba/KXLoZKkKD8osDPcjSSSZVtIIGAfE=
Subject key identifier: 38:C8:D8:7D:24:21:69:DA:7A:69:FA:93:0D:AC:12:57:27:64:72:CB
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019D38D2A8BBF48A539BB99D6BA975FF41AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: A6iHBsnqcj2Riil3U1_TXl2ABqw.roa (hash: wWCu1PETCholC6rFvWG+KWu2TvENNpa++dqGd7mDsM4=)
2: MQh6Wz2-8CGK9b8xrkIk2AZbqhQ.roa (hash: Vu6+oiBxaiIXPalKgvaptYqxpXWKSxP7AU+MBEut6Xs=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: udpb+kFqRP4VUmWqVn++TB790m4tWlmUR+6kjoDy42g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a8:bb:f4:8a:53:9b:b9:9d:6b:a9:75:ff:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=38c8d87d242169da7a69fa930dac1257276472cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:95:27:1d:d8:9b:1a:40:03:25:b6:59:18:
b8:3b:b1:d9:29:70:29:22:ff:12:7d:8d:54:d7:39:
7f:d7:b7:7d:8a:c3:56:ab:f7:0c:71:94:e2:45:75:
f2:f3:38:a1:24:f9:7e:da:e3:48:f1:72:dc:13:21:
d1:e4:9f:b0:de:5a:a7:ef:86:83:32:fc:03:01:c4:
10:db:f0:94:c7:75:4f:a6:6b:26:20:24:7d:95:a8:
ca:92:de:ad:a9:60:94:70:ae:44:88:2d:60:f7:49:
96:db:b7:89:88:9c:a3:87:15:d7:d2:1b:de:fa:20:
42:a7:0b:c3:34:7e:7b:7d:8b:c8:34:aa:ca:b7:96:
7f:2e:83:2c:d7:4b:87:e1:39:38:cc:cd:73:b2:16:
e2:a4:f1:40:32:1c:33:6b:c3:38:98:d1:90:4d:d7:
e5:05:22:e5:f5:10:c1:9d:63:61:99:7e:79:8b:89:
f1:1d:07:29:0c:66:01:f2:85:fd:55:58:9d:c5:c7:
06:2c:f5:e0:18:1f:0f:13:d9:89:a7:26:98:3f:9c:
1d:70:4c:73:38:09:0f:45:51:5d:e6:e6:e8:84:c1:
d7:1d:e7:c4:96:83:46:6d:7d:be:d7:be:ff:0d:54:
3e:73:82:fb:45:72:36:8f:e2:25:af:e9:5d:54:a0:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:D8:7D:24:21:69:DA:7A:69:FA:93:0D:AC:12:57:27:64:72:CB
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8d:a2:a3:6a:55:71:df:45:69:eb:eb:5d:ad:18:3f:ff:95:
44:40:dc:3d:81:00:16:0d:22:95:38:b1:f4:f3:95:fd:0e:fb:
11:e1:c2:63:2e:f3:4e:63:f9:72:9c:3b:29:56:96:cd:37:bd:
a9:01:83:8c:73:3d:33:22:d5:8c:26:65:54:8e:05:b6:5d:f4:
05:99:86:16:49:39:52:17:9b:b7:b3:7d:60:51:70:69:83:7c:
27:70:10:ea:14:b7:cc:86:4c:4f:43:17:3f:e1:be:5e:46:14:
26:1f:70:e6:2a:eb:3a:67:20:c3:58:5f:a1:00:94:86:28:f4:
35:3f:f6:ae:37:39:c9:7a:c3:20:08:37:71:43:b8:c6:24:48:
a8:bf:f4:1f:bf:b4:ec:f1:ae:83:fa:84:3e:d1:e2:05:10:ee:
47:26:ee:36:75:e6:41:66:be:f4:e2:ad:83:2d:7a:05:be:66:
e9:f2:40:45:e9:17:4a:09:ee:88:c8:9b:48:3c:08:5f:7e:31:
46:0f:86:f2:08:8a:ae:e0:a5:c0:e1:05:94:5b:8a:cc:d9:7c:
78:85:b4:ca:54:cd:40:06:94:b0:84:51:91:dd:cf:15:5b:a8:
72:84:5b:9d:53:9a:42:a1:79:fb:4e:c4:a6:46:7c:81:1d:99:
6d:66:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:52 2026 by rpki-client