Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: Mc4d+x8f8jjwZVL54YTPh+iHS9kLpP/ZdAp3O59hXmQ=
Subject key identifier: A1:51:52:C1:B2:85:8D:4D:06:B0:BE:9E:8F:7A:EE:87:98:F9:E5:7A
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019CE85C09698B1097DD0F788FB92BFEDDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 1128
Signing time: Fri 13 Mar 2026 18:01:11 +0000
Manifest this update: Fri 13 Mar 2026 18:01:11 +0000
Manifest next update: Sat 14 Mar 2026 18:01:11 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: aIWG7G7pc_c2slSSItEuUFBnVoI.roa (hash: S5hey+bOiO9SIrfKh6rWG2aF5cPDqfEVaBcsjW8NswM=)
3: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: QD4+btIw3F1h+oSiz8dN7IGZ9Sjgnv6RA8rhCNUktPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5c:09:69:8b:10:97:dd:0f:78:8f:b9:2b:fe:dd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Mar 13 18:01:11 2026 GMT
Not After : Mar 14 18:01:11 2026 GMT
Subject: CN=a15152c1b2858d4d06b0be9e8f7aee8798f9e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:58:31:6c:73:40:44:b1:a0:8a:4a:25:93:
5b:69:6b:d9:2c:30:95:5e:f4:ac:b5:bb:ad:52:3d:
91:52:37:f2:cc:28:7e:b5:39:04:12:98:9f:17:72:
d8:04:c6:3b:d2:80:da:c9:fb:01:08:22:fc:1f:1e:
ab:26:e8:91:54:ed:63:d5:ed:91:fb:45:58:23:f2:
df:1d:33:25:b9:66:48:e2:5d:71:fa:d7:c9:50:8e:
16:49:bf:92:da:15:36:0d:a2:15:eb:10:a7:d6:79:
02:0b:97:ed:24:25:67:2e:d0:c2:73:b1:ff:cb:e8:
74:6e:49:a3:a6:71:9a:3e:a3:3c:82:37:b1:94:c7:
b3:55:2a:a3:09:21:43:7e:7b:e6:ac:4b:ab:3a:f5:
3a:e0:5e:70:32:91:a9:8b:88:00:a0:a4:3d:f7:e7:
3d:dc:55:17:60:6b:a5:c7:61:74:bd:c7:78:88:2d:
1a:f2:87:d8:a1:38:1f:2d:f5:3f:af:8d:e2:dc:12:
42:3b:01:66:35:e8:33:eb:ed:c5:a8:c7:fc:76:71:
de:80:42:3d:18:12:20:9a:12:80:f8:05:3c:2b:f1:
5e:a5:a0:19:31:c0:ea:4a:6b:6d:d7:83:db:9a:6e:
4d:54:d1:14:92:21:fc:eb:30:90:16:09:68:f8:2c:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:52:C1:B2:85:8D:4D:06:B0:BE:9E:8F:7A:EE:87:98:F9:E5:7A
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:66:dc:7f:f9:bb:6b:94:d2:c5:2c:61:48:89:ad:3f:3c:f8:
65:26:a6:cb:b0:84:31:36:79:44:44:db:ed:f8:d8:42:97:cb:
28:93:67:8c:5d:d0:a2:32:c2:a1:93:10:e6:85:78:d6:15:bd:
f6:ba:b1:04:4e:21:b0:95:98:16:d3:51:af:a5:80:da:00:d3:
4b:11:40:e5:27:1d:5c:aa:27:de:8d:85:47:64:8f:8a:f3:b0:
e9:be:48:29:29:c5:b2:8d:5a:23:21:93:76:92:33:c8:25:c0:
40:95:4a:4d:0f:0c:19:bf:c6:e6:78:bf:56:80:ea:ad:64:b1:
5f:48:73:d4:32:8c:59:81:3e:97:16:9d:4a:10:a5:6c:09:1b:
ba:be:fd:a5:e6:6a:5b:7b:87:0f:b7:93:1c:a0:60:88:7f:cb:
26:8c:96:b3:2f:d0:a9:cc:ea:8c:5f:ad:37:e0:e9:d0:50:87:
ab:cf:83:63:3c:ec:29:b0:e0:b3:fd:7e:09:e9:01:8a:f1:59:
28:6e:16:1b:fe:69:ab:4d:d3:6d:21:a8:ee:b5:10:a1:83:fb:
e3:2f:18:b8:35:12:ba:3f:b8:ac:b9:38:b9:02:61:1e:ab:0a:
c8:df:c0:95:e2:a0:5a:85:14:8f:9b:2e:f0:b0:3e:c6:4d:f7:
c7:4b:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:13:23 2026 by rpki-client