Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: gQlDj6xZZZ07MvixFV9SNVLZHmKtU7LWIc6vY31tibw=
Subject key identifier: 12:7F:10:89:74:96:C4:8E:E9:5B:AE:49:C7:B9:FC:FD:91:79:92:B1
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019D27E07CEE5BABCE5BC34D9E4D86FC6EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0798
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: MNoCChtHQ3w9WbmD0mXYFIf8JSdUkon9EDFtOxWaBuU=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7c:ee:5b:ab:ce:5b:c3:4d:9e:4d:86:fc:6e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=127f10897496c48ee95bae49c7b9fcfd917992b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:d2:fb:2f:a4:45:1e:a2:d1:4e:de:05:12:
54:ec:0f:4a:4d:d5:fb:e8:d5:51:8d:a4:59:b3:01:
91:0d:f6:a0:aa:3d:94:8c:66:94:37:c2:de:ae:1e:
d7:42:d2:5b:2e:0e:c6:af:9b:4a:56:2b:39:51:fb:
69:df:a9:a9:f8:4b:26:83:ae:37:7e:c9:cf:a0:75:
f9:6d:86:ce:bd:a3:5a:64:cd:8c:1a:bc:a0:d7:8b:
78:c1:c9:0d:91:ba:e0:ad:8e:70:4c:23:e9:8a:11:
2e:f8:68:f4:b8:7a:ac:86:58:d5:7f:dd:e4:9a:c2:
f0:e6:c4:54:07:22:aa:36:dd:4a:b5:49:a8:94:3e:
10:a7:a2:e0:64:05:d1:50:25:1a:86:ea:3d:3c:06:
67:c7:d3:30:35:cf:e0:75:32:2d:22:64:24:bc:50:
d9:4a:12:da:81:cb:3f:8b:f4:75:fd:b6:4c:c9:23:
c6:d6:02:fe:cd:ef:56:77:49:ca:08:03:f3:b5:63:
24:56:9d:3e:88:d9:d9:db:f7:86:88:58:7d:d9:e1:
b1:50:bb:52:9a:aa:50:25:fc:7d:6c:68:a1:70:95:
22:a8:cb:db:51:aa:14:29:f4:4e:49:84:23:76:19:
9b:90:88:3f:a4:65:3d:4c:f8:45:d3:2e:88:96:bc:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:10:89:74:96:C4:8E:E9:5B:AE:49:C7:B9:FC:FD:91:79:92:B1
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3e:72:07:7b:42:09:aa:e6:d0:c7:f6:46:c8:b8:fe:1a:fd:
ae:ae:97:0b:75:a2:54:63:ea:1a:7b:81:41:16:27:88:e3:25:
14:e8:44:d6:0c:b9:d8:2a:4a:47:80:72:c1:94:6f:98:73:33:
71:59:cd:60:49:58:05:79:43:bf:c9:e7:86:65:fa:92:c1:d6:
57:b1:f7:56:ba:f6:fd:75:fc:09:a5:be:06:57:d7:19:08:ca:
fd:29:93:1e:fc:62:58:ec:26:97:36:31:02:f6:48:c1:03:7b:
f1:14:92:69:67:14:74:2c:12:25:45:32:d6:cf:75:59:5d:5d:
79:f7:e3:57:c3:a6:b5:0f:e0:21:7a:0c:9b:83:92:85:ad:07:
64:24:69:9f:93:be:ef:37:d0:dd:17:c1:d9:bc:54:4c:b1:38:
85:c6:17:7b:ba:e9:4d:3f:a7:d2:17:16:e3:b9:26:13:bc:43:
76:67:41:1c:6c:1a:4a:a6:e2:07:a7:df:59:7b:4a:b1:01:0e:
e8:cd:27:69:9f:43:f7:4d:69:0f:1c:3f:61:f9:85:d6:ec:ee:
35:15:1c:4e:6c:41:fa:ff:a3:76:05:12:f1:e8:ef:9b:83:c1:
c5:33:81:f7:8d:c8:15:4e:31:69:53:a9:e7:f4:f7:4c:ed:31:
d3:c1:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:06 2026 by rpki-client