Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: 0vHlm7UBtPme5oACwwWptBO8Rq+bijoBhx2NaR+BFkQ=
Subject key identifier: 91:B0:8A:B5:54:46:C4:BD:D2:E2:6A:88:AC:A8:37:9B:B3:6A:0A:0A
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019D27E002742DBF7C84CC7A8D1FBC719C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:25 +0000
Manifest this update: Thu 26 Mar 2026 02:01:25 +0000
Manifest next update: Fri 27 Mar 2026 02:01:25 +0000
Files and hashes: 1: 0077uC1iCNPi-kwOujwsZ8frO5Y.roa (hash: qDkQY0n1EPoxmy8QXmSxuAMRtBldxO3WD2gudtx59D8=)
2: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: XDjM+ZajgY86XrK9AXN5B7ZeZQkzqr6+EsgEk60CFSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:02:74:2d:bf:7c:84:cc:7a:8d:1f:bc:71:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Mar 26 02:01:25 2026 GMT
Not After : Mar 27 02:01:25 2026 GMT
Subject: CN=91b08ab55446c4bdd2e26a88aca8379bb36a0a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:26:c5:12:4d:a4:2d:1a:94:77:c0:c9:fe:
4a:1b:e1:e1:93:b0:9e:27:05:cd:ed:8f:58:a6:3c:
17:4e:93:57:36:c0:d8:8d:bc:ae:b7:cf:ed:89:bd:
62:9d:46:a2:c2:19:02:62:0a:a8:4d:8c:87:55:50:
0c:3c:e4:92:1c:cb:a0:ab:49:cf:40:bd:47:e6:7b:
5f:13:17:4a:2b:e0:f0:33:8a:5f:a3:88:0a:53:a4:
0d:fd:fe:8e:9d:e5:54:5b:87:d5:01:66:e5:e9:c3:
8d:b9:78:11:f7:b2:14:18:60:a9:9c:11:27:6d:ce:
a5:1b:f9:da:70:78:27:3c:00:80:35:99:0e:23:c1:
18:e1:70:3d:ca:65:ae:16:f6:0d:02:7c:ce:18:2b:
d1:03:32:1e:e3:b7:25:db:58:ab:9a:7d:00:ef:26:
8f:73:74:5a:31:13:7e:18:e7:33:e6:f4:58:cd:83:
6d:e1:60:18:c3:a1:d0:1d:3d:26:61:58:a1:b3:a9:
cc:89:4b:95:a5:90:0d:56:c7:85:c7:92:f4:72:fc:
cd:fb:33:c3:aa:a0:e9:5f:19:08:48:7f:36:05:db:
e1:8a:12:93:b4:6f:f4:40:71:4a:eb:7e:34:ab:3a:
d5:c4:c7:b8:c2:f4:83:90:72:b4:ba:a1:ba:d1:23:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B0:8A:B5:54:46:C4:BD:D2:E2:6A:88:AC:A8:37:9B:B3:6A:0A:0A
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:42:01:1d:05:b6:de:09:04:0a:ca:73:0a:3c:72:04:e9:c8:
0b:71:98:c8:91:8f:a4:92:cc:82:b8:89:d4:9b:d3:fe:9d:34:
94:c8:61:fc:24:29:4e:4d:99:d6:5c:d2:05:27:17:88:8c:83:
08:e9:47:d6:a7:64:bf:8e:c1:69:ad:b8:bb:b5:c3:04:6f:51:
c8:26:0a:36:0a:67:56:ea:2d:26:21:8b:cf:ef:93:7a:86:f6:
c8:97:25:1f:71:3f:c8:b4:dd:ca:9b:fc:63:07:c5:2b:a6:c0:
75:c4:2b:b3:41:eb:81:04:bb:af:3f:28:87:c3:bd:40:20:3b:
5c:dd:42:d0:b2:72:33:2f:46:8d:a4:f8:b2:27:dd:b3:0c:f8:
bb:a6:c7:52:6b:8a:9a:22:b1:4d:73:c3:88:f1:17:d1:8e:7e:
37:b2:6a:95:57:dc:17:43:63:a9:ed:83:5c:69:54:2b:be:5d:
04:91:70:3a:3c:e9:b6:fc:b0:36:28:75:34:46:d3:58:93:7e:
87:85:8e:f4:21:f3:18:82:77:9c:d7:72:f6:f7:af:bf:be:7f:
9b:f8:62:1f:5f:ac:8d:f7:da:14:d9:8e:29:42:12:e4:0a:bd:
7d:a2:6b:71:9e:9d:19:f3:e4:ca:e0:d3:88:8e:cf:ea:4b:46:
88:14:73:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:32 2026 by rpki-client