Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier: Nh/0KFY0Xe8byn1gdFUs+tLc23lviV9VqvwvAxfP3XM=
Subject key identifier: EF:4B:FB:45:64:A8:50:42:93:DC:A4:6C:68:D8:7B:EC:F5:31:09:50
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 019D2929B9D7A1FDBA7FC821D98756F6F17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number: 09FD
Signing time: Thu 26 Mar 2026 08:01:33 +0000
Manifest this update: Thu 26 Mar 2026 08:01:33 +0000
Manifest next update: Fri 27 Mar 2026 08:01:33 +0000
Files and hashes: 1: 5x2-8garOOilf6io7nZnF9dIZSA.roa (hash: hdj3plspymuwOcIm8tESK6Qn+W8Q6cC5cyX/oC/V1CQ=)
2: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: oUw8XXxR3s395M0l9Fkrd5D7+Oc40KJZvS3B/pTe1Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:b9:d7:a1:fd:ba:7f:c8:21:d9:87:56:f6:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Mar 26 08:01:33 2026 GMT
Not After : Mar 27 08:01:33 2026 GMT
Subject: CN=ef4bfb4564a8504293dca46c68d87becf5310950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:23:79:ac:ea:19:74:c5:1a:95:29:f0:dc:
77:e6:4e:ba:7d:83:b9:60:a7:7c:b6:4a:6c:0c:a6:
e7:08:da:03:f0:db:ca:91:2c:6e:4a:ed:b8:4e:a0:
9a:72:84:86:26:d5:06:08:58:aa:26:a9:c3:52:21:
27:d1:30:5e:c8:cb:95:37:65:09:44:fd:0c:71:81:
16:17:58:85:4b:51:51:c5:41:9c:f0:5f:73:94:b4:
ca:c2:ed:49:96:4e:41:ef:c1:b1:57:ba:7f:af:62:
a6:7c:2a:2b:c2:f2:d7:ae:6b:ae:3a:f2:7b:84:38:
76:f1:3c:0d:81:51:0b:64:da:e9:44:72:0c:df:6c:
9e:11:a6:f6:cf:c7:2a:a0:39:47:a3:9a:b9:3b:2a:
d6:fa:5b:d0:22:50:1f:33:90:6c:45:78:dc:34:2b:
88:f3:fd:18:c0:11:c2:a5:b0:a2:e2:0f:7a:51:8b:
19:b0:4d:7f:c1:86:88:11:56:7b:8f:dc:2b:dc:3b:
1d:f5:e9:0c:f8:04:84:11:ad:37:06:6c:8f:22:d7:
ed:49:4f:c5:11:07:aa:cc:48:5a:8f:24:d0:c6:2d:
40:5a:b7:6c:0b:e3:23:5d:5e:e3:8a:62:ed:9a:f1:
3d:16:48:34:7b:a8:56:9c:a5:a6:94:46:1e:1a:37:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:FB:45:64:A8:50:42:93:DC:A4:6C:68:D8:7B:EC:F5:31:09:50
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:21:29:0b:61:08:b1:74:7a:c9:49:fb:40:ca:bf:fe:3b:e3:
fe:5d:f0:13:49:9e:61:0a:68:c5:b3:7e:34:bd:c0:cc:a8:92:
9d:00:8c:a4:45:ed:0c:70:a9:6f:59:fc:0a:ea:07:1b:86:05:
87:b9:68:5b:70:7f:12:15:2d:cd:db:88:52:1d:4d:07:51:b8:
ad:91:08:a7:ee:66:ca:de:4f:85:69:5f:df:87:c6:01:15:b7:
84:f4:a5:7e:ce:6b:f9:ac:3a:40:74:dc:06:74:43:26:7d:7f:
40:2c:72:2e:da:28:b9:ee:39:a5:d0:61:05:21:60:ca:2e:f2:
99:88:b3:dc:34:5e:8a:c3:bf:15:bd:a6:e6:ae:13:c7:6d:95:
79:06:50:22:ba:10:8a:39:fa:b0:d9:9d:1f:ad:69:f8:a3:bc:
61:d2:fe:64:86:3f:3b:ed:1a:47:28:1f:55:3f:29:70:8f:67:
9b:24:9f:1b:e4:d0:b0:c1:8b:d9:c3:72:43:c8:39:b4:e8:60:
b9:8a:7c:bd:ae:b6:61:89:1c:46:b5:20:1e:c6:29:71:97:24:
16:08:32:ee:eb:db:03:d0:1d:19:6d:05:62:86:4e:8e:16:71:
bc:ee:cf:26:fe:c6:ae:3c:d4:8e:c9:e7:a4:61:18:3c:de:87:
3b:60:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:48:59 2026 by rpki-client