Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: 6itYinTTPAXcwPwQCy1c3XZHLVjpuRrfn6ktvZEVK6w=
Subject key identifier: 5D:BE:94:45:0F:DB:16:FA:4F:3D:C3:1B:16:C9:1D:F4:2E:35:48:A7
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 019CE71248C6FC8BCA35F3265D8B06680412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 12:01:00 +0000
Manifest this update: Fri 13 Mar 2026 12:01:00 +0000
Manifest next update: Sat 14 Mar 2026 12:01:00 +0000
Files and hashes: 1: e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (hash: gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: N3g4TPmxubTSh67c3kPXjnEHy6xg830Lx9hcMCnlVNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:48:c6:fc:8b:ca:35:f3:26:5d:8b:06:68:04:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Mar 13 12:01:00 2026 GMT
Not After : Mar 14 12:01:00 2026 GMT
Subject: CN=5dbe94450fdb16fa4f3dc31b16c91df42e3548a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:4a:f2:b8:2c:a4:0b:a1:18:0b:9c:3f:de:
04:c0:0a:82:86:14:42:25:af:62:05:95:6c:b2:ad:
8f:e2:cc:f3:48:1c:ee:36:6f:7a:a2:fc:de:4e:56:
5f:f8:4b:b4:f5:80:ee:2e:c0:f6:8c:b2:36:c0:99:
11:94:ec:f7:7b:6a:a7:72:79:57:db:6a:4e:92:db:
21:dd:b3:73:b5:92:c7:44:02:3e:06:45:f2:3e:60:
13:be:0c:f7:78:3a:85:2b:db:0a:c8:59:5c:75:24:
eb:ee:9b:b1:57:dc:25:25:f6:d2:dc:5c:98:75:93:
40:a4:3b:6d:6a:43:04:80:81:e5:37:81:61:e2:70:
21:68:9d:22:15:77:a6:d7:e6:5a:15:bb:6f:b4:7e:
50:e3:7e:b4:72:df:81:05:d8:d4:9d:9b:9d:1f:5a:
e1:17:41:3d:14:f3:cf:25:cf:be:a4:30:95:e9:16:
e7:4a:c8:cc:b3:bf:2e:c7:e9:69:98:72:32:c0:22:
0a:b2:87:10:de:28:f2:89:fc:dc:47:38:a6:3b:a0:
45:96:aa:5a:28:32:12:fa:ae:58:42:f7:fd:b8:10:
dd:bf:01:1b:49:0e:47:3e:69:5c:df:df:a9:c1:67:
f1:ed:43:9a:2e:1e:e8:c7:8f:32:32:54:c8:70:92:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:94:45:0F:DB:16:FA:4F:3D:C3:1B:16:C9:1D:F4:2E:35:48:A7
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:f8:34:7a:94:8a:9a:bf:a5:c3:e0:86:7d:7b:e2:cc:ab:
80:df:55:8d:a5:e1:a0:ef:21:f8:9a:c3:a7:3f:9e:d6:d1:67:
86:56:ae:cf:59:ea:ac:70:46:20:1f:fe:63:44:db:e9:4b:6f:
97:02:f1:dd:25:de:ae:7b:25:94:23:9a:00:26:e8:ee:6b:89:
0e:b0:60:b8:a6:27:a0:8a:59:5d:75:48:f2:ef:1a:9a:e5:ca:
a6:e5:b2:29:74:c2:f1:a5:8e:d2:fb:59:e3:d7:19:43:13:8f:
4a:11:a7:a3:25:ff:4b:2f:fa:a1:6d:de:a6:89:da:3d:e3:80:
61:ae:e9:d3:0c:de:61:1e:37:7d:81:47:70:bd:92:d1:87:08:
9c:ba:e8:3f:23:25:85:88:a9:f2:b1:4a:53:74:9d:ad:81:04:
25:f8:aa:e1:34:0e:1e:a9:9f:59:ac:5a:e3:39:2c:c1:9b:92:
07:9d:88:f0:2f:f2:fb:d0:de:84:e1:fe:6b:12:81:d4:07:6b:
49:d5:44:c1:b5:b9:97:12:3a:35:b1:d5:31:96:8b:22:13:3b:
64:a5:b2:9c:89:18:4e:4b:64:26:cd:79:76:fa:46:6b:21:a5:
dc:29:09:36:6c:2b:b3:22:86:13:0a:6f:9d:1a:7e:4c:c4:4b:
fc:bb:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:26 2026 by rpki-client