Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: rL0mttAGXpz9MXa+VNjSXdNwJvKSwf7E1UroFoSoxao=
Subject key identifier: B9:C7:77:B6:36:52:0D:7E:B9:8B:8B:24:6B:92:28:9B:A4:95:01:40
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 019D33E3E618F7F6C9F6673F9EA8A9696A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0F6D
Signing time: Sat 28 Mar 2026 10:01:06 +0000
Manifest this update: Sat 28 Mar 2026 10:01:06 +0000
Manifest next update: Sun 29 Mar 2026 10:01:06 +0000
Files and hashes: 1: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (hash: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: x7bEmdcltT11SVlp3ejeTYzavfAYp1wEYYmatr72NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:e6:18:f7:f6:c9:f6:67:3f:9e:a8:a9:69:6a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Mar 28 10:01:06 2026 GMT
Not After : Mar 29 10:01:06 2026 GMT
Subject: CN=b9c777b636520d7eb98b8b246b92289ba4950140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:86:d7:b7:ba:da:28:2c:ab:e4:fd:01:2e:
2f:6f:29:4b:47:fb:48:bc:1a:24:96:05:16:c3:d8:
d2:8f:09:b1:76:82:89:2a:47:53:5e:40:32:2f:ee:
0e:2e:c6:08:53:15:06:01:d1:c2:3a:ed:5b:7d:13:
cb:00:d8:1d:ac:42:78:37:e7:8c:8d:42:c3:9b:48:
cb:de:2c:29:f5:82:02:09:2c:18:1f:d5:63:e6:8b:
be:5e:80:44:c9:ac:36:f7:b3:be:84:d0:ef:5b:7a:
a4:e2:09:fe:ba:39:8d:1d:00:d3:50:63:b3:28:a8:
64:fa:10:5a:ff:cb:c5:f2:76:71:b8:22:4e:47:17:
12:73:d7:07:5e:30:4c:0b:8e:f1:3a:66:7b:67:c6:
2c:30:6f:e0:86:f0:94:85:e3:f2:4a:89:98:f3:86:
e3:d8:65:09:a6:13:92:5f:54:ec:ed:58:6d:d1:99:
88:6e:07:99:7c:a3:31:9c:4f:52:20:51:19:f3:21:
4b:20:a1:18:13:d2:d7:6c:af:b2:b9:cf:cc:a3:7a:
6a:cc:13:26:ff:23:b5:cd:41:f1:47:2f:70:cf:5f:
15:4f:5f:4e:51:41:4e:95:dc:8a:7a:47:4d:48:6c:
a0:71:9f:4e:1d:ea:69:7b:76:30:0a:75:4c:0c:86:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C7:77:B6:36:52:0D:7E:B9:8B:8B:24:6B:92:28:9B:A4:95:01:40
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:38:29:54:53:c4:e6:a8:0f:8e:53:80:8b:ef:20:4c:6a:90:
de:aa:59:ec:c5:4d:7c:b1:a2:93:5d:36:e8:40:ec:b7:5f:44:
7e:09:70:43:cc:44:7d:80:d3:b7:50:94:3d:37:99:a5:cb:bb:
ba:ca:d5:ce:f2:8d:82:28:6d:5c:e4:93:a8:fe:4f:44:12:0d:
4d:44:b3:25:10:26:f2:c4:6e:e2:cb:9a:03:f0:ab:4a:8a:7a:
89:06:4c:97:4b:c2:12:a2:e6:2e:16:b2:9d:7d:be:93:b6:52:
5c:96:4e:0f:16:ef:81:01:ec:6e:53:b4:e5:bf:33:a6:70:d1:
92:01:89:f1:f5:7a:b7:a3:df:67:2d:f9:0a:57:fe:3d:18:79:
67:87:c3:60:8c:ba:06:01:9f:03:01:ba:64:98:e5:f5:a6:34:
2b:a3:6f:d2:2a:b4:d3:17:31:9e:0a:22:0f:e0:79:cb:fb:da:
ee:e5:31:b7:2e:50:f1:af:e1:be:6e:3f:82:17:9b:5d:78:c0:
a5:0d:d3:d4:ea:a3:17:a9:ab:b0:cb:79:a2:65:33:1e:a0:94:
fb:cb:22:6c:4f:c2:3c:79:d6:b4:23:c8:17:07:3f:f4:20:5c:
a3:7b:a5:3c:85:81:37:b8:12:ea:e9:e4:ca:25:8d:97:d3:7d:
8e:87:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:01 2026 by rpki-client