Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: W3P8nlPVGKLb10Hg3K6al7pvPDzVC25BkLdnS9K2EWI=
Subject key identifier: 68:0B:F6:7E:ED:FD:19:5C:F9:7D:79:49:38:D1:57:6C:FF:E0:0D:89
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019D2772315B858CE56DEF9BCDF59762C0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0F99
Signing time: Thu 26 Mar 2026 00:01:28 +0000
Manifest this update: Thu 26 Mar 2026 00:01:28 +0000
Manifest next update: Fri 27 Mar 2026 00:01:28 +0000
Files and hashes: 1: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (hash: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM=)
2: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (hash: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q=)
3: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: wCrlvrGyMVOxFbrCs+C6R7L0NyeJ/PxgIkwc3PYTL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:31:5b:85:8c:e5:6d:ef:9b:cd:f5:97:62:c0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Mar 26 00:01:28 2026 GMT
Not After : Mar 27 00:01:28 2026 GMT
Subject: CN=680bf67eedfd195cf97d794938d1576cffe00d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:98:2c:fc:2f:84:ce:00:85:09:46:40:8c:
02:a8:05:a0:ca:e4:06:01:44:87:3d:fc:ce:2b:87:
4f:de:c4:bf:c7:00:90:61:45:36:3f:a1:52:9c:22:
fd:04:09:34:cb:3b:87:0e:1e:c1:79:58:e5:db:e4:
30:92:58:82:9a:3e:37:09:85:a6:7e:34:81:a0:a7:
04:6c:45:5a:8f:3f:be:0a:85:ba:8b:48:4f:25:41:
71:b6:aa:f3:9c:7e:77:8a:47:ff:63:85:cf:ed:e1:
37:ae:e7:e6:94:5d:76:a3:64:a6:50:81:58:ad:05:
99:bb:27:d5:53:0a:3e:8b:06:18:31:30:6e:b7:d1:
9d:2a:be:a8:f4:0b:48:e8:27:05:25:58:47:21:dd:
a8:6a:93:7d:d3:1a:e7:21:ea:f6:f3:6c:da:96:70:
14:ea:09:83:c5:e9:d5:89:42:06:8c:b4:90:fa:4f:
94:69:d4:ed:8a:19:16:e5:08:7e:77:f3:39:f9:bd:
33:3e:78:c2:e4:6d:00:d3:6f:4a:8b:f1:c9:63:34:
b3:3b:e7:df:e1:1e:ca:28:9d:d3:ef:47:23:f8:9c:
4c:7c:d5:40:51:5c:e2:ea:93:d3:bd:26:bf:1b:6c:
00:2b:82:24:90:8a:e8:f4:a9:11:1a:f3:86:8c:dc:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0B:F6:7E:ED:FD:19:5C:F9:7D:79:49:38:D1:57:6C:FF:E0:0D:89
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:fa:77:10:be:99:af:10:bf:ae:d0:44:88:bc:e2:ab:e3:
60:b9:18:9c:97:5c:55:f5:78:70:e8:70:6b:5f:33:8d:ee:ca:
32:d6:65:70:b2:d7:58:2b:76:6d:58:00:f0:f9:48:bb:05:1c:
d6:3a:77:93:3b:fd:79:5a:ea:a1:f6:b8:84:55:e1:b9:62:66:
e1:19:29:6e:bb:df:f5:c2:db:79:b4:c7:ab:e9:3e:9f:b4:ed:
6a:fd:bd:12:dd:58:e1:e9:fe:72:4d:41:c0:59:0a:1a:a4:c5:
ca:b1:a5:e6:3c:d4:45:84:1b:fd:0f:e7:bf:7d:4d:24:dc:29:
c9:27:f3:01:e7:13:50:46:fe:c8:13:95:dd:46:b8:a0:20:8b:
af:e6:19:a8:a0:75:a6:00:8f:ee:15:91:3a:fc:a7:29:01:99:
1e:e7:43:aa:80:4e:18:4e:08:13:9e:e6:7f:13:2c:2f:cc:2f:
1f:a7:ae:78:2a:5e:b1:50:9a:ca:21:39:9c:15:fe:d9:c2:58:
ce:7b:81:4e:c0:0e:14:06:a3:da:8c:84:14:28:67:df:c1:e6:
a7:4e:24:88:6a:f3:5c:85:81:b1:b1:f3:6d:e1:79:c9:5a:9a:
21:0a:94:32:3b:61:18:80:2d:b3:f6:87:4f:7a:e5:82:2a:b8:
0e:84:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:55 2026 by rpki-client