Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: ozv5C1Vdc7rmpByRRCNPYVo/kYcd6Wxd+u4pXCbMyR8=
Subject key identifier: 17:02:07:7D:E2:FA:77:79:DC:A3:AE:49:6F:AF:75:14:62:E0:C3:B9
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 019D2A3C34BA4D00E7607C4BAC33DA21B121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 12BF
Signing time: Thu 26 Mar 2026 13:01:21 +0000
Manifest this update: Thu 26 Mar 2026 13:01:21 +0000
Manifest next update: Fri 27 Mar 2026 13:01:21 +0000
Files and hashes: 1: qwC2Qa61-K92mibT4xQ6QPDFeGk.roa (hash: UFLL3aT7fmcKZdAjIGdfo8UCBZ0v+aHyEhVXBSuvgE0=)
2: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: iAYIEPyN43QSQI6hQ5IlXz0XF3+dZgk4wTo5wu+1syM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:34:ba:4d:00:e7:60:7c:4b:ac:33:da:21:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Mar 26 13:01:21 2026 GMT
Not After : Mar 27 13:01:21 2026 GMT
Subject: CN=1702077de2fa7779dca3ae496faf751462e0c3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:64:a1:22:fe:91:68:7b:d1:fc:a4:60:4a:
c3:63:ea:95:da:16:36:f6:a1:86:52:d4:fd:82:d6:
f5:be:d6:ef:c3:c6:40:3b:1a:77:84:be:60:08:3c:
a8:b9:69:43:67:5b:92:8e:e6:dd:68:f9:bd:d8:f5:
88:10:2d:ae:15:e2:03:88:1f:aa:78:e6:bb:70:4c:
da:2c:43:8c:ad:0b:d9:1f:ef:d2:57:0e:95:6c:34:
15:21:ad:1b:72:48:dc:c8:18:a0:da:1d:ac:57:bb:
88:9f:4a:ba:ab:42:b4:81:5a:83:7e:ee:69:a4:fe:
33:de:c6:03:a1:96:7a:80:7e:de:76:0b:51:d4:38:
5f:1a:96:91:83:52:5f:67:3e:41:f8:a9:63:f4:ea:
91:c3:58:9d:18:06:92:ce:9b:04:11:ad:5a:9b:62:
e9:1c:12:c4:c5:35:34:60:b0:76:fe:3b:2f:36:20:
8c:bf:58:47:69:f4:ee:14:bb:0d:fc:12:74:42:c3:
19:27:2f:9c:2b:08:26:69:3b:50:f9:79:31:bf:b9:
7d:4a:66:c6:88:36:c6:cb:1b:0b:8d:33:21:ca:d4:
90:32:7d:85:33:e8:28:7f:39:f5:40:20:cd:f5:36:
c1:48:85:64:4b:67:e7:52:8f:ff:4f:ad:a7:20:a3:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:07:7D:E2:FA:77:79:DC:A3:AE:49:6F:AF:75:14:62:E0:C3:B9
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7f:0e:46:ea:a9:14:87:d8:07:07:87:4f:0f:2b:da:33:58:
30:b9:d9:68:5f:fd:58:98:77:e7:21:8a:21:0d:88:e2:d4:ff:
de:c8:d8:3b:85:0e:78:11:fe:5e:ba:5f:be:3b:53:52:d3:a9:
dc:be:e7:83:0a:20:1f:db:29:12:78:09:07:bb:cc:54:8a:26:
f5:9c:be:a1:29:d8:f1:bd:c6:a5:e9:c3:ba:ff:77:11:fd:6e:
00:e0:32:5d:88:22:92:ac:74:ed:c9:7c:45:e3:fc:89:8e:a8:
a9:ce:8c:bf:54:e6:d2:51:34:11:fd:6b:e7:e1:82:c3:38:de:
9e:b6:41:0f:dc:2d:06:7c:6d:21:98:1f:b5:2e:7e:43:3b:dd:
f0:6d:3c:68:e8:cc:72:fa:02:1f:0d:10:c8:49:3e:5e:61:5d:
81:85:a1:cc:93:0f:dc:41:2c:d2:96:a2:26:a3:44:63:35:89:
6f:a1:79:41:51:2c:07:e7:70:8d:f7:0c:ca:75:aa:9b:b8:0c:
cd:c2:f3:31:36:76:ce:8c:9e:da:da:f1:dc:9e:7e:73:48:08:
fe:01:25:90:9d:21:4b:b4:ac:b8:84:e9:50:45:da:2c:f7:34:
6d:cf:6a:25:44:89:41:e5:46:d1:eb:9c:28:12:89:27:46:67:
8d:e1:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:59 2026 by rpki-client