Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
File: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft (raw, json)
Hash identifier: qzS8KnvKLeI+dh7y8RXqNeTRtwFpHEp/bQgWs0bxNb4=
Subject key identifier: E7:90:E4:C1:09:8F:82:27:B3:38:8B:F7:79:C5:3E:C2:FF:8D:B2:CD
Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
Certificate issuer: /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Certificate serial: 019D292949DCC5E057CAA0BBFCA5B0D4F7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
Manifest number: 0A47
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: h6jOEDYxDLUoVsCN3vmFzWvRbqY.roa (hash: Dq8fSfxaD+7+r7IpW+mP/VEW9T3C/oyoQfLuLak8VuQ=)
2: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl (hash: XbppPffmjIwK/KTsazjEeW2dcDk2XBR1D4JOCP7Zzto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:49:dc:c5:e0:57:ca:a0:bb:fc:a5:b0:d4:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=e790e4c1098f8227b3388bf779c53ec2ff8db2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:f4:51:9b:05:7c:e2:c2:78:9e:90:5b:44:
da:b8:db:ac:ef:3b:ca:eb:fd:e5:38:72:66:4e:53:
db:6b:c0:ff:49:f1:4f:16:74:8f:01:0e:af:d7:b0:
18:18:33:e1:bd:ba:01:36:4c:ed:aa:85:ff:29:36:
6c:1d:98:55:8d:02:cb:ec:cf:a7:96:44:de:be:29:
24:a4:c8:f4:28:a1:4d:6f:b2:96:74:2e:a2:3e:74:
c2:74:8a:b2:ad:a7:5a:4d:c9:0f:4c:a3:d1:7c:b2:
74:a2:cf:45:16:75:8a:57:f0:8a:5f:2a:88:ab:b0:
4e:bd:c2:d5:25:2e:2e:9d:24:55:8f:dc:eb:d5:24:
1e:08:70:b0:7e:b6:fb:bb:5c:9f:6b:04:ce:df:01:
5d:e3:8a:bb:a5:f8:4c:cf:d5:a2:7f:df:9e:8f:ab:
a9:ce:96:e7:02:f0:ac:bd:98:9b:63:3c:b2:3c:69:
ec:12:df:ca:11:2a:8e:14:c0:4e:44:11:89:6a:1c:
fa:47:21:b8:e6:ed:f2:9d:b5:6e:97:6e:1a:a6:4e:
17:0f:20:4c:9e:cf:5f:fe:58:c2:df:39:a9:55:02:
ea:af:36:4b:d2:95:a6:fb:3b:55:7c:b2:d2:27:ab:
5a:ce:3d:84:4a:c1:c4:b9:57:14:94:9c:8c:34:9d:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:E4:C1:09:8F:82:27:B3:38:8B:F7:79:C5:3E:C2:FF:8D:B2:CD
X509v3 Authority Key Identifier:
keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:0a:0a:65:61:6b:97:6d:2a:34:c3:60:42:6b:c5:f3:36:
91:04:23:6b:ec:e8:ec:7a:7f:1e:2c:5c:82:af:ab:2b:bb:bb:
ec:49:bc:b5:ab:1c:d3:de:fb:1c:95:99:e1:f6:99:ec:4d:fa:
37:f0:76:d2:e6:47:78:13:43:b8:ca:80:fd:2f:a6:b4:a1:89:
4a:81:0b:cc:4f:b0:f5:b8:52:6c:a0:1b:5b:0b:b1:34:30:f2:
c4:b2:a3:bb:0a:0e:40:30:73:89:4a:d4:53:f3:e0:7f:f2:83:
98:25:69:e4:7c:ee:ff:da:dc:df:c5:30:b5:3c:8d:9d:d1:8e:
b5:84:42:4f:cd:25:9a:27:f8:0a:2b:82:87:63:7f:f4:a7:8b:
cf:38:91:c2:b5:46:2d:34:03:6a:0d:0e:e5:2b:4c:70:c3:74:
09:29:27:bb:34:fb:3d:10:e1:b5:1b:ad:6b:71:f3:7d:9e:42:
69:d1:d0:9e:7b:24:52:27:5c:2c:1e:43:57:42:02:13:03:4e:
f4:20:46:b6:99:91:d8:fb:2a:a8:f5:5d:c1:8b:c1:66:25:c6:
aa:18:0f:67:6d:e2:6d:ae:a0:59:f4:5e:dc:46:97:bb:03:bb:
2a:b1:18:a8:0f:f1:e4:9f:bc:3c:9d:3e:57:fc:cb:3f:a1:00:
17:78:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:27 2026 by rpki-client