Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: NxVY0VCWChYMwj/1zXR/YFxTsZSCwzxK16Rp1rVgPJk=
Subject key identifier: 56:8B:60:A7:C5:D0:E4:CB:6B:D9:5F:86:82:06:D3:92:53:4F:89:61
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019D3A548363FCBA0D9B3ECFF7F105B9A400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:01:50 +0000
Manifest this update: Sun 29 Mar 2026 16:01:50 +0000
Manifest next update: Mon 30 Mar 2026 16:01:50 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: 7FArL3VmU8EYqiWdUdNs7JpeM6f/khWZaXrFEKJKcTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:83:63:fc:ba:0d:9b:3e:cf:f7:f1:05:b9:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Mar 29 16:01:50 2026 GMT
Not After : Mar 30 16:01:50 2026 GMT
Subject: CN=568b60a7c5d0e4cb6bd95f868206d392534f8961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:61:84:98:46:58:d9:37:3b:99:39:c4:3d:
2e:9f:82:9f:48:13:2a:a2:73:ef:b4:e0:9e:74:4a:
d9:3b:70:80:c9:3c:72:e3:2d:f0:31:ab:7a:7d:3c:
d3:69:15:66:49:90:b6:c3:b9:b5:8c:81:ed:3d:7f:
b1:9d:c0:c4:76:04:3c:9e:90:0a:7c:66:d6:89:90:
ac:b9:4e:f7:1e:bb:cd:d3:73:30:9b:53:4c:e5:d4:
a9:e4:99:d0:f4:92:c1:87:f9:85:b7:6e:cd:00:76:
c2:09:be:b2:ff:35:7a:61:bd:89:34:c4:a2:15:1b:
30:c8:e9:01:19:ca:f8:51:8f:69:23:f5:d7:2f:4a:
9d:5b:01:65:21:e1:df:eb:ae:97:f6:6c:c3:bd:9b:
55:87:7e:0d:84:02:d0:88:63:4b:61:0f:0e:f8:62:
41:4b:56:a0:76:23:be:ad:ef:c5:8d:31:82:f8:3c:
5b:6a:99:e4:be:a8:8b:d2:52:7e:b6:c8:87:e9:db:
fb:09:75:c1:7f:4a:62:19:01:10:43:b1:b8:88:bb:
30:d0:f9:63:da:ed:54:67:1e:1c:c9:2c:08:8a:16:
b8:05:74:41:a1:07:13:50:89:77:8c:31:14:71:49:
be:27:65:65:75:6d:61:7e:47:a2:66:c7:29:93:b5:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:60:A7:C5:D0:E4:CB:6B:D9:5F:86:82:06:D3:92:53:4F:89:61
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:70:77:24:e2:a4:3b:44:81:73:0b:e3:d4:0a:a7:c6:5a:da:
a2:48:d7:4d:e3:76:f8:45:3c:41:5c:a8:a0:1d:a7:10:f3:c0:
84:29:7a:0a:0e:65:56:c1:8d:f1:f8:1c:a6:12:13:d7:aa:97:
68:99:e1:c5:69:38:48:fa:21:69:0c:1b:e6:49:0b:5b:d5:28:
ec:b2:16:16:fd:e8:14:63:9f:2b:91:48:36:e1:b4:12:9e:32:
00:73:2f:4c:89:e5:a8:56:38:97:23:2d:9d:05:e2:1f:71:d5:
ce:2f:e9:68:27:6a:96:1f:02:34:71:cc:62:dd:99:65:4d:d8:
48:30:97:54:80:4e:1d:fd:29:c9:76:f5:f9:d0:a3:a4:ac:18:
fc:ad:80:ec:ab:42:f5:ce:60:6c:1e:f7:10:7d:b3:3b:74:20:
b0:a9:30:34:c3:25:dd:06:d8:7d:ce:a1:b6:e8:33:b2:db:20:
59:5f:0d:0e:15:87:c2:81:7f:d9:e3:a1:29:d9:c1:d0:c6:99:
fa:3f:cb:a2:cf:85:ba:9e:32:2a:49:6c:3f:59:88:f9:e3:9a:
6a:78:fe:f3:dc:11:47:0d:80:7c:db:8c:0b:69:5e:81:73:31:
a4:18:98:4f:55:c6:67:aa:cb:73:78:9f:1e:f7:9e:cc:f4:9c:
f6:aa:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:46:43 2026 by rpki-client