Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: /lAKAiY9I+rkjgJ4PRHMr0+O84PWpaMoj6PkHtpsPlw=
Subject key identifier: DE:70:3B:A0:D0:3A:21:1F:D3:26:6E:E6:30:CF:76:71:30:C2:8C:45
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 019D38D2B169BA61C4B4E84F53FC5153245D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: T_qkUaWs2ghdwUxzU0iuiusb7H8.roa (hash: bDaxnxgxc6VXP3Xzs/otfCvYZy7RhWEhtlo/OlQbb/g=)
2: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: Y3sdcnKFwryrS9U7sHkIcOo9eYIRAsEKDqe7vfDR7iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b1:69:ba:61:c4:b4:e8:4f:53:fc:51:53:24:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=de703ba0d03a211fd3266ee630cf767130c28c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:1e:28:db:ba:02:c0:c5:81:3a:5e:87:dd:
5a:43:de:dc:2a:42:d4:09:17:74:2a:8b:f7:76:22:
87:76:ae:ba:a9:46:93:ad:1f:18:fb:7b:7d:83:9c:
9b:d7:ba:67:95:e0:8b:b3:56:4e:e9:29:d1:1c:f2:
e9:5f:7c:7e:dc:0f:c4:50:4a:14:4b:be:1b:78:67:
06:f0:fc:91:e6:d6:94:58:40:25:5c:f9:c2:98:b1:
95:97:a7:29:b7:8d:76:56:31:ac:cb:5f:97:4f:a6:
66:80:cf:56:7e:67:72:b8:e6:27:7d:5c:6d:fc:13:
40:99:80:91:ad:cf:4c:7b:eb:a5:74:0b:fe:e9:66:
37:0b:fd:b7:d8:ab:de:8d:59:c8:95:32:e4:ea:45:
3d:52:1e:02:63:bd:f0:21:c5:32:c7:11:b4:63:25:
b1:1e:a0:93:6c:98:86:45:dc:cb:ff:1a:c5:f2:2d:
71:de:de:7d:6a:71:dc:7b:72:47:b0:e9:2a:0b:1b:
f9:3b:02:66:08:7a:1b:94:98:69:de:15:cc:e9:f3:
34:f9:3f:e5:96:7e:49:17:f0:15:b9:26:4a:42:cf:
24:ea:18:e6:a1:2b:9f:79:16:86:ea:f0:04:ca:6c:
5d:4c:58:72:3a:7f:a3:7b:00:a7:70:7e:d4:d7:42:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:3B:A0:D0:3A:21:1F:D3:26:6E:E6:30:CF:76:71:30:C2:8C:45
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b6:f4:37:58:6f:1c:a3:f0:3a:13:89:26:2b:06:a5:ed:14:
50:a5:2b:32:59:63:f7:ac:3e:7b:c9:ca:ae:57:02:e9:b0:7a:
81:b3:ef:47:eb:d3:12:2c:12:fe:d5:66:1b:8c:22:b5:81:89:
49:b5:75:fe:25:9c:af:8c:35:f9:9b:d6:77:0b:d9:d4:1e:48:
e7:23:6f:58:1a:fb:1f:4e:c7:3e:36:ce:b1:ca:59:ee:c7:ab:
10:80:fb:88:ea:30:e9:4d:eb:19:12:40:54:69:bf:65:b1:7d:
c6:56:d1:36:5e:85:3e:64:42:34:38:24:6e:d4:f4:c0:25:bb:
5b:f5:8a:9b:6f:58:48:24:ce:0d:7b:5b:1c:06:cd:63:90:24:
2d:36:ec:6f:df:3f:2f:c8:80:05:41:fc:b8:4b:b3:9c:ae:9e:
25:55:42:5a:b9:61:9c:6c:54:f6:03:1f:c4:2a:0e:9a:a4:28:
0e:b4:b9:ce:8f:90:dc:5e:a2:4d:cb:1b:d6:a6:09:77:8b:33:
14:c2:38:37:6f:c3:ef:d6:8b:a4:ac:62:32:db:86:06:95:d6:
4d:b8:f4:f7:e2:1c:ff:26:43:23:c0:39:d0:b4:7b:08:00:8b:
09:b0:c2:04:ad:00:97:48:89:87:87:62:22:20:75:0f:69:d3:
6b:dd:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:14 2026 by rpki-client