Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: jWicMe1YPgsOJ2WbQFwdmR6x3U5x/oiu61X/fzG8XOo=
Subject key identifier: A0:F8:45:03:9B:A9:E0:E8:CE:86:AD:42:7E:5F:16:46:F8:E0:25:B4
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 019D292997810C53D5148150BD036077CEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 07C0
Signing time: Thu 26 Mar 2026 08:01:24 +0000
Manifest this update: Thu 26 Mar 2026 08:01:24 +0000
Manifest next update: Fri 27 Mar 2026 08:01:24 +0000
Files and hashes: 1: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (hash: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: PlGwjHQuDX1R+bykHGChPgv73HffPNwAyPOmyZu7uF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:97:81:0c:53:d5:14:81:50:bd:03:60:77:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Mar 26 08:01:24 2026 GMT
Not After : Mar 27 08:01:24 2026 GMT
Subject: CN=a0f845039ba9e0e8ce86ad427e5f1646f8e025b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:e1:5a:f8:e8:f1:dc:63:d9:5c:3c:7f:9b:
5d:ad:9e:77:5d:79:48:eb:5b:af:53:e5:37:3e:f2:
d8:d1:2b:ed:1d:d1:08:3b:b9:c9:40:b7:8e:00:a0:
35:58:ca:7d:94:a0:9b:f6:dc:83:cf:0e:00:07:d2:
b9:d3:03:24:c9:aa:84:6f:eb:61:5e:4b:12:3e:d4:
20:a6:83:1e:23:2e:d1:7a:d9:ba:36:7b:c1:de:56:
55:ba:ee:15:a1:7c:f8:3a:b9:74:5a:14:6b:c7:93:
10:24:bf:02:48:d3:b6:fd:6c:c3:a9:87:81:78:be:
83:fb:e7:5b:bc:15:7f:e7:fb:37:ba:ca:e5:8f:f7:
4f:75:8b:8f:f3:dd:16:2f:b5:5c:b1:98:f4:77:fb:
d3:80:39:2e:7e:8d:27:00:85:c9:4b:7b:ea:f3:a9:
31:97:6c:b3:d2:44:cf:cf:ff:a1:01:20:0c:44:5c:
6e:88:f6:89:f2:9a:f4:c6:ef:03:e3:9d:57:e5:1a:
31:4c:a7:29:17:37:67:3e:46:9d:8c:31:df:af:5f:
f7:0a:a3:6f:68:96:e3:af:4c:48:15:fc:87:5c:f4:
0c:d0:34:37:e9:be:bd:be:74:b5:39:b9:d2:cc:f1:
c1:87:f6:aa:95:1d:f5:2b:2d:13:0f:57:d1:c3:0e:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:45:03:9B:A9:E0:E8:CE:86:AD:42:7E:5F:16:46:F8:E0:25:B4
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4e:1f:da:40:d8:cf:5e:6f:67:b9:25:e5:4d:b8:10:c3:a0:
a3:c2:65:5e:24:e7:15:8b:e1:26:9a:77:1d:ac:99:fa:53:49:
73:c6:ee:7a:e5:57:4d:1d:7c:10:41:f5:d5:84:73:c0:b9:5d:
4a:9c:e5:c0:51:d2:c0:cd:bd:9e:ca:93:49:cd:14:ec:18:ef:
e6:b7:c1:c4:70:56:47:7e:cd:2f:aa:00:b6:e8:69:51:6e:23:
e5:2a:1e:1d:4e:e5:f8:36:83:d5:95:80:a6:70:35:1c:2f:ca:
94:13:dc:8c:89:91:2b:b2:7c:de:50:35:e6:bf:96:d9:11:56:
58:56:57:66:23:e4:ec:39:1e:e1:58:80:9a:2d:a7:b9:7a:02:
37:4b:2e:30:9a:1b:9d:ca:53:d1:87:63:b8:93:3f:e8:63:77:
a9:e9:53:79:04:45:75:95:e7:de:d4:df:1f:06:a3:66:e9:80:
83:41:13:fd:b9:e2:db:a0:c9:2f:1e:69:0d:44:ca:b8:ef:73:
9c:cd:5f:c5:26:b3:e9:57:dd:aa:2f:9f:17:cf:3f:c9:a6:f2:
f3:99:37:b1:21:f3:44:af:af:7c:6d:82:9e:74:29:b8:e5:27:
d8:db:ee:8d:8b:13:f3:d6:32:84:77:ad:e4:58:48:08:49:ea:
14:b1:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:30 2026 by rpki-client