Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: tEhbio5NJncH4BJ9MlTxcK4uPMByWUDl2M8L9Rs04k0=
Subject key identifier: 5F:2C:28:DE:88:3B:88:59:36:44:2E:FE:F9:FA:05:4B:73:77:34:74
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 019D2960DAB15FBAAB8079A2295C2E16A690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 0AED
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: vF/uRHQ+AYSPLGVblRPPAcYJSSYzjYXdYr9WNhbt6qo=)
2: wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa (hash: TYdOeOy0mx3TMxWyBFFWn8nDjGPanVPmVWlj7zHMp90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:da:b1:5f:ba:ab:80:79:a2:29:5c:2e:16:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=5f2c28de883b885936442efef9fa054b73773474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:59:53:fc:de:cd:fb:03:72:73:d7:98:3a:
0d:05:a9:b3:14:72:7b:88:74:79:29:e7:59:48:7e:
35:ca:a2:d1:3e:77:30:78:62:fc:8e:a4:c2:4c:81:
ca:35:43:ca:5f:7c:68:e1:77:7c:66:ab:7b:1e:b7:
85:bd:c6:0d:ce:44:97:7b:b6:27:54:6d:46:dd:30:
61:12:63:66:04:91:92:cd:05:ef:c5:10:54:ad:0b:
d2:98:34:bf:05:09:4c:ed:a4:49:2d:d8:ff:2e:59:
5a:35:ba:14:36:c5:8b:38:7d:b9:8a:61:2d:b0:04:
a2:69:0e:75:56:9c:54:36:3a:80:35:4a:40:e1:9f:
1d:93:ce:53:b7:b9:f7:d0:7c:0a:03:fd:5c:13:f5:
4c:4b:cb:f3:bb:1e:52:3c:fe:ed:2c:8f:95:ec:11:
1a:0e:0e:b7:84:25:87:3a:a5:d5:bc:cc:61:4b:03:
d0:db:48:a3:73:af:a9:72:9c:7d:92:58:96:04:fa:
7d:17:62:44:a0:da:cf:6c:91:41:f4:45:5b:e7:27:
34:73:47:0e:c8:dc:b9:be:9f:96:aa:20:66:75:f9:
5c:91:bb:b1:05:3c:e8:3f:9b:08:c7:1a:70:dd:3d:
82:f7:c6:39:b1:4c:b5:0b:50:3e:64:cf:69:8c:bc:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:28:DE:88:3B:88:59:36:44:2E:FE:F9:FA:05:4B:73:77:34:74
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:1a:fb:16:ef:dc:63:b2:ad:f9:6d:66:c5:3a:c4:83:12:
52:39:0f:7d:0f:5f:e5:e4:13:01:31:9c:47:26:03:4a:e5:b6:
87:65:93:9f:de:29:ec:c6:aa:b4:21:14:c2:d9:f3:fb:17:ba:
62:c3:79:49:ce:11:cc:8c:47:96:82:37:30:c2:b0:4a:92:e2:
4a:21:4b:53:4a:6b:79:ba:07:02:64:c4:68:80:5d:4f:ab:aa:
3a:ff:c3:11:e8:36:ea:27:f8:72:9b:60:ef:ce:a5:f9:c9:c0:
cd:7c:cd:7f:b0:7c:94:2d:1f:cb:73:3c:69:a6:bb:82:79:3b:
12:44:be:bb:72:e8:93:36:b5:0a:4a:3a:ef:b5:e9:eb:a8:aa:
52:e5:c5:a4:bf:43:4c:9e:a3:93:6a:72:d5:6b:99:00:8d:6a:
ec:c7:33:70:a6:82:0d:21:fa:15:e9:53:0a:be:fd:b6:5d:26:
ee:15:eb:d7:13:72:3f:87:6b:ee:31:64:95:1c:87:11:ec:6f:
d6:be:07:5d:52:02:98:f9:3f:0f:f5:38:c6:83:c4:c3:3d:62:
b4:a3:e6:63:85:37:1e:08:b0:cf:f4:d9:74:5a:b1:56:c8:b7:
3c:d4:79:d1:dd:91:7c:f1:e5:9e:95:b2:6c:61:c1:a6:c8:35:
7d:f4:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:38 2026 by rpki-client