Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: Hwsj+M//lks6W1S6RZLeCs+d9ORq37t+D1ruiLai9GM=
Subject key identifier: 69:A3:46:39:CD:C5:9A:AD:48:0F:24:08:84:19:98:A3:54:C4:3C:9B
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019D39776D20777DCF2913C490F56D22F5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 12:00:21 +0000
Manifest this update: Sun 29 Mar 2026 12:00:21 +0000
Manifest next update: Mon 30 Mar 2026 12:00:21 +0000
Files and hashes: 1: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: QNPij8zmFebxPz7W5M9F7OFRVE1A/tTP+p2isxpHcIQ=)
2: qZQDb_OLECs9_cvzC4NvW-jUYJY.roa (hash: Xte6c3KnBqX3Xm7/vG9ebJ4eg8ffxrvgU6w78IU7x5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6d:20:77:7d:cf:29:13:c4:90:f5:6d:22:f5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Mar 29 12:00:21 2026 GMT
Not After : Mar 30 12:00:21 2026 GMT
Subject: CN=69a34639cdc59aad480f2408841998a354c43c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:fc:70:2d:9c:b1:0f:8b:39:2c:4a:fe:2a:
25:58:ad:70:9f:3b:03:aa:5f:59:7a:66:68:26:e3:
c3:5a:3d:16:de:cf:db:cf:17:a5:38:d5:98:ee:ff:
67:8d:b9:99:40:01:09:7f:55:82:f7:3d:cc:66:01:
05:74:3d:e9:60:43:68:d4:48:91:05:8a:35:0c:da:
28:5c:bb:02:83:fb:78:00:d7:a7:3f:c1:b4:e5:13:
94:e1:7a:16:36:f5:48:04:f1:eb:c0:22:1d:c3:4e:
59:ec:51:24:69:d6:72:1e:65:9f:7e:ef:c6:ba:b6:
82:26:ec:63:77:28:ac:6e:98:ec:06:70:ce:d4:eb:
2d:98:35:1c:d7:75:96:1f:fa:00:70:cd:ca:94:b4:
6f:1a:60:48:27:74:28:8f:a7:bb:f8:5d:3b:60:bb:
f6:c2:99:b9:40:84:40:28:de:39:0a:04:be:ea:db:
99:91:cb:f2:02:8a:82:72:00:ad:bc:4b:ce:d0:29:
46:d7:ab:4d:97:46:65:7b:fa:00:89:da:db:50:66:
09:ff:b3:4b:61:7f:06:a7:b9:2e:82:6e:b7:3f:27:
e8:61:b6:5e:bc:99:b2:b5:93:e9:5b:12:ff:5a:33:
14:7e:93:a3:56:ed:1a:d0:10:bc:91:0d:f6:c7:fb:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:46:39:CD:C5:9A:AD:48:0F:24:08:84:19:98:A3:54:C4:3C:9B
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a8:27:0b:43:ca:59:2e:aa:2e:63:94:e4:30:0c:02:b2:99:
36:7b:f2:e3:d1:da:11:ea:7b:7d:c0:9d:83:c9:13:bc:af:ff:
11:3b:c7:77:fc:32:34:a4:ef:2f:52:d4:2d:b0:d7:51:43:76:
84:95:01:00:df:c2:1f:35:14:f2:50:f4:18:04:21:c6:a4:eb:
2e:cb:82:0c:63:da:3e:76:dd:db:61:a0:90:39:9e:d1:1f:8d:
07:a9:37:91:6d:db:2c:b1:b9:58:77:95:9e:01:c5:fa:46:be:
16:d1:67:a6:c8:84:ce:1f:21:e3:2e:bf:8e:60:b0:5d:64:8c:
b1:81:1a:9f:25:00:8c:f7:4c:08:e8:cb:d8:2d:c1:1a:0c:51:
32:ec:97:9b:7e:44:c3:df:06:43:0a:08:ca:a0:58:29:55:75:
e3:75:0a:4e:86:9c:16:90:a8:43:57:e6:10:6b:7e:c3:df:42:
e8:1b:83:3b:d2:0b:91:6e:bd:d3:52:ac:73:36:12:91:41:ca:
ef:4e:43:e3:3c:c7:1b:21:d5:69:08:2f:b7:2b:bc:64:86:9c:
35:37:a9:c8:8d:1f:36:ab:bd:e2:47:37:14:ac:f4:87:be:5a:
6b:95:4c:60:96:49:33:53:f9:ce:27:8e:a6:57:d3:8d:98:15:
f6:e2:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:30 2026 by rpki-client