Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
File: k1x7dikZzzbcFCY_XllV6P-jXTs.mft (raw, json)
Hash identifier: eZW/906L6ECa3rrAk25us7Li8LQ8COv2q988X27kPXI=
Subject key identifier: 3C:71:C5:F7:2B:31:2F:DC:58:6D:1A:45:7E:CD:14:B6:F3:7F:91:CE
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 019D2772CF9284B389207F6329B786A9B8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:02:08 +0000
Manifest this update: Thu 26 Mar 2026 00:02:08 +0000
Manifest next update: Fri 27 Mar 2026 00:02:08 +0000
Files and hashes: 1: T_qkUaWs2ghdwUxzU0iuiusb7H8.roa (hash: bDaxnxgxc6VXP3Xzs/otfCvYZy7RhWEhtlo/OlQbb/g=)
2: k1x7dikZzzbcFCY_XllV6P-jXTs.crl (hash: wiLb0PVjis1jt334gbO4JeeL7tCy6bnIU+bNtPBncnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cf:92:84:b3:89:20:7f:63:29:b7:86:a9:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Mar 26 00:02:08 2026 GMT
Not After : Mar 27 00:02:08 2026 GMT
Subject: CN=3c71c5f72b312fdc586d1a457ecd14b6f37f91ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:14:28:a9:e6:e8:bc:6f:62:72:b3:3a:42:
92:45:23:8b:c1:cd:42:31:fb:4e:d9:71:1d:27:e1:
4d:54:27:69:18:a4:01:6c:84:61:fb:6f:53:59:f9:
fd:e7:07:ef:9e:0b:64:cc:c5:a8:63:ec:d9:6c:91:
d4:a9:05:30:a2:cb:0e:3b:4c:b5:5f:ea:ba:74:63:
05:e3:83:32:da:d4:a5:ca:13:4e:cb:22:93:26:f8:
7c:50:8b:d4:ed:f1:48:a0:26:96:6e:8c:13:4e:aa:
c3:25:76:e0:cf:23:c5:14:e1:90:b1:79:dc:08:7e:
5b:42:60:bb:2e:73:77:37:66:d4:65:c4:09:e8:34:
72:a9:90:d5:c9:f4:dc:94:d9:6d:df:9e:5b:8b:a9:
d4:41:03:8f:b2:85:db:3f:41:d0:45:86:f6:7d:d2:
ee:5c:6a:9b:61:92:f4:c1:bf:44:5f:99:99:03:fe:
94:f8:22:1c:49:a7:8c:1b:33:8f:7c:31:fa:53:5e:
ee:07:f2:c6:02:08:5f:55:10:8d:01:fd:e9:dc:1a:
f0:12:7d:63:e2:fc:db:96:d7:6e:9d:66:0c:18:cb:
9a:df:73:e3:cb:9a:98:47:02:45:cb:77:57:64:0b:
4c:db:dc:cd:77:8c:f7:65:35:b7:40:98:2b:a3:4d:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:71:C5:F7:2B:31:2F:DC:58:6D:1A:45:7E:CD:14:B6:F3:7F:91:CE
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:02:80:4e:fd:45:13:d8:e3:af:92:5c:0f:76:43:c0:bf:0e:
d0:3e:05:02:8e:45:48:3f:30:f7:49:8b:d1:2f:0f:c9:ff:ba:
73:3b:88:40:ea:45:86:39:53:ca:f6:f5:ea:a6:2f:c9:50:90:
74:f6:e5:8a:72:40:e2:db:15:1c:ca:b4:95:29:84:a3:5a:13:
25:62:81:c0:94:3b:b0:dc:57:14:55:26:37:d7:dc:f2:c0:46:
c9:90:c9:81:cf:db:08:fe:ba:fb:2e:b7:5f:9a:ab:7f:14:87:
33:e9:7f:23:70:fa:f0:b4:ec:92:a4:62:f9:27:3a:13:c9:0a:
9e:47:9a:7b:f0:62:35:1d:d9:f2:22:06:d5:8c:81:21:8a:18:
13:94:6a:8d:22:21:5a:06:ef:5a:22:7f:fe:c7:58:12:c9:80:
6a:dd:9d:53:9b:eb:05:37:d5:82:b5:cd:73:d7:dc:fe:b5:12:
9d:60:71:a3:28:f3:a9:71:9b:68:22:1c:81:25:92:f4:c1:ac:
a7:43:6a:83:5c:ad:b2:04:37:ae:7c:67:5c:8d:80:1b:29:5e:
f9:b9:74:ed:6a:0c:39:9c:94:34:45:c7:cf:93:26:6b:bf:46:
d3:11:a3:e6:bb:8b:a5:cc:30:5d:a3:78:30:5f:36:87:a7:cf:
31:6e:25:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncs+ShLOJIH9jKbeGqbjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM3Yjc2MjkxOWNmMzZkYzE0MjYzZjVlNTk1NWU4ZmZh
MzVkM2IwHhcNMjYwMzI2MDAwMjA4WhcNMjYwMzI3MDAwMjA4WjAzMTEwLwYDVQQD
EygzYzcxYzVmNzJiMzEyZmRjNTg2ZDFhNDU3ZWNkMTRiNmYzN2Y5MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvoUKKnm6LxvYnKzOkKSRSOLwc1C
MftO2XEdJ+FNVCdpGKQBbIRh+29TWfn95wfvngtkzMWoY+zZbJHUqQUwossOO0y1
X+q6dGMF44My2tSlyhNOyyKTJvh8UIvU7fFIoCaWbowTTqrDJXbgzyPFFOGQsXnc
CH5bQmC7LnN3N2bUZcQJ6DRyqZDVyfTclNlt355bi6nUQQOPsoXbP0HQRYb2fdLu
XGqbYZL0wb9EX5mZA/6U+CIcSaeMGzOPfDH6U17uB/LGAghfVRCNAf3p3BrwEn1j
4vzbltdunWYMGMua33Pjy5qYRwJFy3dXZAtM29zNd4z3ZTW3QJgro02smQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxxxfcrMS/cWG0aRX7NFLbzf5HOMB8GA1UdIwQY
MBaAFJNce3YpGc823BQmP15ZVej/o107MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjct
YWVkMTY0ODMyYThiLzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lMDA0MmMtZWJkMi00YThkLTllNjctYWVkMTY0ODMyYThi
LzEvazF4N2Rpa1p6emJjRkNZX1hsbFY2UC1qWFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgKATv1F
E9jjr5JcD3ZDwL8O0D4FAo5FSD8w90mL0S8Pyf+6czuIQOpFhjlTyvb16qYvyVCQ
dPblinJA4tsVHMq0lSmEo1oTJWKBwJQ7sNxXFFUmN9fc8sBGyZDJgc/bCP66+y63
X5qrfxSHM+l/I3D68LTskqRi+Sc6E8kKnkeae/BiNR3Z8iIG1YyBIYoYE5RqjSIh
WgbvWiJ//sdYEsmAat2dU5vrBTfVgrXNc9fc/rUSnWBxoyjzqXGbaCIcgSWS9MGs
p0Nqg1ytsgQ3rnxnXI2AGyle+bl07WoMOZyUNEXHz5Mma79G0xGj5ruLpcwwXaN4
MF82h6fPMW4lTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:50 2026 by rpki-client