Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: 9et3PV8WKgrehOx3D4IUg2Z/ahxoiwguXhVo91wLlGY=
Subject key identifier: 9B:E3:8F:32:BA:BE:81:D8:46:C0:0E:F3:0A:0D:4A:12:F9:57:08:1E
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019D38D2E718BFA4664D5B898320A2832A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: iEyZ3o+q+tLJXKMoTfwukTN4i1Ebd+q+CJmamsM55QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e7:18:bf:a4:66:4d:5b:89:83:20:a2:83:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=9be38f32babe81d846c00ef30a0d4a12f957081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:d4:06:58:b0:5e:9b:00:45:b2:23:f7:88:
27:06:15:76:dd:a3:33:10:a5:dc:48:c5:df:a2:48:
3a:c9:02:6f:a4:db:06:47:6a:2a:3c:17:28:5f:cf:
ce:de:75:d0:40:ff:82:40:7a:7d:c5:b4:67:24:98:
63:ce:52:7d:c0:7f:10:f9:ca:c5:f6:0d:f1:ee:c5:
ce:37:5a:23:24:f4:14:08:fe:1b:b3:be:84:4a:c7:
5e:71:b4:f5:eb:74:72:1f:dd:c2:e2:e5:54:42:a8:
08:92:95:30:b4:52:bd:ac:23:68:77:3f:44:62:da:
bf:0f:89:55:2d:85:e2:c5:96:a4:1c:92:ef:c2:27:
c8:d2:27:96:32:9f:45:8a:98:3c:c3:07:2f:bd:b7:
5c:9d:e6:d6:a9:08:1b:85:4a:19:41:01:43:2a:2d:
d4:d0:42:67:d7:7a:63:d1:a3:c9:ef:e4:57:42:cd:
84:35:90:2b:46:57:9a:86:31:05:eb:4b:b6:9a:4f:
d8:f5:06:f1:f1:7d:d5:e0:11:f0:6f:e2:9c:4e:27:
85:0f:4f:4a:38:cb:63:db:59:0e:b3:1b:c0:f2:85:
39:3c:99:55:df:6b:1a:ae:2e:d6:bc:ab:6c:1c:d7:
fb:18:55:17:68:c3:49:de:85:cc:34:78:f9:7a:3b:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:8F:32:BA:BE:81:D8:46:C0:0E:F3:0A:0D:4A:12:F9:57:08:1E
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:bc:a7:9a:dd:68:16:e8:c8:10:f6:6f:96:58:63:80:ec:
7b:51:97:33:28:a2:4e:9d:79:b2:b2:5d:e6:d9:e1:3c:8e:7f:
55:24:77:4a:b2:62:c5:d7:4b:a4:b6:2c:06:9c:8d:27:ff:14:
3c:1b:77:cf:8e:a8:32:7b:87:a4:a8:fa:f9:eb:37:ce:db:41:
9a:df:3a:b5:be:52:20:93:d0:86:2c:23:2f:47:e0:1d:95:fc:
61:f5:97:8b:6a:c1:e6:41:20:6e:df:b4:42:4b:c3:ac:26:3e:
5c:18:b0:df:74:08:25:aa:18:b4:40:ea:bd:61:24:d5:f6:d8:
7b:95:96:1f:0d:42:6f:ef:1c:6b:9a:41:95:13:ff:03:b6:6c:
ea:21:7c:1e:a4:3f:97:f3:12:1b:55:22:2a:ce:75:93:76:93:
40:69:b4:71:85:82:57:6e:e9:35:99:ee:25:46:ed:94:63:c5:
3a:ba:6b:d6:c8:1c:ee:3b:b6:32:5e:d1:7c:7d:06:98:b0:e1:
53:e6:26:b3:c4:0a:2e:b1:e4:76:b5:7d:fb:a5:a8:51:49:63:
7b:68:18:86:1f:ec:a1:d4:bf:1a:04:d5:19:93:45:a1:ea:41:
4a:d2:8c:ac:99:4c:8e:85:19:d6:4f:49:f5:d2:80:fc:f0:0f:
4c:b8:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client