Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: ZzgKQaXR3Xgb9Riu4DRLl6lcEbqvxDeqvmFWIrmKayk=
Subject key identifier: E6:FE:2B:9A:52:8E:64:8B:39:E5:CF:BA:B5:04:85:0B:83:17:72:17
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 019D26CD54D3E7F6BE7A4CDA214D030D5383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0CA9
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa (hash: cKsTdXMzCKVpvlljEBVOuNNhrA+YItiJ4O+zqqSok5Q=)
2: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: roRLbf/bUOtMJroT3zTMm2hMuVThrDL/gYtrnP7hRF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:54:d3:e7:f6:be:7a:4c:da:21:4d:03:0d:53:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=e6fe2b9a528e648b39e5cfbab504850b83177217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:00:c5:79:fc:5c:c6:0d:9b:38:d5:d5:78:
d3:b4:41:67:c1:20:30:ad:45:3d:62:32:5e:d5:3c:
55:f7:87:3a:75:29:47:02:5b:8c:11:1f:ca:2e:87:
be:39:82:fc:a5:f6:6b:82:30:03:ed:79:40:f9:da:
fd:d6:79:4f:2f:ba:0f:f6:b4:70:07:88:c6:f8:17:
f5:e8:ac:d1:55:7b:83:28:52:e9:e6:ef:9b:07:40:
30:dc:6d:2c:b2:5e:f9:7f:dc:41:3a:f6:da:ae:69:
31:96:d3:6e:a1:32:7e:71:e8:3a:5d:f5:22:1d:e5:
f1:e1:a7:45:86:b2:df:50:7b:2b:90:33:95:7e:1c:
50:96:84:23:2d:49:99:da:11:fb:42:47:9d:f1:14:
1b:29:c2:fd:9d:1f:61:33:77:1b:7e:0a:77:f0:e8:
5d:6d:ee:bf:df:fb:c7:3f:9f:f1:a3:2f:58:ec:66:
eb:ff:be:62:df:fc:94:35:66:d1:03:b3:51:05:8f:
e7:1b:de:a9:68:32:39:d8:10:24:a4:82:47:b2:81:
0b:2e:8c:cf:63:f1:0b:7d:1f:5a:92:0b:47:ff:84:
7c:b2:01:43:22:04:85:69:5b:59:a8:6a:97:10:51:
d3:fa:a4:a6:09:9d:c3:bb:5b:a7:7e:3b:07:62:b6:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:2B:9A:52:8E:64:8B:39:E5:CF:BA:B5:04:85:0B:83:17:72:17
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d9:61:1d:20:cc:f5:3a:b0:94:a8:f2:79:e4:f5:10:43:31:
05:7c:20:e7:32:34:b6:2b:67:1b:03:88:bc:fe:35:34:2a:83:
8e:55:48:9b:d2:03:eb:e6:a6:ec:1b:c6:92:1e:51:1a:71:b3:
d1:10:d3:3d:e9:93:37:18:12:17:99:30:9b:f7:4a:ec:f0:45:
d7:e3:15:98:bb:ee:48:4e:60:38:3b:05:f9:d0:2f:a2:1a:56:
c1:22:40:ff:f0:6c:c0:58:3b:31:97:2f:00:e1:86:83:77:8f:
c6:2e:a0:45:8e:cd:ea:4d:bc:a4:7e:ad:23:1a:0e:b5:fc:be:
28:de:e9:cd:6b:be:03:07:d9:18:a1:13:99:16:86:d1:ad:6e:
38:2a:f2:07:11:8a:a1:ba:7b:22:ea:a4:71:b7:50:54:f6:a3:
50:dd:fb:e4:74:9b:31:eb:8b:9a:cd:89:95:8b:75:2c:59:5a:
cd:da:e3:0d:91:3c:e9:ea:d3:4b:81:48:13:bf:1a:e8:5e:76:
a2:d5:86:d5:05:4f:c6:31:2b:70:fb:95:0f:41:45:aa:91:a2:
de:1b:e6:15:f2:81:e5:58:4b:b3:c3:64:38:aa:27:a2:8f:77:
20:9b:b2:ba:c9:dc:52:44:f5:74:ed:2e:b3:1c:ad:79:7a:d4:
90:17:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client