Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: 3J79XNcBVP+S2KQASe+AMbUY60fxtMR9GwH1afIsses=
Subject key identifier: DD:20:C3:BA:53:4F:07:7D:AD:7C:E2:33:46:48:AC:B1:01:28:91:18
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 019DCE638E0261E59A139FE96CF6F65F09DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0FBD
Signing time: Mon 27 Apr 2026 10:02:03 +0000
Manifest this update: Mon 27 Apr 2026 10:02:03 +0000
Manifest next update: Tue 28 Apr 2026 10:02:03 +0000
Files and hashes: 1: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (hash: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: 9EVHPWAs/6jw9U0uqr6nJJdULDL2NtencdMlUmNOVcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:8e:02:61:e5:9a:13:9f:e9:6c:f6:f6:5f:09:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Apr 27 10:02:03 2026 GMT
Not After : Apr 28 10:02:03 2026 GMT
Subject: CN=dd20c3ba534f077dad7ce2334648acb101289118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:0b:5d:1e:c5:10:74:50:29:6e:b5:0a:94:
41:72:8c:a1:b7:ef:81:0a:9e:73:96:5a:61:b8:ab:
60:8c:33:e3:94:e2:49:18:b1:c8:f9:54:c6:a2:fe:
68:0c:87:72:b9:73:f6:e3:5e:a9:07:f1:12:6a:ce:
d7:75:cf:1b:af:c8:f5:63:20:29:51:f8:03:d9:0b:
4f:e2:ad:f2:ca:80:22:78:2f:49:92:7d:47:45:fb:
62:8e:80:39:29:99:2a:7c:de:5d:c8:fb:fe:8b:40:
b5:c7:ca:3d:e1:55:9d:5f:10:c4:cb:48:8d:d6:59:
ad:e3:58:f1:51:5c:15:56:b6:2b:61:d7:f5:a2:74:
4e:71:95:db:3a:b4:17:fa:31:4f:63:9b:a0:fb:af:
55:03:17:fd:92:68:4b:28:71:e7:43:89:aa:59:a4:
9b:c8:13:95:c5:d3:97:1c:ff:5d:35:4c:d5:5f:df:
34:4f:01:0e:12:cd:cc:21:c8:e6:a4:f1:24:8b:14:
ff:fa:61:d4:93:74:a8:51:93:1c:97:19:49:58:9e:
99:3c:82:a6:ce:b7:73:d8:4d:89:45:10:c9:65:e8:
cd:4f:14:c0:db:4d:93:16:26:be:19:3f:7b:15:24:
48:87:f8:a5:4d:1f:25:f1:38:44:bb:7a:85:81:33:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:C3:BA:53:4F:07:7D:AD:7C:E2:33:46:48:AC:B1:01:28:91:18
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:83:5b:88:3b:b2:70:a5:61:50:7a:a0:e9:b6:d3:06:1d:b4:
7b:a0:1b:41:47:ab:14:aa:2e:a9:e2:ad:6c:d8:6e:de:07:7d:
c6:71:5d:ca:4b:f1:ae:1a:b5:e1:eb:5c:8e:48:bb:47:10:14:
2d:46:a8:e3:40:84:24:2e:5c:d3:a8:02:14:ae:1b:b9:28:81:
69:a9:45:3e:9c:62:98:29:59:9e:2e:38:66:15:8c:1f:32:16:
46:d9:6f:65:33:ef:d7:28:d0:25:62:23:03:67:ce:05:16:12:
1a:ff:53:47:88:68:ec:21:eb:09:b0:96:c3:cb:5e:48:33:7e:
25:54:0f:69:3d:07:26:46:c3:cd:d8:78:73:1e:b6:44:af:7a:
54:e1:c0:6d:7a:bb:78:17:98:13:a8:68:9a:71:60:98:c7:c0:
e1:b0:d7:a8:85:bd:36:61:f5:65:95:ab:ec:6d:8a:6a:5b:13:
ca:28:dc:06:04:cd:b5:06:47:13:c2:ca:31:1a:24:06:4b:a7:
79:53:04:dd:0a:7e:92:27:0d:e9:e9:97:bd:d5:49:35:47:e5:
3a:c3:cc:69:a3:be:62:45:ca:3e:0d:39:ab:2f:7a:3e:b4:a4:
c3:82:26:8b:42:fd:bd:ef:2a:0d:f2:5f:3b:c8:78:a2:17:6f:
2f:7f:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:24 2026 by rpki-client