Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: NQ2aga20Uq+yuxNnITMf0ci1mvE4dMaYSRBduu7Ho+U=
Subject key identifier: BB:2A:C0:AC:42:F9:4F:45:DC:A4:B4:01:34:DB:39:72:7C:EE:B6:EA
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 019D382E002D8C873A479F5B5B6073A32650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 076D
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: NtljOaIL1JwpiXLySyyvx4z_K-w.roa (hash: bTyr7ks2Z5N+mkb97LsrPJ8BXJjMNHN+ldTmfDHr8Xw=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: AtHVsAItouY46I9PVylnF8aI0c01kbkp1kVZYsKHREg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:00:2d:8c:87:3a:47:9f:5b:5b:60:73:a3:26:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=bb2ac0ac42f94f45dca4b40134db39727ceeb6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:04:13:42:4c:c8:6b:e6:66:4a:03:b6:c5:
f6:84:58:7a:4e:af:60:d3:15:79:9c:d4:70:d0:87:
92:ef:0a:f9:4b:0c:4b:06:20:1e:d5:58:f5:67:b5:
6f:75:d9:b4:64:19:f6:39:08:99:cb:24:95:8a:ce:
2e:61:a5:2d:fc:4d:e2:ff:0a:60:ea:1f:cd:02:26:
a9:bd:f2:d2:b7:f5:55:2b:8c:66:b0:05:35:c9:a0:
9f:45:fc:59:06:dd:6b:79:c3:f1:96:fa:7d:d8:c6:
75:4c:4a:c9:a2:9a:d2:91:fc:92:e8:4d:68:78:81:
36:5c:bf:4f:7a:32:26:97:31:df:35:c5:2f:c7:15:
4b:59:06:67:e1:f9:23:db:22:3a:57:d0:29:99:9a:
a2:d2:eb:42:4c:66:50:05:03:3e:dd:b7:b6:cc:20:
80:b8:cb:05:ee:b7:ac:a6:b3:d3:bb:7b:2c:61:90:
35:10:6a:0b:df:67:de:a5:30:48:6a:5c:15:cc:42:
52:a0:c4:4c:e4:5b:ff:d8:a2:a7:ce:db:d1:5d:87:
a7:66:72:d9:10:26:23:b3:68:75:ae:d8:7a:92:99:
93:ea:f2:34:fc:59:a3:2c:61:40:97:b3:26:bf:44:
01:6c:11:c7:9d:af:c9:ad:2c:93:10:e8:05:7d:e2:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:C0:AC:42:F9:4F:45:DC:A4:B4:01:34:DB:39:72:7C:EE:B6:EA
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:be:94:3c:c9:7b:f8:ed:e8:60:91:5d:1f:db:97:c2:26:50:
d6:47:ab:52:0c:d3:8b:b5:64:28:c3:63:e7:fc:e9:28:a3:97:
4f:c7:81:24:73:56:64:7b:a7:11:e1:bc:41:42:50:65:21:cd:
5d:38:87:b3:7b:f2:4f:97:46:a0:3e:0c:8e:59:47:98:fb:a9:
9d:bb:a5:9f:d7:4f:46:35:f9:d2:65:57:66:69:d8:f6:1a:be:
4b:aa:d9:60:f5:f1:7c:20:28:4c:fa:fb:c0:69:25:24:96:1d:
ff:70:2d:f3:4c:f5:7b:e5:fb:18:fd:80:73:ca:e8:7d:38:88:
d8:f1:7e:4e:69:3a:56:c4:aa:a3:79:33:d9:89:8b:de:d8:92:
f2:79:ac:f9:85:84:1b:b3:9e:46:c9:2b:5a:17:4e:49:34:fc:
8f:5a:d6:82:4f:95:5c:6f:4d:d4:ff:5d:04:01:09:c7:83:54:
07:07:65:cb:10:a2:ff:70:e6:b1:0b:85:2e:55:ab:aa:23:c9:
63:32:12:15:ae:b2:7c:50:a4:10:0d:00:57:22:c7:47:3e:42:
5e:60:91:55:55:85:76:18:34:6e:d3:77:2d:6c:93:ff:ed:31:
04:f6:e7:fc:8c:d6:88:38:47:ea:86:e4:2a:71:ed:f8:c1:5d:
1b:53:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:13 2026 by rpki-client