
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: qkyxY5XhKIYj81miVZZJrZlwGxrDji7qIG7iH5bFU00=
Subject key identifier: 1B:2E:F0:4A:BE:7D:BB:44:65:DF:E4:CC:32:7A:6E:34:EF:17:D6:DF
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019D25F180F76B8D510D59D8780733599C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 164C
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: UIy9gUZXV88enoE-3KFhIHspXtA.roa (hash: 8X5vRqd+KBox7ge2TIXCQWKZfqoX627wmgj0tLtcDE8=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: JxSAQvSTRELM0Nta9lHlcoVo8RN/3wo2vJsfxv4813Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:80:f7:6b:8d:51:0d:59:d8:78:07:33:59:9c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=1b2ef04abe7dbb4465dfe4cc327a6e34ef17d6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:df:33:8b:68:49:70:94:4a:bb:6c:b5:27:
d0:68:f8:25:0c:9c:3f:64:bb:3c:34:84:12:e9:2a:
03:70:16:22:75:cd:f2:75:65:70:c5:98:ad:0c:ee:
5b:d8:f6:e4:02:be:de:b9:f1:39:cc:99:59:e4:55:
75:85:2f:24:01:85:24:d1:dd:b8:5e:dc:4e:44:57:
41:63:63:c5:f2:86:b8:05:5a:70:83:b4:cd:f9:35:
8a:c0:e4:10:4d:84:0d:24:9b:7d:c9:07:2a:50:4d:
36:bc:e5:9d:5e:70:1d:2f:b1:ce:bd:fe:9e:29:9f:
d6:2a:1e:07:1a:83:f6:59:34:b3:4f:99:a6:ae:a3:
f3:bf:2a:ed:d6:ea:66:ec:b9:9b:00:93:8b:2d:f2:
4f:38:c6:55:2e:36:9f:b5:c6:96:b4:69:17:da:10:
e4:eb:51:a4:c6:fa:bd:11:0b:9e:96:f0:65:69:b8:
5c:e6:ed:46:34:61:e8:01:44:89:f2:99:9f:4b:a1:
e0:a3:13:d9:c4:1e:1c:2a:6f:4c:92:8a:60:8d:d0:
80:d0:b8:71:2d:3b:70:ed:70:ee:ee:ec:24:c7:1f:
b6:31:cf:ad:27:66:b2:8c:98:17:fa:0d:2f:e8:7a:
0a:34:22:a1:c7:06:2b:4a:1f:5c:39:d7:e2:b7:d2:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:F0:4A:BE:7D:BB:44:65:DF:E4:CC:32:7A:6E:34:EF:17:D6:DF
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0e:37:45:31:6d:2e:35:71:4a:ed:fa:12:0b:ed:c5:7b:6c:
8f:d5:25:bb:49:f1:19:c2:e9:c4:ef:c4:8c:a3:c4:31:38:ac:
aa:37:1a:9a:63:57:d2:a9:e0:be:07:ae:d6:45:7f:31:77:aa:
8a:3c:17:72:e2:8d:3c:3d:7b:3b:b9:87:ee:d6:22:71:54:12:
5f:fc:cc:a6:2f:a0:30:82:37:4f:9a:58:95:2e:fe:fb:40:bd:
b9:6c:b5:91:12:d8:10:0a:de:98:22:ac:0d:f1:8b:49:8a:8d:
96:71:bd:66:de:d9:a8:eb:94:34:c1:21:56:69:64:b1:cb:44:
af:46:ed:8c:b1:a5:0d:e8:7c:d2:59:d2:82:eb:e9:12:b7:d9:
02:dc:ee:7f:47:9e:bb:e4:52:1e:ac:4b:8a:b2:42:eb:80:45:
bc:b9:90:9d:20:d9:36:0c:b8:20:76:83:d1:95:c9:6c:26:14:
fd:40:3f:fc:16:31:bf:cb:34:80:0e:da:29:0f:0d:ce:f0:61:
90:47:b1:a3:ee:e8:29:ac:2c:1e:f7:86:bd:5f:31:7e:6a:de:
36:e3:f8:f9:b4:79:db:21:30:b7:5f:1d:8e:5e:43:a6:fa:98:
35:4f:6c:fc:99:3c:c8:ac:22:62:b2:a8:27:54:05:d1:b9:f7:
b3:52:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:18 2026 by rpki-client