Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: OrhpwORfOVtb+wbeFBgTvBlzWo1Eiz6//jtjJJF3Nrc=
Subject key identifier: 30:9A:17:0B:46:BF:64:30:0F:FC:F9:FC:44:A8:0C:4A:D6:8C:F8:C6
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019DCFE3A55A416CB34C561C9D1A58493F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 07EF
Signing time: Mon 27 Apr 2026 17:01:35 +0000
Manifest this update: Mon 27 Apr 2026 17:01:35 +0000
Manifest next update: Tue 28 Apr 2026 17:01:35 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: n4aQDajOUdnlF7bHG/gUMVmNSgMjc+ok5vLVBGBr/4o=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:a5:5a:41:6c:b3:4c:56:1c:9d:1a:58:49:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Apr 27 17:01:35 2026 GMT
Not After : Apr 28 17:01:35 2026 GMT
Subject: CN=309a170b46bf64300ffcf9fc44a80c4ad68cf8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:ad:91:20:b0:cd:3a:40:1b:bf:80:dc:ad:
d4:e7:ad:e7:fe:6b:7f:c3:9b:b8:34:5f:6f:74:12:
30:30:d9:5b:a8:46:95:59:1a:6a:db:bd:fa:fa:95:
56:95:de:11:4b:97:e5:cf:14:10:70:c4:4b:f9:5a:
84:be:d9:2a:78:fb:54:1f:59:28:5a:de:ea:98:fa:
61:ae:ec:d8:0f:ec:63:34:3c:db:52:64:14:e8:aa:
f1:ed:d3:91:77:67:33:f8:f0:41:c8:e1:8a:df:f5:
ea:d7:b7:b0:10:ff:d8:6d:99:cf:ca:85:2b:65:ac:
34:22:1b:82:6a:83:63:e6:c3:17:64:ec:57:9e:c8:
a6:c3:2f:15:f8:2f:bc:24:b6:f5:8b:13:57:82:a9:
78:07:d0:8c:e1:c9:18:14:8e:cb:e9:d1:a6:56:4a:
37:c6:a1:85:a3:7c:db:aa:5a:10:da:78:bd:19:bb:
38:36:13:15:1c:8a:fe:57:f9:3a:8d:cc:4b:e4:9e:
76:bb:9a:3f:72:a5:bf:d5:a3:7f:b1:1e:1b:73:ed:
33:d9:11:ec:61:50:68:de:61:20:68:d4:4c:0b:c1:
5f:62:2f:62:ad:db:5a:43:06:b7:80:e7:2e:92:a8:
9d:dc:ba:07:3a:64:bb:1c:49:a4:2e:84:fe:c0:ed:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:17:0B:46:BF:64:30:0F:FC:F9:FC:44:A8:0C:4A:D6:8C:F8:C6
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a1:88:9e:33:ea:98:b2:2d:72:20:21:bd:e1:34:5e:ab:68:
fe:bb:30:19:ba:28:80:70:f9:ef:f6:7a:62:a8:1f:29:95:3f:
74:8a:7b:76:e9:23:dc:df:13:0e:dc:02:6d:91:5f:15:ea:6a:
93:3b:57:c5:d4:77:4e:18:d1:ac:6b:4a:62:ed:29:1a:16:f7:
c9:47:c6:84:81:6a:a6:a5:21:ce:dc:9a:23:ad:03:f0:4d:39:
dc:af:53:4c:b0:17:29:01:20:a1:3f:36:78:cf:52:ae:ac:19:
ba:1b:7c:66:5b:08:8c:86:ad:40:a5:87:bc:f3:f7:50:05:da:
77:fb:53:38:c9:20:db:5d:3d:54:e6:7c:5a:4e:c4:03:ab:b5:
98:2c:66:f9:bb:b9:1a:fc:60:7f:2d:3a:12:7e:c8:35:b1:67:
a1:f6:59:d9:4f:c8:09:89:8b:1a:66:46:a2:f2:db:76:1d:d1:
8b:0a:18:bf:8b:2f:8d:65:50:4e:e2:2a:01:97:3e:cf:90:a1:
02:b5:d2:c0:5c:94:b9:2a:27:8f:af:f3:90:5e:99:a9:5b:c9:
77:a2:d0:35:09:1b:f7:e8:42:cc:4a:b2:27:db:03:b2:e9:c8:
47:4f:2e:b9:a4:80:67:cc:70:3f:37:2b:13:cb:44:d8:e2:f8:
60:51:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:57 2026 by rpki-client