Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: y35WQ2XmRbgLnXTv0Vt0bBZf+egU4KXFAgvoTZKrLsk=
Subject key identifier: FC:B5:92:35:0F:71:38:3C:56:12:4A:E4:7B:40:6C:5A:A8:63:73:BA
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 019D221438BC80AAA187D517BB4A3C881C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 07F9
Signing time: Tue 24 Mar 2026 23:00:43 +0000
Manifest this update: Tue 24 Mar 2026 23:00:43 +0000
Manifest next update: Wed 25 Mar 2026 23:00:43 +0000
Files and hashes: 1: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (hash: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng=)
2: SfyGLqqUmhSJdrvNRjgqa719X1o.roa (hash: W5M17NIRo4ubi5ZsSmZINBoyskG2lROrQJ2bZs1LviM=)
3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: Y+yrVLghDoWP+c+npWg3UN/wkgu+hnHTUqJfBjD7K/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:14:38:bc:80:aa:a1:87:d5:17:bb:4a:3c:88:1c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Mar 24 23:00:43 2026 GMT
Not After : Mar 25 23:00:43 2026 GMT
Subject: CN=fcb592350f71383c56124ae47b406c5aa86373ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:b9:97:01:58:ba:04:5b:54:72:27:1f:51:
f9:60:fd:c9:62:65:66:01:92:3f:59:fc:92:b5:a9:
03:ae:d5:be:29:a0:a8:e4:c0:a3:dd:93:1c:c1:b9:
81:4f:35:9f:9b:71:b6:7b:ef:17:9e:df:b8:cf:76:
c6:11:20:de:81:b9:af:ef:eb:7a:2a:d1:ea:f0:71:
60:22:f0:e1:7e:e8:56:55:b7:f5:9c:66:66:0f:76:
f0:9a:70:67:fc:71:fe:8c:d8:ca:e8:68:b8:81:9c:
5b:40:7c:1e:fe:48:42:d5:a1:29:73:bb:83:d0:4f:
9d:fc:f1:03:20:25:e9:ac:e1:4b:b5:e0:6d:9e:12:
ba:c3:a3:a9:62:db:80:bc:17:e5:f2:63:b7:5a:c8:
16:68:ad:69:c7:33:c4:a6:94:66:9e:bf:66:1d:aa:
be:13:26:c1:ba:76:5c:3f:96:79:56:83:cb:03:90:
23:d5:4e:92:57:50:43:46:a3:e3:42:bb:30:4e:ca:
5b:b7:1d:c9:b9:4c:85:59:8b:dc:0e:5a:9f:77:08:
bd:b0:b4:ca:48:1a:a0:69:0f:79:f1:fb:eb:8a:fb:
23:d9:c5:3d:ad:1d:db:bd:d2:8a:b6:98:db:78:08:
e0:db:eb:e0:17:d7:e8:a1:ce:6f:38:21:da:88:e4:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:92:35:0F:71:38:3C:56:12:4A:E4:7B:40:6C:5A:A8:63:73:BA
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f9:8c:f9:b9:9f:52:f2:b8:73:b6:f8:65:67:02:24:8a:37:
43:aa:41:fe:a8:fd:56:ab:a3:c8:46:57:28:37:a6:82:2e:7f:
ba:99:00:49:a4:ba:d4:c9:37:92:eb:83:1e:a3:a3:d2:04:60:
eb:0c:d0:ae:c9:17:a9:2b:fc:70:5f:5c:ab:c6:a1:85:11:30:
22:bf:27:dc:ad:a3:73:b5:93:c5:fd:4c:a1:c2:5a:ef:d9:6d:
aa:24:e1:7b:18:e1:71:79:17:e4:cb:97:79:42:9f:2c:ac:7f:
08:c3:60:6e:97:80:5c:b7:ac:9c:a1:c6:06:70:92:7b:4e:61:
bd:3a:7f:ea:01:14:c8:8e:95:9f:98:d9:99:23:80:cf:47:1b:
ab:f3:31:26:d3:cf:e2:99:a1:ed:e7:a0:8b:bc:25:37:08:eb:
8b:a6:64:c4:6f:d7:cf:dc:8a:ca:e9:ce:48:02:f5:e5:a1:35:
b3:b9:37:a8:86:68:71:4b:c7:48:19:59:1c:f1:06:bb:a7:06:
8c:1f:a2:0e:b5:fd:1b:09:cb:a3:be:24:c7:66:72:46:67:13:
05:86:84:46:3d:7e:41:b5:39:14:01:68:47:53:3a:aa:8b:42:
4f:88:c2:9a:28:fc:ce:42:6a:f9:03:96:a2:e9:7a:e1:14:74:
59:37:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 06:38:04 2026 by rpki-client