Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: mB0xqqgkezZVFsS8lx+TJ0Pif5vhffNCjsZgpGShop8=
Subject key identifier: 7E:9C:45:35:C0:95:C6:07:31:DF:26:D3:E5:A3:5B:8F:CB:8D:81:89
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019D371BD1A486ADA1370797639345335EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 09EE
Signing time: Sun 29 Mar 2026 01:01:03 +0000
Manifest this update: Sun 29 Mar 2026 01:01:03 +0000
Manifest next update: Mon 30 Mar 2026 01:01:03 +0000
Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: g2U7k4dEUSXkQLcQcTSOTnkxM1/iKMAkhAt1zZFW2EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d1:a4:86:ad:a1:37:07:97:63:93:45:33:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Mar 29 01:01:03 2026 GMT
Not After : Mar 30 01:01:03 2026 GMT
Subject: CN=7e9c4535c095c60731df26d3e5a35b8fcb8d8189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:b8:90:0a:fd:c5:88:e1:6d:34:40:c2:0c:
9b:a8:df:73:d5:05:2c:e0:81:d4:2b:8c:44:19:c5:
00:8f:5e:79:ef:2e:91:99:20:12:fe:bf:2c:08:f6:
6b:8f:9d:88:33:b9:b9:d8:cf:07:63:83:c8:56:d1:
f2:60:f0:9f:1d:49:cb:17:fc:f0:d4:b6:2c:a4:7e:
34:cf:17:50:fc:ab:67:fd:a6:b6:1b:d4:ed:92:7a:
14:3e:15:bd:d0:1d:3d:e5:52:58:df:90:b5:75:fb:
c8:13:3e:cf:a1:9a:38:97:91:94:c1:59:d7:ca:09:
07:84:19:79:a9:81:0e:45:5a:b7:2a:86:2e:20:63:
9f:e0:19:d5:09:d9:2a:dc:c9:69:88:ed:6e:3b:e0:
cd:0d:b5:f4:69:9e:1c:2a:4a:1d:ef:c5:54:33:09:
94:76:67:fd:f4:68:12:4a:d2:99:ff:ba:26:46:3d:
06:2d:df:08:a3:6b:7d:d6:08:7a:34:ab:1e:05:d4:
f4:38:63:67:4d:1c:d2:ca:c7:7a:09:9d:f3:56:6a:
45:d7:e2:1e:95:99:32:d6:33:ef:a0:bf:27:59:76:
f0:b0:ea:c7:99:7f:8f:99:2e:ba:06:06:70:74:eb:
e2:6f:d9:b7:0a:d3:d9:24:46:23:9b:cf:1e:60:b8:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:45:35:C0:95:C6:07:31:DF:26:D3:E5:A3:5B:8F:CB:8D:81:89
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:31:c4:40:44:7d:e1:a7:4c:74:fb:d2:dd:ff:33:a2:f6:57:
e6:b7:fd:78:3f:40:07:16:c7:77:73:34:23:e6:ba:4c:9b:10:
ae:14:ca:5f:4f:ba:b1:44:0a:c2:4d:bf:26:16:8a:81:42:8c:
56:5f:33:e3:c5:b9:5a:cf:01:36:c0:04:1b:ee:73:d7:b5:e3:
2e:34:38:41:f1:90:fd:a6:c4:0b:a0:09:0c:dc:3c:43:7f:ec:
d7:c8:dc:03:83:ce:20:f7:77:cf:21:b2:88:5d:3c:41:45:71:
95:85:3a:19:4b:93:1f:ec:a9:da:f8:b7:b7:31:cf:09:63:0b:
88:92:78:86:4e:d9:2f:6b:50:48:23:11:07:72:4a:e8:bc:62:
48:d9:0e:02:a5:8d:9f:8c:eb:7e:9a:46:82:df:a2:e2:c3:76:
67:77:be:d3:36:94:16:53:5b:30:b8:e0:9e:dd:25:4f:4b:6b:
3d:bf:af:72:eb:a1:21:7e:77:f9:06:10:44:a1:c3:c2:72:c3:
06:90:cc:fa:2d:d9:16:2b:73:50:de:bf:2d:f4:ec:56:a8:54:
d6:54:f4:d9:51:ae:ae:64:aa:b8:a2:d7:1a:8f:a9:e3:1a:5f:
30:aa:62:98:58:3c:46:bf:6a:1d:5d:30:b7:98:c0:2f:bf:1a:
5e:19:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:10 2026 by rpki-client