Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: Ab6wcX9275ZGizuKrXp7Y1RDo45ys7uXTFpRcN8SaOA=
Subject key identifier: 31:55:3C:18:34:0D:99:FC:1B:88:C1:4B:F6:BF:7F:BB:49:97:BE:9B
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019D2695C4019CA41D83D6C5DFBB133CFB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 1518
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: hxyVMvIP_SVcBThDF1ToAOfYVKI.roa (hash: 2tvRfORdoA5iduQPZSwIAmQn4zHIFUUAid+3PnQEwek=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: Q3zu+z6m7u0AUNF5oxNXUdGmY7ovZdT0xkMtasUuwnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c4:01:9c:a4:1d:83:d6:c5:df:bb:13:3c:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=31553c18340d99fc1b88c14bf6bf7fbb4997be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:cd:a6:c4:af:cc:d3:2d:6d:92:a9:06:9c:
9c:0d:30:f5:d2:1d:89:70:f8:e9:78:5d:39:3c:d8:
71:4e:e1:ec:dd:72:33:6d:f3:85:b6:8c:88:6d:34:
98:29:6d:06:ad:a9:41:fb:9c:2a:a9:15:89:2f:34:
23:bd:6e:b0:27:cf:f1:f5:f7:02:3a:d1:ca:97:eb:
ad:ae:12:13:07:60:5d:32:2c:6d:1c:e3:87:f4:fa:
64:44:b4:65:56:e7:3d:c3:64:78:01:3a:ab:5c:b2:
b9:e9:b3:a8:e0:d3:68:fb:93:b4:ef:e8:b1:c6:25:
a2:ab:40:d4:f3:75:79:49:ef:6d:9b:34:6e:cf:92:
29:fa:33:25:02:50:38:44:85:ff:ee:fc:61:12:eb:
65:3e:b9:08:61:ea:b7:93:92:f5:e2:aa:03:30:74:
33:39:74:79:68:57:ab:22:a9:7e:2f:4e:b6:83:37:
76:64:3e:18:27:06:58:93:9b:64:16:98:8f:22:e7:
41:29:6f:24:e3:ab:6f:7d:a5:b4:9e:d0:37:d4:de:
1e:8c:9e:a1:90:7b:6d:df:66:f4:09:4a:8c:a0:f9:
5f:a3:74:c3:99:5f:96:ec:b2:40:9f:5b:ec:44:64:
5c:4b:f1:db:51:b7:61:7c:f7:a6:e2:ed:7f:9d:ad:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:3C:18:34:0D:99:FC:1B:88:C1:4B:F6:BF:7F:BB:49:97:BE:9B
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f4:6f:0d:8c:f7:d6:5f:c0:7b:46:1a:a0:d8:43:a1:2e:de:
7c:ab:3c:02:75:38:52:29:26:eb:e5:7c:a6:0e:75:b7:61:6f:
43:f4:0b:39:47:3a:fe:50:d0:a1:79:1d:43:f4:c3:d8:2a:26:
b8:5e:12:be:f2:23:24:a9:28:f3:e7:42:45:26:5e:d8:59:4c:
bc:2a:c2:1d:f4:43:66:d7:2d:5a:8c:ab:b1:e9:c4:36:c6:db:
5d:ae:09:e2:34:22:e0:3d:fa:6a:d7:2e:a5:c0:3f:80:11:f2:
29:2e:8b:8d:7f:e4:47:4c:fd:b5:64:c7:b8:ff:7f:bc:4d:ca:
17:53:00:6b:be:00:19:2e:9a:fe:7b:9f:8e:80:57:07:fd:eb:
63:63:11:02:82:00:fb:de:7f:c7:69:65:de:e6:b6:7d:65:a8:
a1:09:07:68:53:fb:9e:fa:ed:3f:d3:4c:03:8c:4f:cd:10:4c:
1f:b0:21:18:90:45:f6:90:3a:42:65:f8:5a:88:f0:9f:af:72:
2e:4d:45:6f:13:f1:87:cc:51:5a:22:fd:35:e9:bb:3f:dc:0b:
55:d6:09:a5:2d:91:23:7c:cc:8c:9d:88:e4:de:2e:a3:5f:af:
18:a5:0a:d3:7e:52:63:e8:69:95:69:73:90:61:83:0d:31:f6:
76:71:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:12 2026 by rpki-client