Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: eZzxnyjq0LB53HL8oO1uFu8sq6jrpyAa/jSYSoRuTBQ=
Subject key identifier: 6D:F3:EB:D7:33:B7:61:58:7B:9C:E1:46:9A:68:82:A4:93:C6:BC:49
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019CE5FEF59D1857A143D9A3F8F05FA31E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 082C
Signing time: Fri 13 Mar 2026 07:00:17 +0000
Manifest this update: Fri 13 Mar 2026 07:00:17 +0000
Manifest next update: Sat 14 Mar 2026 07:00:17 +0000
Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: FRv428CZpWN6XwZsKDn8a6Xo7c/50XDdT9W7MXIUVFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:f5:9d:18:57:a1:43:d9:a3:f8:f0:5f:a3:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Mar 13 07:00:17 2026 GMT
Not After : Mar 14 07:00:17 2026 GMT
Subject: CN=6df3ebd733b761587b9ce1469a6882a493c6bc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:65:f9:cf:22:00:7b:db:f6:27:65:3a:c5:
4d:c5:9e:a1:98:21:03:e6:99:fa:39:c5:c2:ac:3e:
9d:70:43:0c:1e:12:e5:db:de:c3:a4:eb:55:eb:c5:
27:14:1a:c6:3c:a3:2f:79:28:97:2a:57:73:d9:14:
33:ea:ce:d3:96:4d:cd:05:06:8e:d7:8a:85:ec:40:
67:19:a8:69:c2:b0:de:87:7e:14:ec:a6:4b:d9:5c:
5a:ab:aa:a2:ae:8a:2d:fd:4c:cd:23:b8:3f:d0:d4:
b7:5f:38:0a:71:2a:17:57:ac:1c:99:4f:97:b8:f7:
0a:5a:43:11:3a:07:39:49:79:31:e3:ff:3e:3b:64:
80:2b:d5:6a:1d:db:63:8e:50:d1:a3:a0:e6:f5:67:
3d:7c:e3:c6:e1:6a:16:21:3b:1c:72:cf:02:8e:da:
0a:4d:38:57:71:77:92:b7:11:73:2e:5d:37:50:fb:
5f:9a:2f:68:cc:74:dd:15:d5:c4:ff:91:4e:98:fc:
9f:f0:04:d6:92:cd:2c:2c:1d:e2:45:d4:ed:b3:66:
15:1d:cb:25:e0:17:66:10:e1:2e:d2:d3:97:92:68:
00:87:40:3d:07:0b:52:29:d7:af:fd:b6:2d:ec:84:
24:e7:7c:05:70:f0:89:94:97:9a:b7:11:9a:5f:b6:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:EB:D7:33:B7:61:58:7B:9C:E1:46:9A:68:82:A4:93:C6:BC:49
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:00:c6:37:e7:5e:05:88:c3:43:56:67:21:70:c2:6a:67:40:
11:4a:48:d4:3d:e2:b6:0e:b7:d3:0e:fc:7d:2d:de:bc:7c:2f:
57:35:8c:97:3c:c4:78:52:b0:c1:87:c8:86:c1:08:dd:4c:6f:
e4:bb:7b:85:f5:59:bc:4f:af:b6:f8:d8:0b:70:98:84:14:64:
ed:df:fc:a8:49:fd:55:7b:07:c2:0b:29:90:76:91:81:1b:81:
8d:80:a0:52:9d:f3:26:f9:e8:01:41:79:45:f2:34:17:db:63:
1b:68:61:ff:18:5b:be:c5:85:61:07:55:9b:bf:b9:65:6d:7d:
c1:60:2f:53:13:33:58:e2:7c:ae:f0:67:2e:b0:ae:a0:d9:ce:
ab:1d:b3:d5:d8:ee:a4:59:51:fa:a3:63:01:20:9d:14:d9:f6:
12:de:f9:ab:6e:2d:17:32:80:06:c3:b3:95:ff:80:ac:68:8a:
78:9d:b0:c2:1e:03:3e:ad:e9:18:da:b4:61:47:3c:41:09:b5:
25:98:d0:73:74:c5:97:84:4a:6b:5a:66:cb:b4:a3:d6:3d:91:
60:a6:ba:bd:3d:f3:af:24:ad:31:a9:33:a6:e6:88:4a:b6:15:
b6:a3:6a:6e:6d:f7:60:99:38:9d:e8:41:8d:8a:f9:d0:21:8a:
f1:cf:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:16 2026 by rpki-client