Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: 42uNd+NKgcmurOuKK9QmD2c+CA/Fn/ykr1mqf90KNwA=
Subject key identifier: 3E:6F:A2:73:04:FA:72:AB:BE:28:99:85:00:61:1D:DC:C8:74:E3:A5
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 019D38D3ADBACED909A106245CE86DB46B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: J0PZBVWFTINnhdQjJ1kEEUY1JP8.roa (hash: Whf1HQd5oE3GSY4trhkL4bAm/CeLA6p+cMBaOxA2wd4=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: JcOgosrkhMDgttUYy3JE/CgNpBxeS8ip/IlKaU6NVjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ad:ba:ce:d9:09:a1:06:24:5c:e8:6d:b4:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=3e6fa27304fa72abbe28998500611ddcc874e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:76:0a:58:d5:6b:d8:f3:bf:38:42:74:9b:
07:9d:77:41:22:20:85:b4:2f:0a:ed:36:6b:95:db:
b0:c9:ef:3c:5c:41:56:0f:71:63:94:23:bf:6f:92:
3b:6d:46:11:1f:14:d2:bc:36:84:60:92:d7:5b:b8:
61:4a:1c:6c:3d:07:f8:e5:9e:17:11:db:d6:ec:c4:
4b:86:37:dd:ef:da:38:f4:6d:e7:7a:df:eb:3d:74:
88:99:91:d8:ed:3b:4d:a6:3b:1e:d3:29:d3:3a:3a:
a5:b7:ed:18:37:c3:bc:af:65:0a:d0:dd:a3:1f:33:
17:e4:62:b3:08:bc:4f:57:1d:db:46:ca:b0:b4:39:
1c:ef:01:d1:d6:c3:e0:23:b5:63:95:9f:7f:39:d5:
07:1d:3d:7a:f5:a3:04:d4:85:4d:19:75:02:4d:59:
7c:60:35:8e:12:ec:f8:89:11:8c:a8:dd:a1:c5:c1:
87:bb:13:36:f5:bb:4c:76:db:37:07:1d:dc:27:82:
21:05:84:9c:51:6c:85:b9:a7:e2:4e:ab:b4:1c:b5:
3e:8c:6c:16:ce:42:88:43:66:ea:0c:8c:a9:4e:28:
e7:db:31:91:ae:e8:ed:23:19:37:04:c3:14:6d:63:
a2:ac:e1:32:a3:e4:c0:1f:6a:30:8d:d2:58:0a:81:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:A2:73:04:FA:72:AB:BE:28:99:85:00:61:1D:DC:C8:74:E3:A5
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5e:3e:4f:e7:6b:10:2d:da:b4:2b:43:be:06:f2:fb:9d:a7:
3a:23:0d:a7:0f:f1:84:94:4f:96:bc:19:a8:07:8e:26:db:16:
de:fe:c5:a2:18:18:26:f1:84:3c:db:e7:ad:a4:cc:d0:67:b1:
26:67:1f:bc:15:76:b2:6e:22:01:a0:c0:7d:52:f0:6b:c2:43:
df:ed:a1:42:fe:42:8f:11:b6:f0:09:6c:ba:0e:1c:8f:d5:ac:
c4:be:a6:96:1d:c3:b9:c4:cb:f3:9b:9a:ea:75:61:72:bf:7e:
e5:59:e2:98:a7:54:c4:0d:ac:62:d7:b2:5c:a8:11:74:c3:c9:
de:d6:01:87:85:07:33:d9:20:2c:8d:02:bf:b9:be:4b:49:89:
45:12:f9:4e:6b:15:21:dd:d1:33:5a:2f:4f:2b:ac:2a:8f:e6:
77:cf:4f:3c:66:9e:4b:2c:42:bf:42:6d:04:02:d4:36:28:85:
cb:e1:aa:4f:a5:a1:07:21:d5:a3:8c:42:99:f4:03:41:48:55:
1b:fc:10:12:b8:51:58:d0:5d:02:90:1f:7d:0b:05:e6:d1:11:
2e:61:65:c2:45:46:86:06:26:fb:ea:5e:f9:af:6f:66:06:04:
5e:aa:f4:9d:7c:c0:d9:41:d3:4e:0e:c1:57:67:a7:da:ee:05:
52:8b:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:43 2026 by rpki-client