Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: gndVG63WMsFPYcPLWTvPT8ctJoKUw/RnB03xMWKJzCk=
Subject key identifier: 79:4D:54:DB:3D:76:08:C1:17:5C:81:D2:B2:16:4D:A0:9D:6B:35:13
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 019D281666E2162A7AFB79B1E3E4BEFB25D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 158C
Signing time: Thu 26 Mar 2026 03:00:49 +0000
Manifest this update: Thu 26 Mar 2026 03:00:49 +0000
Manifest next update: Fri 27 Mar 2026 03:00:49 +0000
Files and hashes: 1: Um3rCN-q-gYBIcgEg82jFZfS59k.roa (hash: 0rUOvsuwwsb08uI/Y1cwX6bj3C7aQudL+7nOqE0Zl9c=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: 7K+X0aJ5ArmK8+F/VyTU+2UgC42+L8Zf3tyT99jmIIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:66:e2:16:2a:7a:fb:79:b1:e3:e4:be:fb:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Mar 26 03:00:49 2026 GMT
Not After : Mar 27 03:00:49 2026 GMT
Subject: CN=794d54db3d7608c1175c81d2b2164da09d6b3513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3c:01:14:51:ea:ef:09:78:24:48:65:b7:f0:
d6:7f:36:f7:d0:6c:86:cb:16:d4:c5:75:fe:09:e6:
eb:c5:93:e6:55:c3:a7:16:dc:0a:d0:27:4f:19:75:
23:8d:45:37:ba:1e:4d:ae:61:42:33:8f:e0:6d:f1:
a8:6d:1b:91:4e:6b:16:d6:91:18:dd:62:d2:1c:be:
70:07:6f:94:89:20:8f:85:20:e1:b9:52:10:fa:2e:
70:5e:aa:bb:18:24:09:cf:01:96:6c:1c:81:74:fe:
02:8f:65:fd:cd:25:28:ae:26:09:46:ee:30:6e:cd:
8f:d5:49:12:88:6c:16:71:a6:4f:80:b2:0c:6f:9f:
74:cb:7d:3e:e1:93:28:2a:fa:b8:06:7d:d4:ad:2a:
2e:08:ac:94:a2:23:98:8d:d0:02:74:0e:e6:76:ba:
ab:5f:a1:3c:78:40:03:b9:2e:5e:4d:6a:54:5b:d7:
8b:9d:c0:45:4e:c0:7d:5f:b9:7b:e1:bb:b3:76:80:
2f:24:ff:4e:2f:4c:fd:7f:a9:39:bc:bf:6f:8e:65:
81:08:ea:8e:2c:52:9d:8b:61:ef:db:a2:ec:a5:41:
77:4f:58:ad:7e:3c:0a:b5:93:6c:c1:60:24:cd:91:
3e:50:93:c5:ee:2f:13:f1:86:ec:6f:d6:34:93:9a:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:54:DB:3D:76:08:C1:17:5C:81:D2:B2:16:4D:A0:9D:6B:35:13
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:04:d4:7d:a8:2e:7e:3a:42:2b:08:ca:9e:d1:ec:2a:95:2e:
dd:ec:38:6c:8d:95:cf:5f:a5:94:9d:d4:dc:2f:9f:d1:d7:a1:
ca:df:d5:ee:bd:70:c0:fb:80:39:15:be:16:fe:0e:de:17:39:
de:e4:57:e0:1a:7f:d2:56:19:6f:0f:e2:fb:ea:10:fb:33:fd:
ba:81:b3:19:bd:f7:a8:73:a1:ba:6c:fa:e5:e3:4d:45:10:22:
00:00:7e:22:ec:30:49:63:88:4c:5a:3a:d1:42:4d:d1:86:09:
4c:b2:1e:25:44:e3:a6:8a:79:f1:62:c7:63:2f:4a:bd:0d:9d:
72:70:21:09:35:3c:06:b2:bc:54:9e:5c:e3:51:92:b0:5b:51:
51:4d:85:ef:b2:ec:c5:1b:b2:d4:46:c1:75:e8:38:6a:ee:66:
3c:83:86:9c:73:85:21:4b:a7:79:fb:58:b3:7c:0f:25:ea:7f:
29:77:d2:97:71:d6:40:5f:bc:24:e5:86:69:21:e1:24:18:7c:
cf:68:00:26:84:2c:61:16:79:09:4c:bd:6d:f5:9f:84:bd:71:
4d:a6:08:33:3a:17:1f:54:d9:51:79:38:21:91:61:2e:8c:76:
00:c3:fb:24:c6:a0:da:ab:88:8a:45:d4:4c:68:d6:f6:17:ae:
16:25:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:55 2026 by rpki-client