Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: OyLN45s3EHXZ2TKItK6wUi4ZwpKhv/lVRx+oMmkqNO8=
Subject key identifier: 8F:70:72:6C:0E:29:5D:BD:FD:64:82:DE:EC:00:9E:75:E2:FF:B6:A4
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 019D2AA93E6403F1C11A232DC4029F80ACB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 15:00:27 +0000
Manifest this update: Thu 26 Mar 2026 15:00:27 +0000
Manifest next update: Fri 27 Mar 2026 15:00:27 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: UaelJRGNSAZ5wP2GHG0kFwRwZyt0OCMgzyc4wl/k+mg=)
2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:3e:64:03:f1:c1:1a:23:2d:c4:02:9f:80:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Mar 26 15:00:27 2026 GMT
Not After : Mar 27 15:00:27 2026 GMT
Subject: CN=8f70726c0e295dbdfd6482deec009e75e2ffb6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:ef:95:0b:57:99:1a:67:dd:54:f8:8f:81:
26:dd:9a:db:b4:1c:9a:af:ff:da:4e:05:cd:87:ac:
04:f6:69:b9:d6:a9:3e:2c:61:b0:b2:5a:2d:45:a7:
04:99:08:71:c9:c3:23:c9:5f:3b:9c:c8:cc:c5:e8:
9f:05:76:ed:ea:47:39:a8:ed:35:f1:a3:35:09:ca:
d5:98:4d:4e:5e:74:ec:93:12:a4:44:10:d4:59:6a:
7b:0d:a0:56:c4:36:e0:3a:b7:ef:2a:e5:3a:b2:b1:
f1:6d:1f:a2:65:90:a7:58:be:29:e4:1e:b6:f1:2f:
a0:f3:af:5b:45:f5:64:8a:e8:f4:0d:0a:c7:eb:38:
6c:a4:da:43:66:e7:b5:e9:df:5d:25:72:17:df:db:
d0:ce:8e:86:df:66:59:b7:ab:3b:28:d5:6c:e0:d2:
75:6f:9a:6a:50:fd:59:da:41:61:7c:6a:b5:d8:9b:
a0:fc:21:0e:9b:c0:55:ca:42:9c:31:4f:d4:56:b2:
4e:f0:6f:b6:02:a2:16:62:28:61:0d:5d:cf:f4:1b:
c3:e6:27:0a:c2:b3:8e:78:16:04:34:5f:c7:01:4e:
bf:41:6f:29:8e:bd:03:bd:b5:08:c6:c1:df:a3:c0:
6a:d8:76:74:b1:a6:e6:54:84:c3:88:9d:b1:13:bc:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:72:6C:0E:29:5D:BD:FD:64:82:DE:EC:00:9E:75:E2:FF:B6:A4
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0b:98:1d:a5:27:f8:d3:32:36:fb:da:a7:2a:c0:5c:b3:70:
a6:ba:aa:84:08:e4:eb:24:1f:bd:45:0d:78:43:b4:b2:ed:34:
30:40:74:8d:f7:14:24:6e:1d:1e:8a:19:ad:18:5f:3a:0d:af:
c6:63:e2:cb:83:a2:6c:e5:16:b9:b3:d1:17:4f:4b:0d:48:7a:
16:b6:60:9a:67:de:cc:a7:6c:11:33:72:c4:55:5e:33:bf:c6:
0e:e6:6f:eb:e7:97:e6:4e:89:88:98:a8:63:d9:71:07:af:16:
c2:79:30:d5:6d:e5:dd:0d:8f:be:53:17:dd:21:86:cf:9e:4f:
88:f3:13:ae:75:0b:7d:f9:7b:52:12:cc:c0:ae:c4:5e:5b:b8:
86:36:6a:c5:18:1a:1c:7c:19:86:5a:43:f1:20:cb:3d:23:51:
d3:2f:99:31:84:dd:54:42:b4:a6:99:d7:90:92:a6:68:06:01:
7d:11:2f:ea:19:f2:43:e5:da:bd:35:a5:93:20:bf:75:ee:e5:
a0:a5:17:8a:f5:4e:49:32:47:de:dc:64:73:12:3f:fb:98:f4:
c1:65:df:ef:64:a3:0f:af:a8:13:ad:5d:73:cd:e1:d8:cb:4a:
f7:0b:65:9f:ce:2b:d5:74:4c:9a:4e:9a:44:b6:05:0f:b3:7a:
f2:72:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:38 2026 by rpki-client