Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: /vE4qtZlTqr7Kqrl/HdlIffyU7LbypKLixsFRfKR6ck=
Subject key identifier: E6:FD:CD:36:90:6D:A4:4C:FF:2F:10:5E:E0:14:0F:3F:75:2A:E0:CC
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 019D2A04D0C2CA9FF43FB8917529A47ECE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0C9C
Signing time: Thu 26 Mar 2026 12:00:51 +0000
Manifest this update: Thu 26 Mar 2026 12:00:51 +0000
Manifest next update: Fri 27 Mar 2026 12:00:51 +0000
Files and hashes: 1: P_Lt8AY8fM5LppruerzO34vRqLY.roa (hash: zp6zmtIN8JWsWA0pcCGjGihKqrwJVCtW0jabbQoyYms=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: 8O95F9ohWYUddic0Wz9V4ZU3NZJdu+AwF4K+1W/5bZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d0:c2:ca:9f:f4:3f:b8:91:75:29:a4:7e:ce:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Mar 26 12:00:51 2026 GMT
Not After : Mar 27 12:00:51 2026 GMT
Subject: CN=e6fdcd36906da44cff2f105ee0140f3f752ae0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:81:be:3d:7c:49:af:a2:7e:27:bf:46:fe:
77:80:bd:f4:d5:af:fc:d2:45:86:e5:f0:71:1d:17:
bf:2c:b8:8d:38:d0:23:2a:a0:5c:5f:72:ee:b4:74:
ac:a6:dc:79:81:b8:72:88:dc:2e:4f:32:c0:04:44:
2e:de:9f:a8:dd:40:6d:f2:12:ea:9f:ec:cc:8c:34:
9a:09:c0:99:a3:41:aa:b5:c6:af:73:e5:46:b0:b4:
04:14:d1:b0:6e:39:de:df:e2:99:a6:66:b2:40:7b:
e2:9b:c8:80:8f:d3:f5:fc:30:26:9b:8e:af:89:3a:
26:1d:db:ad:90:1e:1e:e5:b1:39:de:89:ca:6f:80:
87:84:d2:03:e4:88:3e:4a:eb:b0:c4:e6:e9:58:5a:
3c:74:a4:0d:45:77:42:b5:4d:7c:3a:4f:0e:af:6f:
3f:17:b2:c9:33:3b:11:a8:07:29:08:ec:64:65:cf:
1c:7d:2d:97:fb:c5:99:47:84:08:a3:29:2d:8b:2b:
25:09:e7:52:20:56:eb:ac:a8:23:e2:d8:65:db:be:
fe:56:57:a4:6c:3f:b5:db:da:1e:73:f1:07:d7:ed:
e5:da:6c:82:be:e9:c2:62:29:92:c1:30:68:35:07:
ea:de:4c:57:e1:25:17:08:51:63:cc:dd:47:1a:0a:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:CD:36:90:6D:A4:4C:FF:2F:10:5E:E0:14:0F:3F:75:2A:E0:CC
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:d8:75:82:45:47:f1:da:30:96:61:ec:d5:e0:0d:3c:0f:
48:2f:be:ba:1e:12:1a:18:30:37:7c:35:f0:5d:3d:a7:ca:7c:
58:e8:58:94:47:5d:3d:c8:bf:92:9a:a4:d8:20:2f:c5:36:25:
3d:a1:8e:ad:d8:03:b2:5f:ef:1a:d5:e5:5a:ef:b1:fa:7b:99:
87:75:ea:1c:fd:2d:57:c8:fd:be:5e:0b:1b:d8:0f:5b:a6:0c:
02:3e:ea:5e:fb:64:18:53:d0:26:1d:29:ce:55:fa:18:cb:55:
de:da:ca:0f:b8:b2:53:66:b9:26:c7:0a:f7:fe:1a:ab:b6:d8:
e8:a3:5a:c1:79:e4:7c:89:0a:d5:64:96:4a:a1:3c:7c:06:ba:
eb:7e:13:03:df:63:45:3b:4e:ee:dc:36:99:1a:52:60:61:61:
95:d3:a3:23:1f:b3:ee:df:c1:e2:0a:27:96:fb:b4:56:c2:4a:
b4:17:cc:26:e0:58:ca:0b:6e:37:d5:ab:fa:9c:d7:79:84:b5:
13:05:c4:36:5e:4c:4e:24:81:6f:95:20:14:93:08:ca:b1:03:
aa:9b:46:20:dc:be:f0:6f:48:ad:e2:fd:a0:99:38:0b:4c:e6:
58:ad:64:3b:aa:05:1c:8b:8a:37:f6:43:4f:23:ff:d8:02:a8:
af:af:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:04 2026 by rpki-client