Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: viIo4FIMTBMR6CMRH2qRKnFR8RMPJkVNwOAbo5f2kgw=
Subject key identifier: D1:DC:2A:ED:E3:0A:A4:02:BD:05:E6:CB:55:81:AC:0D:83:5D:1B:55
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 019D38D378DF1B5298BFFE09B62CBDE52BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0CCD
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: JLHc8-P_7_DUKLbSOYfj3hNYY4o.roa (hash: WG0boTSyS99K3270L73wT11CILS0oIYBWT3s8ssKoJ0=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: 3XvzoGTaLQ5atK+CA+22JuT+wjr2kNBVfYqEjEj/7nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:78:df:1b:52:98:bf:fe:09:b6:2c:bd:e5:2b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=d1dc2aede30aa402bd05e6cb5581ac0d835d1b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:9e:cf:b6:38:d4:1d:1d:cf:a8:7f:76:1c:
e2:62:2d:b6:5a:4d:f6:1a:b7:63:9f:b0:c2:60:c6:
c1:e6:88:fa:28:30:88:02:ac:0c:e5:73:7a:a4:62:
6e:59:c3:be:ea:be:80:18:d4:33:bc:4d:df:94:4f:
eb:07:c5:2a:32:a8:ad:e1:e4:f6:97:d0:6c:6a:e9:
d2:96:13:d5:3f:d7:6a:9c:24:3e:13:e0:45:ad:80:
cd:5d:12:15:b5:4d:5f:b8:87:7b:80:eb:12:5e:2f:
27:28:d2:ed:65:a9:d4:de:04:1d:68:38:53:3e:60:
42:be:95:0c:8c:ef:7c:e4:57:b1:65:5d:82:82:dd:
bc:e7:39:7b:aa:7e:89:31:54:c6:5a:82:62:7f:5a:
13:9b:b5:42:9f:76:27:ad:ea:86:a2:d6:c4:d6:cf:
05:37:9b:54:81:cb:7e:79:74:b1:9b:3c:91:c6:db:
02:70:f0:76:63:9c:bf:e9:aa:d8:7d:8e:eb:e6:50:
06:93:53:60:91:fb:30:ac:dd:b3:20:f2:5e:33:c4:
51:e7:d8:c5:1a:87:51:fb:29:e4:39:e1:af:68:b2:
64:83:7c:3e:6f:68:39:47:1d:62:6c:8e:7f:af:3a:
4f:2d:bc:6c:85:2e:5f:04:12:4d:33:b6:54:4e:c1:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:2A:ED:E3:0A:A4:02:BD:05:E6:CB:55:81:AC:0D:83:5D:1B:55
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:30:ee:ac:53:8b:e9:85:a2:14:7e:f9:64:1a:91:dd:d8:1d:
f0:01:eb:33:01:ea:5c:32:81:a3:cb:a7:2c:ec:fc:63:e2:af:
d6:01:e5:44:0a:70:2d:eb:9d:33:f8:3c:e0:7c:8c:2e:96:d1:
ab:9a:00:0e:80:6c:30:f0:00:ec:50:f9:7e:86:48:b7:1c:39:
91:bf:28:42:aa:20:fa:96:ae:01:91:36:c9:3a:ed:33:4a:16:
54:b7:e4:67:f6:9b:fb:2a:2a:33:bb:40:c8:9c:b0:eb:75:48:
46:c4:b4:1a:5d:f5:ba:8d:ca:68:4d:75:1a:04:be:12:bd:78:
7e:0f:84:b0:2c:91:59:a9:3e:83:1d:7b:cc:10:1a:67:cf:04:
2e:e4:a8:ff:19:d8:16:c6:40:01:38:8a:51:3b:3b:14:51:c1:
6e:04:5a:ac:53:d3:54:78:30:72:01:9c:84:70:42:d2:7c:bd:
2e:48:48:14:21:5c:50:94:5f:00:99:39:04:79:a4:51:e3:8b:
c7:d8:a9:57:11:80:f6:04:1a:fb:1f:1e:17:bd:86:f5:d5:ab:
5e:ed:ee:0f:04:7c:cc:45:c0:3c:30:b4:b6:fa:b7:f6:d2:69:
e2:64:e4:ea:48:72:4e:5c:30:11:7e:80:67:2b:f9:ec:ff:95:
9f:aa:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:33 2026 by rpki-client