Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: bLMy1Dm9l5eCnYIpFeKUk8iMzSXai++Vt6mLDheAjn0=
Subject key identifier: C0:70:F8:66:AE:BF:3E:25:85:57:19:FE:5C:FD:76:42:51:66:B7:C9
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 019D28BB5D44818D931B675F05927231B2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:00 +0000
Manifest this update: Thu 26 Mar 2026 06:01:00 +0000
Manifest next update: Fri 27 Mar 2026 06:01:00 +0000
Files and hashes: 1: e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (hash: gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: BSO/SOAFMG3QPonABJcKggcaAdLmJejhXxmJtr4pie4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5d:44:81:8d:93:1b:67:5f:05:92:72:31:b2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Mar 26 06:01:00 2026 GMT
Not After : Mar 27 06:01:00 2026 GMT
Subject: CN=c070f866aebf3e25855719fe5cfd76425166b7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:57:94:c3:01:24:0d:9b:80:45:30:f3:aa:
e3:c4:5a:52:81:61:4d:8f:17:5d:e4:db:a7:94:5b:
b6:76:a8:8c:7f:62:07:6e:76:40:f8:ea:cd:28:00:
69:77:fd:b7:8d:e5:64:62:98:32:89:24:a4:64:70:
c0:f6:61:e6:30:20:83:eb:e9:b8:06:1d:3f:15:32:
95:93:0f:8d:c1:a0:6a:be:bc:c6:b3:9f:17:1d:7d:
77:ba:f7:b8:20:84:18:92:02:f4:7d:27:67:97:f8:
01:48:85:c6:9f:fc:e5:e3:8d:0f:c6:87:26:09:ee:
db:ad:bc:19:8d:e8:93:ae:f4:e7:f3:dc:33:2b:2b:
c2:02:c0:9e:15:d0:e8:00:9b:b4:f0:65:28:65:c3:
c4:d5:f7:b7:47:b6:4b:60:5f:45:11:10:f9:f8:3b:
ce:13:de:5c:04:51:58:7d:d1:46:ed:47:e7:ff:70:
42:f2:c1:38:0b:4a:71:d3:1a:52:dc:71:3c:56:b0:
bb:74:f9:f0:55:44:cf:a8:67:72:dc:94:a1:32:57:
33:b2:e0:12:1b:c0:c6:58:00:bc:1d:ec:9f:fc:51:
72:95:ab:fb:e6:5d:a9:1e:a5:69:a7:79:9f:29:83:
ee:30:a5:83:de:bc:3e:94:77:fa:c5:0d:8b:96:a8:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:F8:66:AE:BF:3E:25:85:57:19:FE:5C:FD:76:42:51:66:B7:C9
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:a5:64:83:5a:85:37:02:98:c3:74:1d:b0:a8:71:25:7c:
c5:ae:64:c3:74:b2:ff:61:5c:28:71:f9:24:a9:99:30:c8:74:
2e:20:e2:a0:e7:ec:e9:92:c2:af:5e:26:e3:d8:90:77:e1:87:
2c:57:2e:3a:ce:ab:af:ef:e8:f3:08:a1:8d:c0:96:cd:e2:81:
2a:6c:99:5a:b2:7f:bb:fe:24:d2:94:75:a0:fe:d0:4a:57:2a:
ec:8d:76:5b:0e:f2:5e:34:39:9b:7f:f0:1e:8a:26:14:c7:d7:
36:0f:ec:28:57:21:25:f4:eb:e4:d0:e9:89:ac:06:55:91:50:
cd:28:cb:ac:6d:bd:74:80:aa:88:cd:3e:d4:0c:5a:cb:9a:e7:
1e:f2:18:7e:c1:1c:56:8d:13:f2:80:5f:a1:1f:be:9a:81:71:
4d:b1:c6:ed:cc:5b:59:a6:ec:e6:dc:73:1e:b6:12:3d:14:99:
16:13:38:53:5f:4a:e6:e1:2c:9f:37:64:4d:24:65:ba:7a:a6:
5a:c6:53:1f:f0:50:70:a2:15:09:bd:97:5c:36:86:1e:b6:e8:
89:a2:8c:dc:1c:7b:d3:ef:60:2e:9a:89:42:be:45:45:f3:3f:
6c:8a:db:87:01:43:5b:0c:ea:60:41:e2:a9:14:f9:c5:19:ab:
e4:35:f5:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou11EgY2TG2dfBZJyMbLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw
MDU2MjAwHhcNMjYwMzI2MDYwMTAwWhcNMjYwMzI3MDYwMTAwWjAzMTEwLwYDVQQD
EyhjMDcwZjg2NmFlYmYzZTI1ODU1NzE5ZmU1Y2ZkNzY0MjUxNjZiN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XBXlMMBJA2bgEUw86rjxFpSgWFN
jxdd5NunlFu2dqiMf2IHbnZA+OrNKABpd/23jeVkYpgyiSSkZHDA9mHmMCCD6+m4
Bh0/FTKVkw+NwaBqvrzGs58XHX13uve4IIQYkgL0fSdnl/gBSIXGn/zl440Pxocm
Ce7brbwZjeiTrvTn89wzKyvCAsCeFdDoAJu08GUoZcPE1fe3R7ZLYF9FERD5+DvO
E95cBFFYfdFG7Ufn/3BC8sE4C0px0xpS3HE8VrC7dPnwVUTPqGdy3JShMlczsuAS
G8DGWAC8Heyf/FFylav75l2pHqVpp3mfKYPuMKWD3rw+lHf6xQ2LlqjlTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBw+Gauvz4lhVcZ/lz9dkJRZrfJMB8GA1UdIwQY
MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt
N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4
LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9elZINa
hTcCmMN0HbCocSV8xa5kw3Sy/2FcKHH5JKmZMMh0LiDioOfs6ZLCr14m49iQd+GH
LFcuOs6rr+/o8wihjcCWzeKBKmyZWrJ/u/4k0pR1oP7QSlcq7I12Ww7yXjQ5m3/w
HoomFMfXNg/sKFchJfTr5NDpiawGVZFQzSjLrG29dICqiM0+1Axay5rnHvIYfsEc
Vo0T8oBfoR++moFxTbHG7cxbWabs5txzHrYSPRSZFhM4U19K5uEsnzdkTSRlunqm
WsZTH/BQcKIVCb2XXDaGHrboiaKM3Bx70+9gLpqJQr5FRfM/bIrbhwFDWwzqYEHi
qRT5xRmr5DX14Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:58 2026 by rpki-client