Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json)
Hash identifier: fs1RFQup74IuwHlv0I6CVCu/9LbMiLUcIjLLVaQcTJw=
Subject key identifier: 38:DD:1E:AB:A9:7D:A2:72:80:86:57:9B:44:55:73:6F:FD:93:2C:49
Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Certificate serial: 019CE66D923B3605612E8EA38F1B4FF6CA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
Manifest number: 016B
Signing time: Fri 13 Mar 2026 09:01:06 +0000
Manifest this update: Fri 13 Mar 2026 09:01:06 +0000
Manifest next update: Sat 14 Mar 2026 09:01:06 +0000
Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=)
2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: 7/p9rfLOKfaymc8TIJzoeqzm2/8NOIbXK+mcgcxiqag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:92:3b:36:05:61:2e:8e:a3:8f:1b:4f:f6:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Validity
Not Before: Mar 13 09:01:06 2026 GMT
Not After : Mar 14 09:01:06 2026 GMT
Subject: CN=38dd1eaba97da2728086579b4455736ffd932c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:9b:06:d0:49:b2:62:e4:cb:c2:6e:57:bb:
27:94:90:60:1f:6f:d3:bf:04:2c:23:93:8f:e4:99:
46:1d:58:93:55:97:12:5b:71:07:42:02:1e:35:6d:
95:8a:e8:08:bd:40:32:b2:d0:4c:85:57:8c:95:88:
39:7d:a1:47:45:e1:85:57:4f:46:1f:3a:a9:af:29:
66:b3:b8:93:1f:3f:25:57:65:c7:30:dd:36:63:b8:
c8:0b:c8:3e:c2:a7:5c:34:9c:ea:0d:59:13:ed:72:
14:09:9f:5a:05:dd:ea:2c:42:de:17:56:cc:26:be:
84:e8:ea:8a:5a:19:f5:e6:90:5b:12:43:a7:77:94:
32:97:cb:86:b3:64:3f:ac:61:c4:ac:81:85:ae:06:
b3:32:93:cf:91:8b:25:d2:a3:6c:f6:69:bb:65:ca:
5e:50:fd:2f:1f:ce:66:0e:a8:fa:37:cc:d5:01:c6:
0d:22:d4:9f:6e:f1:d6:5a:cf:b8:f1:3e:d5:99:c9:
bc:9f:96:fe:3d:c3:88:7c:80:c2:4a:91:59:ae:aa:
23:f0:a0:9c:a7:92:ad:54:d9:b1:36:d0:04:20:e1:
a2:2a:b8:cd:02:7d:3d:68:57:65:98:c4:8a:43:36:
45:fe:6f:e5:bb:e3:ce:f9:7e:61:e4:a3:22:60:09:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:1E:AB:A9:7D:A2:72:80:86:57:9B:44:55:73:6F:FD:93:2C:49
X509v3 Authority Key Identifier:
keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:3f:97:85:b6:5b:c0:97:60:59:8a:61:5a:21:73:02:6c:
2c:e2:2d:f8:00:1c:af:32:e8:a6:fe:ab:d1:dc:a3:95:6c:6b:
e6:7c:01:21:1f:b7:e4:d0:de:38:27:8b:bd:e8:b8:a4:77:ed:
ff:f6:0e:0a:81:36:18:2c:69:7c:89:4f:63:c5:a8:26:c1:c2:
e2:ce:45:bb:a2:af:f7:a3:3a:a3:87:9a:ec:fb:b3:88:d9:46:
5d:07:1c:b4:5c:de:3f:13:cd:c6:c8:9d:89:57:61:99:1b:56:
99:54:ef:55:7f:88:c1:52:93:13:f7:83:32:4a:55:fd:18:f1:
5c:f6:ec:4f:03:f9:36:c4:77:c4:3a:e0:14:28:54:32:81:a7:
08:74:89:3e:07:a7:37:02:20:43:54:9b:62:2b:e3:c5:b0:73:
0e:92:92:5c:3a:2d:42:89:af:ee:5f:74:48:ac:a8:ad:c9:37:
30:e9:77:b5:6f:76:7f:1c:17:29:fb:e2:f5:81:47:46:e4:11:
ad:85:bd:50:51:07:92:27:de:88:e5:09:bf:66:d0:2a:5c:5c:
79:27:01:f9:c3:f9:8b:a5:76:c1:5b:75:5b:59:13:15:77:e4:
38:52:64:6b:3c:f3:a6:ac:5e:26:98:59:af:23:68:2a:20:4f:
0d:5d:18:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:47:47 2026 by rpki-client