Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: R8M3hpf6dFNYhUscleTXHhBdmEZ0LLkWZrexx+GEnko=
Subject key identifier: 03:B6:97:BB:D6:83:25:65:01:8C:67:99:7E:27:86:8B:32:E8:00:00
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 019D28F2E49312BD9A843B5EF763B60C468F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 0BA8
Signing time: Thu 26 Mar 2026 07:01:40 +0000
Manifest this update: Thu 26 Mar 2026 07:01:40 +0000
Manifest next update: Fri 27 Mar 2026 07:01:40 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: n76lsY5VyAa/Z0ZOUZNcemtmxMXOl3t2rEkxpmvg560=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e4:93:12:bd:9a:84:3b:5e:f7:63:b6:0c:46:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Mar 26 07:01:40 2026 GMT
Not After : Mar 27 07:01:40 2026 GMT
Subject: CN=03b697bbd6832565018c67997e27868b32e80000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:5d:17:00:08:5b:2c:5d:5d:88:af:94:97:
a2:4a:ab:2c:c8:69:d7:1d:56:92:91:b9:d1:35:9b:
4c:d2:4a:fc:0e:f0:35:30:6f:2c:a9:97:11:f2:ab:
50:46:9f:c6:6f:4b:41:c9:c5:7d:fc:24:1e:aa:18:
9a:3f:4e:d3:a9:aa:00:5d:e0:36:c6:37:e1:cc:3e:
a4:64:df:5d:2f:86:ad:96:19:8e:f9:97:69:6d:c2:
92:38:dc:de:fe:58:3f:b1:dc:3e:f9:bc:79:9b:7c:
f8:8a:27:a3:c3:fa:4e:fe:bf:22:fc:20:38:6d:30:
61:d4:db:8a:ef:e5:bb:77:7b:c4:a7:fe:e9:b8:39:
52:75:71:19:a1:62:55:e6:63:c5:06:5b:20:eb:f8:
35:1f:81:81:f0:d1:68:22:34:0b:fa:43:84:e5:90:
66:14:31:88:5f:de:37:17:15:ff:9a:c1:a7:2e:55:
c1:a3:51:ce:9f:4a:dc:ee:6b:1b:c4:55:b2:4d:a4:
8b:74:82:86:9c:0c:ca:c2:fc:db:8c:7b:c2:26:4c:
77:81:f4:6b:e0:e1:f2:7c:63:62:cc:4b:81:b9:2e:
90:3c:17:e7:87:f9:0e:79:57:bb:71:98:d7:1c:41:
80:0c:ca:12:5c:2c:ce:06:dc:10:59:35:50:00:ab:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B6:97:BB:D6:83:25:65:01:8C:67:99:7E:27:86:8B:32:E8:00:00
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c0:6a:46:11:26:58:a9:3a:7a:2b:f7:3f:95:a0:8a:16:64:
b8:20:8e:91:38:d8:77:71:e4:88:7d:c8:fa:f1:80:0e:36:20:
14:fd:e2:94:f5:63:95:fe:63:35:98:f0:71:78:5c:e9:cc:c6:
c7:55:cb:8f:17:0b:78:ee:18:de:57:6c:97:1b:c0:20:ca:e6:
05:38:47:ca:1c:79:88:be:82:d8:0d:36:ad:82:54:77:90:dc:
ad:0b:22:80:a8:e1:d6:33:8e:30:97:74:a5:f0:28:df:9d:2c:
c1:64:72:f6:a2:d7:65:82:20:95:ae:96:11:53:9c:dd:b2:46:
b0:c4:78:28:9b:c4:9d:8a:3d:55:f9:54:19:56:1c:44:2b:96:
a9:97:e4:37:d6:b0:2d:60:50:f9:27:3c:20:d6:dc:2f:b6:6e:
57:b2:39:4d:51:46:25:01:ba:9f:a6:f6:71:f4:7d:7d:17:84:
97:bd:9a:cc:79:72:5d:1b:81:ee:eb:03:34:04:86:b1:6a:b9:
e3:34:bc:2a:b8:a0:a6:0c:aa:5f:89:1d:f8:16:c4:51:b6:f3:
58:c1:b0:91:7d:6c:0e:aa:c1:e5:ca:5a:ad:f4:1e:dd:10:98:
e0:5f:fc:4c:21:92:61:1f:90:7a:45:37:14:66:cc:47:75:25:
21:69:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:59 2026 by rpki-client