Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
File: kO8bIyasFe3LfCBP5aIu7A4ys38.mft (raw, json)
Hash identifier: ziyd50rY2pOGY8oV2KzT2RV4swwQktggO9w//PkMsHE=
Subject key identifier: 71:D2:E8:93:F4:54:39:8B:B9:F6:46:0F:AF:E5:F2:47:49:06:13:0B
Authority key identifier: 90:EF:1B:23:26:AC:15:ED:CB:7C:20:4F:E5:A2:2E:EC:0E:32:B3:7F
Certificate issuer: /CN=90ef1b2326ac15edcb7c204fe5a22eec0e32b37f
Certificate serial: 019D329A170F14285B90E3082C03E37181F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
Manifest number: 69
Signing time: Sat 28 Mar 2026 04:00:52 +0000
Manifest this update: Sat 28 Mar 2026 04:00:52 +0000
Manifest next update: Sun 29 Mar 2026 04:00:52 +0000
Files and hashes: 1: IxzYud7Zm9pX7ceSCzWOzMYzmI4.roa (hash: hYfyKYalEjw04LrWBXTQpy02eEJWvTLpeHnpuj+sc5g=)
2: kO8bIyasFe3LfCBP5aIu7A4ys38.crl (hash: DmUlY5hsSaht6buFjX0kozxMx70R/exst2arItWGgIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:17:0f:14:28:5b:90:e3:08:2c:03:e3:71:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ef1b2326ac15edcb7c204fe5a22eec0e32b37f
Validity
Not Before: Mar 28 04:00:52 2026 GMT
Not After : Mar 29 04:00:52 2026 GMT
Subject: CN=71d2e893f454398bb9f6460fafe5f2474906130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:10:a2:30:62:53:50:82:82:1d:d3:b7:8c:
fd:12:35:e9:ee:e1:65:93:ba:d6:81:a4:3e:90:88:
f7:a1:40:68:e8:9c:a3:9c:3b:52:26:29:36:a5:5c:
65:33:64:c0:90:4d:53:9e:ce:fc:5d:c1:dc:20:be:
89:18:d7:06:ed:d7:84:04:45:00:8f:b6:63:53:90:
cd:51:7b:49:22:bf:d9:5b:1d:cb:6f:07:55:72:fd:
73:93:8b:4b:89:a9:8e:94:db:4e:ae:de:b1:16:de:
00:06:07:59:f6:b8:3c:4e:97:9c:4d:09:84:38:13:
63:52:bd:d7:3b:f9:66:7f:af:6d:d9:c5:f4:87:8e:
fe:d2:5a:d5:e8:15:a0:b6:9b:3c:21:2c:60:c4:08:
80:98:4a:ba:cf:39:83:be:5d:d3:8a:14:8a:ab:cd:
99:88:d8:04:7a:19:23:14:7e:73:1c:69:b0:0a:83:
57:97:6a:27:a4:5b:1c:c8:af:24:17:4d:1c:2c:07:
9e:0b:58:ba:6b:5e:f7:f3:98:ae:0a:37:dd:e3:2b:
af:9d:af:76:02:5e:90:83:e7:c6:0a:eb:d7:52:4a:
ec:c3:9f:64:75:b9:2c:2c:2e:64:0c:a2:d4:9e:a9:
f5:43:c3:a2:53:e5:01:ab:e7:02:12:b7:65:d9:a5:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:E8:93:F4:54:39:8B:B9:F6:46:0F:AF:E5:F2:47:49:06:13:0B
X509v3 Authority Key Identifier:
keyid:90:EF:1B:23:26:AC:15:ED:CB:7C:20:4F:E5:A2:2E:EC:0E:32:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:19:19:74:48:b2:3a:6f:b6:3a:83:4c:bf:e3:d0:54:91:
59:7d:bf:3f:9c:85:8a:b5:94:c3:5d:ca:55:3f:76:f2:fa:e1:
4a:5f:dd:6f:6e:a2:b6:43:86:4f:8a:df:61:c3:21:bd:92:d8:
22:d6:d5:95:d4:af:6a:3b:97:79:7b:1f:58:78:79:2a:f4:57:
d3:b1:8a:d9:da:bf:7a:85:9a:5c:2d:22:93:fa:33:b7:e1:ff:
ff:2d:ce:b6:43:c4:b9:8d:f3:a8:59:22:84:cd:9b:1f:a9:89:
a1:86:e4:99:3e:96:52:6e:35:ec:8c:38:fc:a6:59:63:b7:8e:
8b:85:30:c6:e0:33:1b:e8:7e:07:6f:23:f9:e8:69:17:68:24:
42:5f:49:a8:60:aa:7d:5e:1c:77:58:37:70:2e:6a:a0:00:2c:
a6:dc:b5:03:e1:18:6d:0d:f5:b0:8a:0e:ee:48:d8:c7:bb:cf:
d5:77:8a:59:ba:fe:48:81:68:83:37:42:02:16:f9:6d:c4:13:
ca:32:c4:db:51:a5:b7:d9:93:80:e8:fd:8b:16:45:5c:a0:5a:
1a:e8:e9:f6:25:08:be:91:98:5d:1b:3f:25:79:ae:52:dd:5f:
83:63:83:87:c0:20:47:62:77:62:1d:2b:d3:16:f5:a9:a3:b6:
0f:b8:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:39 2026 by rpki-client