Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: HBJlFNW6ZBOIl9404X2CJN9Bt+VgRRCccrJN+44DVVA=
Subject key identifier: 1E:0F:0B:82:34:11:8B:73:33:E5:FD:21:D6:FC:77:E9:AD:32:BB:85
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 019D394145355D223E4649CD4FCB6E3F3CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 11:01:12 +0000
Manifest this update: Sun 29 Mar 2026 11:01:12 +0000
Manifest next update: Mon 30 Mar 2026 11:01:12 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: fg6alJDMPiw7Ea5our74Xdf7YZigMwKzvbGqvwMLvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:45:35:5d:22:3e:46:49:cd:4f:cb:6e:3f:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Mar 29 11:01:12 2026 GMT
Not After : Mar 30 11:01:12 2026 GMT
Subject: CN=1e0f0b8234118b7333e5fd21d6fc77e9ad32bb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:59:c2:75:d2:15:56:ca:76:17:a4:da:a6:
e1:20:1c:43:05:31:e3:3f:40:c9:d9:50:fe:7c:0a:
ac:8c:41:32:d2:d7:29:bf:da:f9:f5:1d:96:95:90:
43:58:6b:2f:d3:10:3f:f9:12:96:66:c3:db:4f:7b:
19:ff:45:92:6b:65:04:f5:ab:03:c8:cb:ec:e8:d0:
b7:25:32:02:12:2c:73:56:93:20:31:11:05:ac:02:
cb:73:d3:8b:77:a6:57:f1:1f:b6:9e:24:df:5f:0a:
95:96:12:32:1b:20:73:d6:28:34:63:a3:bc:25:d9:
b4:33:0b:17:ab:dc:62:a8:30:87:d3:2a:72:b4:10:
03:3b:98:83:d4:27:31:9e:7a:60:43:c3:83:18:61:
24:cd:cb:18:77:4e:2e:84:13:0b:6f:b7:c8:36:bd:
f0:9e:16:64:27:2c:7c:fc:de:f9:a6:c4:de:90:b4:
52:73:d2:5c:2f:78:0d:41:56:d3:84:84:87:02:74:
af:69:d9:21:03:5c:16:c4:80:6f:31:c7:77:df:68:
02:1f:8c:ec:98:4a:15:a8:ee:c1:98:7b:0c:a7:0d:
1c:d3:21:c0:b4:05:23:a3:47:f6:53:c2:a1:a7:93:
34:8d:9f:74:4f:e1:b8:29:25:ee:52:a2:9a:00:5f:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0F:0B:82:34:11:8B:73:33:E5:FD:21:D6:FC:77:E9:AD:32:BB:85
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d7:27:91:0c:c0:00:c5:14:dd:fc:40:17:43:8d:e8:f9:7a:
8a:66:65:b4:c2:b0:17:16:d3:34:41:34:40:4e:28:5a:ab:ec:
c7:da:21:d9:e6:02:f7:75:09:e8:16:36:75:51:62:2c:35:5b:
0a:4d:cc:6e:fa:4c:13:8b:9e:07:31:44:9c:fd:d3:6e:d6:62:
68:19:d6:40:71:8e:4f:15:34:7a:2e:d1:bc:95:a6:83:f1:b3:
e9:66:ad:91:7b:6a:3a:15:4a:17:57:eb:39:dc:1e:e6:01:bc:
35:19:a9:0a:81:4e:bf:2d:2d:d9:50:f1:aa:85:d1:56:7c:45:
61:bd:b1:07:24:8b:38:d6:43:01:7a:02:86:72:b9:f8:d6:be:
12:e6:d9:43:38:6d:4a:42:55:e6:f6:12:01:66:fa:cd:f8:90:
1d:e9:4e:ad:0e:c3:91:e6:4a:bd:ad:43:f3:1a:ac:65:db:ea:
b6:95:ae:b5:8b:97:7b:15:07:09:cc:e9:44:a7:93:68:e1:2c:
06:ca:9b:ff:3e:dc:a7:96:21:c2:98:55:01:6f:92:ac:8e:e5:
39:9c:2b:ea:68:3a:e9:1c:fa:7e:1c:3e:f6:f8:e8:71:19:19:
c8:87:7a:10:b1:13:11:b1:27:90:b5:32:8b:b9:53:d5:4c:3a:
91:53:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:35 2026 by rpki-client