Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: Ixg4qCVR9LUOgEe2wpOPjKsyxZ77IZNd5gu5mmn1XnY=
Subject key identifier: F4:29:A8:6D:51:84:74:08:F7:E1:05:04:B8:9E:02:70:B2:D6:91:46
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 019D25F0EB29D51E4BEF7F044BC4845021FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 1897
Signing time: Wed 25 Mar 2026 17:00:38 +0000
Manifest this update: Wed 25 Mar 2026 17:00:38 +0000
Manifest next update: Thu 26 Mar 2026 17:00:38 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: cafH82hpYnH5uaFeIzs57pvCiwjiGONn7dZQlxKrKQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:eb:29:d5:1e:4b:ef:7f:04:4b:c4:84:50:21:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Mar 25 17:00:38 2026 GMT
Not After : Mar 26 17:00:38 2026 GMT
Subject: CN=f429a86d51847408f7e10504b89e0270b2d69146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:af:4d:f1:88:bc:5e:8f:a9:6e:4d:8e:c5:
19:de:80:7b:76:51:b9:15:dd:e7:85:a2:c9:c7:ed:
7f:40:9c:cf:5f:64:80:6b:ea:c8:c7:4c:fb:6f:48:
12:0b:1b:9f:22:4b:ae:f3:bc:58:cd:5d:38:69:8b:
14:b3:0c:b5:62:73:8d:1b:c9:6a:f4:d7:61:a8:1c:
fa:e5:32:49:ac:c3:ee:cf:e4:34:82:59:31:3b:88:
27:50:2d:54:88:0c:1a:5c:7a:52:10:23:05:22:9d:
8b:e2:66:2d:02:39:39:91:4b:98:17:ce:85:69:93:
9e:2f:8e:0c:9f:74:57:5f:84:3d:e2:7f:ca:e7:3a:
16:46:5a:1a:63:32:63:98:bc:ff:7a:2e:e3:fe:f3:
72:1e:8a:9c:0c:45:77:f9:0f:7f:34:3f:12:1a:bf:
bd:7d:e1:44:9e:8f:10:ff:40:1c:7e:21:c6:cb:13:
74:e6:03:56:7f:51:e7:a8:55:01:c1:71:cd:21:f1:
c6:21:db:c0:97:b3:68:4e:d4:f2:0b:d2:8e:dc:9b:
21:d4:41:35:d6:35:a1:00:55:bb:5b:93:be:b2:62:
7b:0c:6a:28:a8:fb:4b:c4:22:f2:38:06:82:73:63:
c7:47:85:10:f4:52:6b:23:45:4a:dd:db:39:2f:5a:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:A8:6D:51:84:74:08:F7:E1:05:04:B8:9E:02:70:B2:D6:91:46
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:11:d2:c3:c2:47:b2:d3:91:ca:47:a7:64:38:88:8c:c1:be:
b4:7a:78:51:92:d7:b6:cc:3c:c8:40:ed:78:9b:01:11:ea:0f:
07:3c:c3:66:a7:2e:9f:f5:08:e0:d0:72:d4:6a:8c:8d:cc:b1:
ba:50:b9:e3:ad:ab:d4:43:8b:9f:62:3d:45:0e:bc:27:db:78:
e5:29:cb:a3:6d:65:a9:ce:50:bd:14:20:d0:f5:37:a4:0b:85:
e9:f7:c2:3b:3b:68:89:a9:71:da:45:07:37:5d:dd:4b:f2:3f:
ee:42:2a:9d:e2:83:63:05:54:80:ea:3f:6e:9a:be:27:33:4f:
43:bc:05:a6:a4:1e:21:31:17:bf:2b:a2:be:f3:da:e7:a9:4c:
dd:08:8e:a7:7b:9b:ba:89:4d:8f:48:67:54:52:aa:3c:09:e1:
ef:0c:ef:ad:47:49:9f:1f:07:e4:62:92:86:1d:88:7a:2e:2b:
c9:6b:b6:b0:05:ea:5e:40:8d:f7:a0:e2:9e:0d:ce:30:36:61:
a1:56:ec:44:1f:33:4f:3f:46:ca:0f:c4:66:71:86:ff:ac:40:
5c:47:92:28:ba:9a:ea:9f:5d:1f:34:4d:85:70:35:e0:25:ef:
3a:6a:8a:f8:22:2d:64:ee:73:b0:36:41:35:89:dc:03:18:32:
5a:25:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:43 2026 by rpki-client