Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: avMnqbCriPOhBJBOouBiS9gQ79ybMys5BvIb5qjyUc4=
Subject key identifier: 99:C7:4B:5A:F9:15:0A:15:A3:B4:3E:58:82:FD:2A:40:56:AC:63:D1
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019D2583BF0F613B9C1E95B8770CF4858278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 12EB
Signing time: Wed 25 Mar 2026 15:01:24 +0000
Manifest this update: Wed 25 Mar 2026 15:01:24 +0000
Manifest next update: Thu 26 Mar 2026 15:01:24 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: LmbBivNl7uYiTOZhrESngoyBWHJ8eOqU9EfQpFDeg8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:bf:0f:61:3b:9c:1e:95:b8:77:0c:f4:85:82:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Mar 25 15:01:24 2026 GMT
Not After : Mar 26 15:01:24 2026 GMT
Subject: CN=99c74b5af9150a15a3b43e5882fd2a4056ac63d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:fb:8b:2a:40:0d:89:9f:9f:d9:42:96:62:
95:71:92:69:42:18:45:93:5f:42:1a:94:b0:56:9e:
a8:89:31:03:23:b0:d4:f7:c7:6b:7a:f6:eb:dd:59:
98:ab:dd:ea:6f:0b:39:cb:c0:87:8a:e9:54:5f:dc:
7a:64:6a:5c:76:5d:8a:44:49:fb:d6:d6:2a:be:6c:
bd:33:32:dd:b3:ca:9c:37:bf:82:4f:ae:67:c3:07:
2d:50:4b:11:a7:fa:e5:d9:23:f5:88:54:dc:4d:d5:
e6:af:48:aa:0a:6d:c3:22:54:51:ee:41:6b:25:18:
ee:57:2a:78:65:e2:10:92:f0:05:d0:3a:8b:e8:25:
b9:06:7a:d2:2d:f7:f8:9f:45:13:ce:73:a8:60:10:
91:d5:08:00:51:38:a9:47:0f:b3:48:6d:30:14:e5:
59:76:f6:d7:10:36:17:3d:64:ea:16:23:08:91:fe:
9f:b1:9e:36:c1:e1:b2:a9:79:7c:16:de:67:e1:de:
c1:d1:27:e8:55:98:2a:00:82:55:4f:91:f4:0b:ae:
20:d5:ae:35:ee:5a:c9:9e:97:6c:b8:e6:8d:4b:af:
56:c6:68:30:a7:25:4f:ab:7b:54:61:98:c9:cc:51:
a4:4a:69:b4:e2:45:8a:1b:12:40:9d:5f:1c:4e:fe:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:4B:5A:F9:15:0A:15:A3:B4:3E:58:82:FD:2A:40:56:AC:63:D1
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e8:bc:01:4c:dd:15:53:00:90:4f:74:7d:9a:60:fe:9f:57:
3a:25:91:b6:2e:70:ca:04:0e:bb:84:f3:c6:20:bc:f3:f2:e4:
07:14:12:5e:10:70:8c:f1:5d:9c:d1:5b:c4:8d:72:73:7d:04:
35:07:1d:a2:5a:89:43:c4:a7:8d:97:0d:3a:62:47:2b:44:18:
15:ed:b3:56:46:7c:ed:ec:55:13:c1:44:db:3a:22:80:ca:fd:
76:2a:a5:a1:2a:0c:96:d5:f6:74:e5:fe:78:3b:a9:59:0c:69:
38:82:66:2f:0e:87:2b:38:fd:de:e0:87:04:b4:c1:d2:e5:ae:
e2:9b:ef:14:df:be:34:2d:77:a9:5b:20:04:c3:dc:7b:71:7c:
56:56:4b:7e:0e:57:ed:f9:99:4d:36:83:31:68:94:78:7a:4e:
6d:b6:6e:ee:8f:48:4c:f3:d3:5e:04:bc:c5:f3:24:fe:13:79:
ac:4b:26:dc:9c:fe:2e:88:d0:84:fd:8a:81:bc:cd:e1:cc:8a:
91:5c:82:a8:00:b3:e8:a9:8d:61:9a:67:b6:b8:20:f6:22:cd:
83:ac:ca:9e:2a:d8:7f:88:01:a5:93:69:83:01:09:c1:1f:f5:
4d:c3:77:58:73:82:af:3f:76:31:60:4a:56:9a:ae:dc:a7:a5:
23:5e:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:33 2026 by rpki-client