Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: V0TC5xkkTMANW7S87cMIzM7Zi7HWqWWAespLzNEvgHo=
Subject key identifier: 5C:EC:92:DF:18:40:5D:44:BC:12:C3:9B:7C:80:42:D9:1A:57:51:AE
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 019D3909A7FE1D7561A3001B3799FFAF3DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: 6x77oeDFdYvSMxKdi2C34FeKv6KWagqGsnVxQ16jko4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a7:fe:1d:75:61:a3:00:1b:37:99:ff:af:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=5cec92df18405d44bc12c39b7c8042d91a5751ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:59:9c:f1:95:d8:92:41:4a:13:96:85:f3:
e9:14:d2:c0:b1:24:e0:01:19:68:d5:6c:6c:1f:29:
25:c9:45:b5:fa:e2:44:20:ee:56:e4:b5:34:f7:65:
b7:16:2e:7c:7a:28:be:1d:c0:6e:c5:01:4f:ef:f5:
25:9d:f7:98:a5:18:5b:74:eb:ab:c5:a1:a5:d8:f6:
c1:51:5a:12:9f:3c:b3:42:a0:17:f7:d5:73:bc:2f:
17:4a:27:23:c5:b0:e3:f6:f5:0f:ea:fa:53:ce:e5:
be:ba:6c:66:8a:2e:64:58:50:e0:63:09:5a:f8:6c:
af:77:d1:75:43:67:5f:69:c7:07:eb:93:c8:ff:d5:
1c:88:59:64:c9:b9:f2:e7:f7:2a:71:99:b8:b1:4f:
e5:4a:3a:65:20:b6:3b:b4:c5:a8:4c:97:9a:0a:48:
d7:4f:b9:bf:df:13:f2:9f:48:2a:15:bd:14:c3:c3:
36:b8:91:29:a7:2c:7b:d3:98:db:0b:fb:c4:42:ec:
1d:e5:a9:00:63:59:f6:14:cc:41:4e:4e:bc:07:a9:
ce:c0:fa:65:03:90:15:72:84:67:00:90:a4:09:e4:
8e:d6:2c:5c:aa:b3:c6:36:25:58:76:76:ad:fb:75:
b0:3f:6b:b0:ff:e5:e0:9e:6d:a8:46:be:27:3a:cc:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:92:DF:18:40:5D:44:BC:12:C3:9B:7C:80:42:D9:1A:57:51:AE
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:67:de:12:ec:bc:cd:cd:b3:06:29:b7:74:7f:db:6e:6f:13:
7b:18:4b:1d:17:f9:e8:05:7e:66:bb:81:67:45:1b:1f:ca:dd:
7b:c4:c1:ff:ed:80:9b:68:92:36:13:e4:0c:e8:19:ea:0d:86:
7b:5d:8d:7a:ba:56:c4:18:3c:a3:2f:4c:fa:57:44:62:13:63:
79:64:73:0b:4d:15:dd:a9:5d:00:df:41:ff:d6:4a:70:b5:78:
70:7b:68:af:48:c8:3f:01:58:cc:dd:cd:b7:39:61:b2:4b:fb:
a3:28:c2:f4:4f:63:5c:9a:89:9f:34:5e:e3:33:1c:fa:39:5d:
00:41:e6:e5:7d:1a:40:39:79:ac:ea:06:47:bc:21:13:4a:5b:
bf:55:d4:1a:bb:8a:f0:8f:4b:3c:5a:c6:c7:f3:e6:28:61:a5:
62:a3:04:16:68:da:df:eb:65:89:d0:63:ef:71:6c:9b:0a:0a:
30:b8:57:ab:fb:1f:bd:51:ea:ac:12:f6:dd:4d:e0:f2:e6:9d:
ec:fe:fc:b5:ab:ba:e3:8d:6a:bd:c0:e3:de:c3:d2:74:2a:75:
35:97:7f:67:e7:8e:24:e6:62:c6:ed:58:17:72:7b:02:ff:fd:
3a:a7:16:1d:a4:09:a9:e3:d9:ae:25:41:04:49:ea:61:39:5f:
59:c7:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:23 2026 by rpki-client