Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: ajTHk+Mm9IPd/n7BGLGOSlUxETt2Rifk1K/RDO17Jb8=
Subject key identifier: D0:48:30:19:5E:C5:FD:9C:FD:54:69:FF:5D:00:A6:DC:EB:38:66:7D
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 019D27A8797202F72848293F7FD506D934CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 01:00:45 +0000
Manifest this update: Thu 26 Mar 2026 01:00:45 +0000
Manifest next update: Fri 27 Mar 2026 01:00:45 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: bIinJLmEzLeWksTpmsTfC3MH37fIDW359BcqXP5KMyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:79:72:02:f7:28:48:29:3f:7f:d5:06:d9:34:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Mar 26 01:00:45 2026 GMT
Not After : Mar 27 01:00:45 2026 GMT
Subject: CN=d04830195ec5fd9cfd5469ff5d00a6dceb38667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:95:7e:5c:4a:07:00:23:2c:25:d1:1f:df:
89:c9:0d:89:3f:0c:e6:e3:4c:97:a0:5c:f8:4e:d4:
13:76:6b:df:fe:34:4c:02:63:70:f6:57:82:89:67:
8b:26:15:b6:0d:53:d3:0c:57:20:ea:1e:99:b0:ae:
cf:88:5c:1d:f0:50:13:4d:7d:67:07:c1:da:3a:09:
bc:86:08:77:f7:52:fe:4a:4d:b9:a2:0e:91:fe:0f:
a2:ed:d2:c9:2c:84:83:8e:28:74:b9:99:91:68:9b:
51:d4:fd:4c:83:57:07:0c:e3:11:b3:96:55:16:5a:
3b:fd:2f:3a:46:55:2b:d4:52:35:c6:93:72:e1:aa:
bc:89:f9:95:65:51:21:b7:47:34:da:5a:d4:e7:75:
87:e1:5b:fb:e0:2a:c4:ac:a7:3a:e0:07:89:fd:94:
5b:6f:85:fd:43:ce:8b:1d:8a:5b:5c:6a:e1:bf:e9:
9d:b6:09:73:0a:ed:80:f9:f2:6f:65:62:4a:0e:2f:
4c:2f:d1:16:4e:b6:db:35:c2:c2:29:fa:6f:6f:1f:
fd:ce:d2:ca:7f:dd:dc:a9:ee:7d:d0:b3:a3:53:05:
93:bb:d6:82:88:1b:c6:29:48:35:1f:f4:72:6f:8a:
7f:ac:5c:28:83:9e:e5:2a:5b:a6:1a:70:29:d3:28:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:30:19:5E:C5:FD:9C:FD:54:69:FF:5D:00:A6:DC:EB:38:66:7D
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ec:13:26:15:db:f5:73:55:89:7c:0c:b1:5f:16:67:e0:93:
74:2e:c4:d5:4d:39:35:4f:0f:2c:1b:5b:47:eb:22:2f:98:57:
b7:53:97:ad:03:85:53:33:30:74:de:98:48:c7:2f:e2:ae:07:
3e:ef:44:49:b7:6e:61:45:65:bc:95:e5:23:86:45:6c:ce:8f:
e4:97:e8:c7:06:76:15:18:25:21:09:a8:ec:c1:bc:f5:70:c3:
01:a2:de:cd:30:5a:de:dc:c8:f9:36:9f:b2:55:f2:fb:28:2b:
5e:9e:9c:8e:d5:3c:44:ec:85:56:5c:80:82:b3:79:ed:af:fd:
00:a1:95:97:8a:a8:b9:dd:f4:67:09:72:35:c4:7d:ad:02:f5:
5a:f4:f9:b3:2c:06:7a:ce:6a:f0:f7:b3:d1:f2:c3:f1:b9:a7:
61:64:0a:8c:3b:21:cc:98:7a:6a:46:68:96:77:7b:87:18:b7:
40:17:18:86:30:8e:66:3d:d0:95:5f:8a:e6:e6:a2:74:df:38:
26:2f:88:fe:9f:0c:23:51:11:58:39:8f:e7:7e:ed:2f:72:bb:
bc:de:b5:24:3e:67:9c:63:a1:26:a5:5a:12:46:ea:a7:a3:9e:
f2:4a:bc:f3:59:a7:cd:f6:49:c0:0b:fd:f8:a6:76:32:6b:ef:
32:5a:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:19 2026 by rpki-client