Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: I7AHzhUHB3/PkaJP4O+xPL0auZuKKWFghqRnvgWcX28=
Subject key identifier: 7F:9B:59:10:A7:0C:6F:9E:FA:7A:62:A8:32:93:D8:83:BC:DB:0E:47
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 019D38D32C3AEFEA2AA664339C360F63783C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: 3zZKrK0PoNiif+lrpaBl28ucbvRHtWTFQKAy28iPYgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2c:3a:ef:ea:2a:a6:64:33:9c:36:0f:63:78:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=7f9b5910a70c6f9efa7a62a83293d883bcdb0e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:0c:f1:a7:91:45:79:66:cc:db:1a:f3:6e:
29:b0:90:6d:d7:ae:66:e5:ce:27:fe:33:3a:03:ae:
db:27:b0:94:2e:81:3e:55:ce:d1:d9:8e:9a:16:65:
4e:6e:4c:3c:0a:33:09:4a:6c:21:4e:c3:50:01:3f:
21:12:c4:2f:4b:62:52:0f:10:18:8c:82:64:b1:86:
92:55:b2:44:2f:24:75:aa:ef:ac:cb:1b:de:79:b2:
18:e0:e3:12:7b:d0:a4:4e:89:50:c2:55:50:a0:4e:
e5:20:71:79:83:dd:d7:1d:3c:f4:0e:7f:76:ed:ad:
c4:0b:bc:3a:6c:ed:59:c9:34:e9:ad:d7:40:38:2d:
44:1b:51:5b:01:12:0f:3f:38:3c:c4:b3:3d:1f:91:
12:09:47:0c:ef:e5:b6:85:7e:bd:48:fd:3b:9c:6b:
ba:08:92:21:e7:85:f8:86:53:66:e6:a5:88:fc:4f:
6b:67:0b:80:71:6d:70:c6:e9:e2:16:2c:aa:e4:82:
c3:ea:62:7e:62:0d:dd:b8:e1:87:fb:5c:5d:68:59:
df:4c:30:40:d1:43:2a:3e:11:c9:be:e2:ba:2b:15:
43:d2:73:c1:e2:ac:46:5b:36:81:5e:71:8f:d7:ae:
ec:62:5a:58:86:1e:b1:a4:78:f3:cc:d2:37:f3:59:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9B:59:10:A7:0C:6F:9E:FA:7A:62:A8:32:93:D8:83:BC:DB:0E:47
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b3:7c:64:66:bd:05:d6:63:81:52:87:5d:3d:de:3f:85:bc:
d6:3e:18:d3:f8:9d:8a:a0:b0:3f:6f:dd:7d:fd:2d:65:e5:96:
51:1d:ef:71:1d:07:1a:a0:8d:2a:56:b2:df:ea:04:11:45:ef:
fe:40:3a:c6:b0:47:eb:61:fb:d9:2f:ec:15:c4:6e:88:bf:3f:
cb:ed:e9:77:00:35:11:b3:52:b6:57:ff:67:2a:b5:8f:c5:52:
d1:e0:39:ce:5b:26:15:27:89:32:67:7e:68:1d:87:7b:1d:58:
92:77:02:a6:67:62:8f:a1:b7:9a:dd:ef:51:c7:50:9b:42:02:
0f:81:a9:85:33:77:16:65:1c:52:c6:0e:2f:1e:e8:c0:60:8a:
18:f3:8e:0f:0c:53:0d:77:35:87:d2:75:e3:8a:39:7e:bd:f3:
9a:d7:16:e0:59:29:5c:c4:3a:0c:a4:3f:e3:a1:66:b2:4f:f7:
55:d7:f2:f2:11:36:2b:be:1e:6e:c5:c5:93:42:7a:a4:20:93:
2b:b0:6d:90:7a:d6:f2:2a:b8:74:e5:6b:dd:43:9d:74:76:2f:
a0:8f:0d:4f:b1:8d:df:52:23:54:b8:34:87:07:34:bb:75:90:
68:3e:0b:90:3f:ef:62:2a:b4:7a:f8:6f:8e:66:2f:92:cb:44:
f7:69:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client