Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier: zkSpXJiwSXR5VsJo8sJ0mFdYJ8rSw8kcGCW7vzYm6MU=
Subject key identifier: F5:80:7B:80:ED:8C:E1:C0:33:9F:8D:08:67:57:AC:1B:7D:7F:75:FB
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 019D284DDA39A07DF6788EBBE4407F2C5DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:23 +0000
Manifest this update: Thu 26 Mar 2026 04:01:23 +0000
Manifest next update: Fri 27 Mar 2026 04:01:23 +0000
Files and hashes: 1: 8EMMRLq1ba74wsT5jVIHYHbcc00.roa (hash: OWkinLuII34KhV3crRd1+k5jvfaxcPKAbZAj2n4o9vI=)
2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: M4CEJsPXp9a1AVmm/MLrxQFR9fysfeN50wwoXswGJ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:da:39:a0:7d:f6:78:8e:bb:e4:40:7f:2c:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Mar 26 04:01:23 2026 GMT
Not After : Mar 27 04:01:23 2026 GMT
Subject: CN=f5807b80ed8ce1c0339f8d086757ac1b7d7f75fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:c4:7a:46:2e:a4:89:f5:81:fe:9b:72:53:
2c:67:b8:8f:f3:68:5b:bb:a6:e1:63:49:4c:62:d6:
d7:b8:98:da:d3:b3:8e:47:ff:9a:04:d1:2e:a9:30:
a6:32:48:b9:58:a0:4e:f7:6f:5b:cd:48:87:4e:b0:
80:a8:30:3e:70:b4:d9:46:04:7d:0b:7e:b1:9f:ba:
01:b3:61:2e:1d:14:ca:48:d4:3a:62:20:f3:3e:e3:
2a:ac:a9:ec:75:26:cf:6c:65:5e:be:d2:2b:36:82:
0e:f9:9f:e8:29:d7:7d:31:6b:60:25:a2:f9:aa:b8:
4e:f8:08:50:3c:09:04:1b:9b:9b:e6:54:19:a9:fa:
04:30:76:8e:93:f9:62:2b:1d:e4:a8:b7:99:b7:7b:
ae:91:a0:3d:f4:86:d8:77:c2:5f:80:67:5e:35:18:
e8:28:11:b2:fb:2a:a1:42:d0:2b:2c:ee:73:69:97:
e9:81:d4:dc:f0:71:ba:ea:1d:0b:91:cb:73:f0:58:
cf:f5:7c:35:76:9a:5b:a8:59:7f:14:88:51:9f:21:
c6:93:a3:76:7d:9f:67:f0:ac:a3:46:a3:63:a8:76:
d3:56:f1:00:1e:bc:36:84:73:2d:d3:31:1d:32:dc:
4b:d1:6c:e8:d6:2e:8e:9d:bc:de:f9:24:87:e2:6d:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:7B:80:ED:8C:E1:C0:33:9F:8D:08:67:57:AC:1B:7D:7F:75:FB
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:f6:bb:97:ba:bb:f8:ce:3f:6c:d5:da:a9:01:69:5f:06:
b2:26:ba:f9:d7:79:41:1d:e0:7a:01:57:15:ff:af:4b:81:27:
4e:0d:b6:71:10:ef:80:a8:d8:71:ae:4d:a6:44:d6:68:70:84:
a1:00:e2:6e:09:89:d6:ed:bc:76:48:9c:98:ca:89:2a:30:8a:
25:21:8c:5e:df:0f:bb:a0:e1:9f:de:6b:0c:4d:08:d7:59:52:
1b:1e:db:16:6c:71:bf:95:1d:27:38:98:e7:df:77:8e:2f:a0:
d2:94:fa:52:df:eb:9d:b8:08:22:0d:9c:23:c8:25:6f:c5:2c:
9b:21:c1:24:e0:e5:c0:74:fe:5d:54:67:ed:7e:d4:90:6c:65:
5d:8b:45:71:77:96:d6:00:b4:b6:9f:1f:78:c5:52:41:d4:a0:
ab:d3:0d:2a:5f:2e:39:ea:c3:59:88:86:39:6d:d2:08:b1:f3:
e7:9f:b8:12:d3:d1:58:b6:1a:e6:3c:ee:7b:e1:ce:8f:11:6c:
df:f0:17:7d:c8:56:81:dd:d2:f4:7c:55:cb:b5:5a:1e:08:df:
98:25:aa:af:6b:81:1e:30:5b:80:5d:08:d1:63:e1:e7:22:e5:
23:f4:41:5f:a7:5c:7d:77:14:36:c6:40:a2:71:05:40:61:5a:
cc:8f:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:09 2026 by rpki-client