Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: EeMo8aP6+Vm2GKwWuwAXD1V9JcKWmGtXKxC73XAnYDc=
Subject key identifier: 4F:44:7F:EF:9A:2D:BB:C0:75:73:BB:E8:5D:D4:FB:3C:A0:29:35:D5
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 019D28BB503F68675B6ED8F6815E22BA5580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 0765
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: NtljOaIL1JwpiXLySyyvx4z_K-w.roa (hash: bTyr7ks2Z5N+mkb97LsrPJ8BXJjMNHN+ldTmfDHr8Xw=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: oCAcZKuA40GLnEm1XYERyFHTVejjkjrWrDlnz+g5t+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:50:3f:68:67:5b:6e:d8:f6:81:5e:22:ba:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=4f447fef9a2dbbc07573bbe85dd4fb3ca02935d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:b3:fc:82:04:2d:76:79:8b:a2:bf:9e:99:
c7:ee:45:30:f5:4a:86:3d:30:a9:8f:e1:5a:61:74:
42:10:0e:d4:62:9f:b2:10:43:fb:52:ff:ce:f6:56:
5b:c9:40:4f:18:92:32:db:06:6c:af:53:83:23:47:
55:f3:34:64:75:ba:4a:14:97:4d:4b:e5:67:09:30:
29:f4:c7:23:45:6f:dc:32:70:c5:2a:7b:c2:6d:e2:
c3:9f:67:f2:42:3a:e5:52:38:a3:6a:db:31:e7:77:
8a:93:e6:19:81:57:b2:0e:b0:f0:f2:58:5c:b5:45:
89:a5:8e:29:3c:a2:b6:e0:3e:1a:7e:11:19:de:95:
4e:30:41:83:84:be:98:4e:ea:73:e3:bc:21:69:cf:
0e:fb:6e:3e:77:47:df:db:e8:5f:1d:da:49:27:15:
58:b6:4d:8c:01:8a:ca:0b:ba:dd:3b:f5:88:dc:04:
5b:07:e0:46:3a:4a:3b:0a:5b:80:80:c6:11:24:68:
85:ba:01:81:f5:d7:a3:fb:08:c4:b3:6f:c2:83:c2:
67:68:29:87:37:58:94:e4:a4:ac:c8:08:a8:03:cb:
99:c7:3e:c8:5e:8b:30:a6:e9:23:fd:3c:dd:21:2e:
bb:29:d1:78:04:58:a6:44:3f:38:d0:e8:c7:bc:f0:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:7F:EF:9A:2D:BB:C0:75:73:BB:E8:5D:D4:FB:3C:A0:29:35:D5
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7f:e9:b8:a7:49:fa:ab:b0:9c:a0:e4:8a:04:62:ac:db:6e:
a5:7b:27:85:b6:30:92:e5:0f:36:7d:2b:e2:0e:bd:d8:25:09:
2a:1c:ff:17:2a:e3:58:a8:8e:8c:6d:98:93:30:b9:6a:58:a0:
7a:28:39:37:7f:f1:42:d8:22:45:40:db:98:1c:30:14:63:bc:
45:a6:9d:1b:da:5e:e4:2a:93:1a:34:28:a7:b9:23:6a:4c:5f:
5d:c3:82:46:45:05:b3:01:9c:f7:f6:f6:44:35:ba:f4:85:fc:
4a:82:30:b0:67:53:40:a1:be:1b:02:68:38:43:c4:95:25:20:
15:6b:11:92:cf:ac:95:f3:62:42:e0:e4:f6:aa:6d:3a:72:17:
0a:ba:a9:b1:65:5f:ce:81:95:75:c5:37:86:56:d4:4a:04:0e:
d0:7b:18:d5:e5:be:48:a5:07:c8:54:f7:2c:41:a5:69:0e:6c:
b9:f6:ff:04:79:d5:40:db:b0:24:e8:4c:38:b1:b3:35:94:dc:
2e:b6:c1:eb:82:43:b9:31:f9:71:52:15:c1:99:4c:a6:61:5f:
08:ee:1f:25:1f:cd:97:55:03:4b:39:a7:e8:84:b7:00:6e:b3:
1e:d5:e0:97:56:01:b5:af:bf:97:3a:02:ca:a3:2c:c6:69:e2:
c4:68:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:03 2026 by rpki-client