Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: kU8edYYknebepElRPKwPwHWNujOMrxG8pTIvAKDumv8=
Subject key identifier: 3E:20:3D:41:19:B3:F1:E5:FC:D8:2A:66:37:AB:60:79:72:FE:D1:97
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019D2772B1778D8542E535B56C4621A4A836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: A6iHBsnqcj2Riil3U1_TXl2ABqw.roa (hash: wWCu1PETCholC6rFvWG+KWu2TvENNpa++dqGd7mDsM4=)
2: MQh6Wz2-8CGK9b8xrkIk2AZbqhQ.roa (hash: Vu6+oiBxaiIXPalKgvaptYqxpXWKSxP7AU+MBEut6Xs=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: TVRJTCvebW4s3ODf8wgvkjO9lU+guuQCh1uAqz3NK0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b1:77:8d:85:42:e5:35:b5:6c:46:21:a4:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=3e203d4119b3f1e5fcd82a6637ab607972fed197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:92:78:65:7e:f4:35:b4:c7:1f:e7:40:ab:
c8:79:4f:24:99:a7:f6:43:7e:c2:eb:89:fa:8b:ff:
ae:d7:95:25:cf:47:95:d5:95:fa:93:24:2e:34:c1:
64:a3:e7:37:b4:bb:17:b6:85:d2:2b:4e:29:9b:15:
fd:58:a1:72:33:00:84:2c:54:96:fc:7e:7e:69:a1:
a3:d0:56:04:5c:0e:43:de:4c:a2:0a:7f:db:3f:25:
59:cb:21:f1:4a:93:5d:22:9b:c6:87:71:5c:c8:c2:
75:cb:f0:94:29:48:48:e9:bb:51:c2:95:e0:c3:84:
e8:45:4b:66:f3:dc:6c:ab:76:e1:26:a4:dd:2e:f0:
76:a0:27:6f:23:cb:d3:6d:bf:f3:d9:0a:d7:b0:47:
50:b8:e9:1c:99:e4:64:54:6c:59:05:81:ae:16:99:
0c:1f:da:b8:75:d0:18:fd:40:f0:02:67:35:4a:5d:
4a:0a:f0:9a:c4:f7:78:94:62:e3:36:9b:77:15:a1:
05:52:b9:0a:38:4b:b3:2d:a8:50:e9:d1:a1:78:fa:
af:ce:f1:fd:09:7a:03:ff:04:a9:10:7b:c0:af:57:
c8:a2:8c:58:ba:b2:62:ad:56:f2:c4:5b:3d:e8:8b:
6d:ce:f2:ba:01:cd:2b:c1:f7:23:21:e5:ee:26:a2:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:3D:41:19:B3:F1:E5:FC:D8:2A:66:37:AB:60:79:72:FE:D1:97
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:38:75:af:be:5d:48:32:d0:b8:e9:09:aa:a7:b8:65:37:94:
5a:a0:8c:a4:b7:c6:da:5e:01:88:57:f4:59:0e:09:ab:83:70:
09:b5:04:f1:f2:c1:57:a2:65:3f:58:1d:91:08:e5:ec:a3:71:
f2:ab:57:f1:8a:e8:8e:f3:32:47:e2:1e:40:82:44:62:e3:a5:
a3:a7:63:c7:12:82:f4:5b:19:aa:1f:a3:c4:6c:cc:7b:11:2d:
35:2b:e4:38:17:6a:1c:bd:88:29:74:ed:48:82:e2:ea:6e:30:
a4:e9:d4:a8:15:f7:f8:70:e0:7b:8e:fb:08:09:db:a0:f5:0e:
8f:10:3c:ac:f8:37:a5:f9:a7:f4:bc:d8:e6:07:c3:2b:94:43:
dc:58:5b:62:a2:95:ec:c2:84:ad:23:ea:86:42:48:a5:b6:fb:
31:3d:d9:b3:39:c9:e7:e1:44:25:dc:c4:52:06:d5:ef:0e:37:
32:14:39:e3:c8:33:46:7f:79:39:9e:e2:dc:45:f3:4d:35:ba:
38:89:43:18:86:8c:a7:56:ba:c2:fe:c5:b9:b7:d9:b9:10:c1:
08:df:28:53:58:4a:98:1f:da:96:fe:6f:72:eb:bd:cc:f8:eb:
a3:b6:e3:3a:85:16:5e:1a:f7:de:9e:e7:00:10:f2:b0:3a:b7:
d9:fe:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:15 2026 by rpki-client