Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: d0EQ0q7laPBjXTcT8DJHdWo8voMf+eeuz7dzEBxXf3w=
Subject key identifier: E3:B3:96:B4:99:72:77:EF:0D:B0:7F:FC:FE:1C:42:AB:D9:17:63:0B
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019D29292BCC83B3004EF70EBBE7ACEA3843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
2: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: CIMMy0vX9v+vdD6oFekff97tGOggaDsEHNhivV76IKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2b:cc:83:b3:00:4e:f7:0e:bb:e7:ac:ea:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=e3b396b4997277ef0db07ffcfe1c42abd917630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:10:e2:17:6b:a6:ad:a8:ce:bc:53:e1:2f:d1:
88:68:c9:39:93:eb:ac:2b:e8:c3:4d:47:84:b0:5f:
db:d6:41:dd:d4:88:4b:18:04:c7:10:55:71:5d:06:
1c:33:35:2f:49:b5:11:2e:3d:0c:40:d2:34:67:e3:
b3:99:bd:9a:ac:92:bf:56:8f:c8:20:34:af:6c:19:
66:87:06:50:a2:23:cf:9b:25:ce:ed:2c:03:c8:90:
8b:ce:86:29:39:15:66:55:c0:91:7c:66:58:3d:d0:
7f:6a:33:af:3f:c3:6e:17:da:77:b9:f6:da:7f:b4:
20:6a:6d:c2:ce:9a:e3:bd:9d:a5:c9:38:a3:dd:92:
7e:6e:bb:13:b1:86:81:21:38:59:09:d0:58:70:52:
06:e3:44:c1:de:c1:a9:e7:d0:e4:1e:e6:26:60:63:
f2:59:f1:b6:99:3b:44:d6:20:c1:a0:17:85:8c:30:
a7:70:2d:d6:81:a0:78:b7:71:a9:f7:31:f5:7b:d9:
08:2b:f0:b2:d7:24:e6:89:70:7c:b3:53:28:ec:7d:
1c:f3:05:2a:fe:ec:f3:e6:91:02:37:7a:02:c7:e3:
c8:01:97:ad:e2:9d:41:68:5f:46:30:f8:26:5b:38:
fc:62:85:8f:98:41:0f:8d:9f:7b:94:43:0a:ef:84:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:96:B4:99:72:77:EF:0D:B0:7F:FC:FE:1C:42:AB:D9:17:63:0B
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dc:08:29:6c:3c:23:bf:98:b5:d6:b6:06:25:55:bb:ea:fd:
94:7a:3e:a9:19:c5:b2:be:88:2e:aa:77:44:47:ce:df:21:f0:
f0:ab:c8:00:bc:f8:60:d0:d1:39:ae:55:a1:5a:3f:f9:86:d3:
b4:6d:73:22:09:cc:38:dd:21:18:88:d2:36:72:d9:4c:d2:41:
07:5f:05:4f:f6:f9:1d:58:6a:65:3b:52:77:77:55:39:58:70:
be:fc:d2:93:e9:f6:37:b6:00:e2:56:b5:d7:c5:4c:1a:8e:92:
71:cc:12:5a:87:e1:b5:36:31:28:f4:b5:f4:a2:fe:8a:81:ee:
3e:d3:45:68:88:89:6c:15:6d:67:69:ab:bd:3e:45:89:4c:b4:
5b:93:ff:aa:69:2e:03:e8:da:ef:e8:ae:9f:da:0b:04:12:c3:
e5:fa:a4:ca:57:c1:4a:53:5c:30:be:1f:15:e3:4c:3c:55:0d:
58:ab:0a:f9:0e:1f:b4:95:7f:a3:a8:75:88:b0:34:1f:cb:61:
1c:f3:7b:38:0f:65:2c:c3:c9:fe:5a:dd:ea:ee:84:98:64:4e:
fb:fc:40:f4:3b:3e:19:f3:1c:bb:68:bf:02:b0:b0:32:aa:f3:
42:30:57:df:e5:f3:ec:3f:be:cb:b8:c6:d9:2c:07:d7:62:62:
35:6f:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:39 2026 by rpki-client