Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: WmDqaxkwzpCGkrleCXCA72gW4BAyVdRNaQFdE7EeFJc=
Subject key identifier: 8E:AA:DB:96:07:E4:8B:DA:E3:A8:90:CC:46:B2:B0:EC:2B:E6:59:93
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019D25BA32C62B946B78AD6EDBC683229AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:00:52 +0000
Manifest this update: Wed 25 Mar 2026 16:00:52 +0000
Manifest next update: Thu 26 Mar 2026 16:00:52 +0000
Files and hashes: 1: ea-vywNHOW21DX1J0UWlRSQDW38.roa (hash: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: eViz9iLnnHFjHmLVNbrkKpN11YDAotpbwXZfS+YfeMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:32:c6:2b:94:6b:78:ad:6e:db:c6:83:22:9a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Mar 25 16:00:52 2026 GMT
Not After : Mar 26 16:00:52 2026 GMT
Subject: CN=8eaadb9607e48bdae3a890cc46b2b0ec2be65993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:e3:a7:ef:2b:0e:b7:0d:57:f0:fa:81:82:
21:80:b3:c0:0d:f6:72:6f:da:ed:3d:8a:13:f6:dd:
f4:44:1b:5e:c3:7b:25:86:c6:b7:3a:66:96:ba:f6:
b3:97:ca:c0:3d:22:fa:57:00:36:aa:ca:9a:c1:b2:
0e:9c:ec:e1:f1:8d:56:39:1b:3d:78:eb:d8:62:39:
1c:cc:a0:da:f3:c4:04:c4:d1:80:b5:18:68:8c:68:
9e:39:4e:62:e7:23:65:85:47:97:bb:71:2a:15:ae:
33:38:04:79:c7:1a:f4:b6:8e:08:61:d7:5c:cb:7a:
df:97:76:86:e8:70:e0:b3:cd:f8:46:4b:97:f4:35:
41:79:c4:58:98:5e:63:f6:64:ff:ab:83:c1:ef:31:
ef:c7:4d:1b:2e:a9:ff:2c:bc:87:c1:de:55:64:f4:
d4:86:35:db:00:6b:8c:a0:1b:87:1e:d5:e5:a3:ee:
6c:0e:b1:6c:aa:9b:59:ac:59:47:59:f0:e8:b2:06:
a4:28:85:fb:b5:42:cb:42:46:87:f5:35:2b:41:0b:
5c:1d:43:c5:8a:34:81:e7:40:67:0d:52:dd:c0:46:
95:31:cc:b2:67:09:d4:61:4f:5a:1d:0e:74:09:ce:
59:40:53:ff:8b:e6:d0:eb:69:df:46:51:b2:99:ca:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:DB:96:07:E4:8B:DA:E3:A8:90:CC:46:B2:B0:EC:2B:E6:59:93
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:62:e7:90:08:6f:f4:bf:50:85:b3:74:c4:eb:3d:d4:22:
6f:bb:84:ad:15:60:e3:5b:b6:13:1f:97:7a:9b:1f:c9:3d:37:
62:9e:df:d9:8f:5d:f8:d4:68:4a:9f:5a:e0:26:23:dd:3e:e2:
70:b3:11:a1:0f:da:80:b2:a8:ae:06:4d:8c:a2:b8:26:91:e3:
37:03:af:a9:0c:60:31:45:97:d0:67:ef:ea:30:72:7e:62:b5:
45:43:20:e9:b2:75:27:da:3e:39:d3:f1:12:98:0e:9c:53:ea:
23:e4:dc:f9:84:5e:7f:b0:a8:0b:83:91:9b:01:e2:66:cd:ca:
2f:1c:42:55:a4:78:fc:5e:b6:86:92:da:bd:b3:cf:c4:ff:af:
eb:b5:27:db:9f:2f:87:d0:56:ca:d9:87:ea:bc:52:5e:14:eb:
8e:fc:dc:80:ca:97:c9:93:d2:bc:0e:6c:5c:1b:27:47:73:aa:
19:cf:ea:9c:00:cd:db:a4:42:06:e9:ed:4a:33:8a:e2:ac:bf:
4e:d1:17:60:ba:80:41:f9:68:e2:c6:91:72:46:a7:ab:72:42:
af:bc:28:f2:96:d2:8a:3b:de:a3:cd:18:46:50:80:cd:9c:bf:
40:bb:c0:a2:6c:69:79:c4:22:0d:f2:30:cb:c4:26:d2:56:d2:
0a:da:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:52 2026 by rpki-client