Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: VPPNkvGmx0gHfPmyvC1xSnghntiITEB0FnmTVDi77y4=
Subject key identifier: AE:9A:03:E9:45:3E:E7:54:BC:E5:FD:80:2C:D0:9A:4A:11:93:A5:6E
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 019D38663CE49A359CDA0D7871C6A7B1D0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 069B
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: j8yGFu1k6_cogtT2LrDEqPHQJXU.roa (hash: 5Bbq3oVj4UwDrk3sxxzhNCBHybTGlRHYvfkfCXUPA9E=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: OaDkt+ooewHaNMbuoCxgAubmf+GashkQ6mUibS1Kvkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3c:e4:9a:35:9c:da:0d:78:71:c6:a7:b1:d0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=ae9a03e9453ee754bce5fd802cd09a4a1193a56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:2f:38:27:8b:a9:94:a8:8d:c2:53:05:ba:
be:84:04:51:f3:ff:8a:e5:e7:80:40:65:1a:7c:41:
09:39:9b:74:f8:47:3a:66:cb:d3:dc:ef:ad:b5:3b:
51:1c:31:dd:cf:00:93:69:40:47:df:9a:55:c7:00:
24:da:1f:c7:b4:0c:ca:2b:5e:e0:c1:67:a0:0b:a4:
5d:98:70:c7:be:0e:b8:59:c7:de:eb:2b:03:86:0a:
36:1d:c6:cd:e2:76:f1:9e:ed:99:bf:ee:8c:c7:59:
b7:92:1f:87:32:b9:54:c5:28:63:a9:99:ab:2c:9d:
85:a2:ee:c8:be:2c:dd:ee:2c:9e:72:34:b8:cd:e1:
df:cd:f3:e7:4f:a2:4a:b3:fd:d9:a5:d9:9a:f9:26:
29:62:77:1b:47:e9:19:c6:85:b0:cb:f9:ad:3a:03:
3d:d1:d7:2a:f5:de:7b:49:41:76:25:6c:bc:ee:40:
6f:96:4d:1d:37:d5:12:a7:8f:5a:4c:ee:c9:df:40:
9f:49:59:45:b1:14:25:23:cb:b4:e8:fd:8d:93:4e:
3d:b4:35:50:c5:52:d1:d7:a6:55:18:cc:bf:51:f0:
5d:e0:6c:d7:29:d6:f6:9d:ce:06:a7:8d:54:66:e2:
85:c8:c6:85:24:cc:6d:7b:63:e6:82:bc:5b:a1:18:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:03:E9:45:3E:E7:54:BC:E5:FD:80:2C:D0:9A:4A:11:93:A5:6E
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0f:a8:5d:0c:4c:5e:c2:19:a9:4b:3e:22:36:57:6a:f1:9a:
5e:9f:48:68:20:48:58:b7:38:fb:33:cb:30:0d:67:f5:49:ab:
d0:3e:68:18:ec:48:f9:de:cc:23:e9:44:ba:00:13:af:65:e1:
83:88:aa:7a:95:81:ee:a1:5e:a9:71:50:ac:8b:77:5e:a0:a2:
99:35:90:dc:8a:17:e7:d5:c1:1c:0c:e4:b9:4a:e5:4a:ca:0b:
ba:6c:ae:5e:ee:53:bd:e1:cc:e8:2b:67:60:f7:18:c2:23:b5:
df:67:25:4f:44:91:0c:1b:d9:94:c4:40:4f:4b:a2:5b:f1:36:
b3:13:8f:cf:fd:e4:91:85:1c:3a:98:5e:20:89:d9:61:35:b1:
06:e6:d5:4b:ff:2b:9a:57:83:13:e8:25:24:8e:88:92:88:d6:
cc:a6:db:f2:a7:fc:cd:d5:be:2e:ef:f8:a4:8b:c2:f6:3c:fb:
33:da:c8:61:5b:43:75:84:db:99:ec:c9:bb:47:f2:c8:3b:92:
ee:f1:1c:8e:27:6c:92:65:d5:92:4c:ec:48:b3:38:ea:16:66:
87:ed:25:f9:a2:2e:26:36:92:79:22:87:22:e7:ef:fa:1c:bd:
f2:e8:ae:9c:39:6e:69:5b:90:45:8f:c5:61:f8:59:48:75:1a:
83:70:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:51 2026 by rpki-client