Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: NR7MH55TmyABm+EJ2JLKkvPFcTTUCT/9pNPBhZuMEWA=
Subject key identifier: A1:27:56:8F:5D:11:34:87:3C:50:43:8E:AE:D3:6D:D9:88:66:4F:A8
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 019D258374FD06F54E0919E53330E39AFE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0CC3
Signing time: Wed 25 Mar 2026 15:01:04 +0000
Manifest this update: Wed 25 Mar 2026 15:01:04 +0000
Manifest next update: Thu 26 Mar 2026 15:01:04 +0000
Files and hashes: 1: JLHc8-P_7_DUKLbSOYfj3hNYY4o.roa (hash: WG0boTSyS99K3270L73wT11CILS0oIYBWT3s8ssKoJ0=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: EFLOYZ0IWwY78uALUBMAKo+E5pcARUkahkqpQxBKnIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:74:fd:06:f5:4e:09:19:e5:33:30:e3:9a:fe:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Mar 25 15:01:04 2026 GMT
Not After : Mar 26 15:01:04 2026 GMT
Subject: CN=a127568f5d1134873c50438eaed36dd988664fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:6d:59:a0:f9:8f:e3:38:d1:d9:93:dc:9a:
6b:03:5a:86:92:70:a7:b6:9d:e2:14:3e:0f:20:65:
ec:38:c8:50:bf:26:55:12:10:53:b6:bc:46:96:63:
7a:36:47:4a:31:39:c0:57:ac:9e:4d:64:c0:88:f5:
b3:0c:e4:e7:86:c8:c9:25:dd:e5:53:98:0b:42:08:
f8:37:ef:6f:2c:7e:66:3e:b0:24:9f:a9:87:a1:09:
f4:5e:ee:fa:53:2d:44:2e:9d:48:91:88:19:9e:d8:
a1:49:83:05:b5:11:02:5b:25:f9:57:f3:4f:e7:ce:
90:04:9d:cc:ba:06:23:73:6c:90:d3:3e:4a:cb:e8:
8a:27:20:b0:5f:d3:1a:f8:ca:39:ad:e0:19:ac:56:
0a:9e:84:b7:5d:46:62:1d:9a:33:b9:53:e4:54:f9:
a5:c9:cb:8f:38:f9:c4:80:1f:cb:e8:47:75:0f:7a:
d5:28:41:5a:6b:08:e3:1a:5b:34:7f:5e:19:f8:db:
51:5a:c6:1a:8f:92:a7:c5:61:98:1c:45:2f:f8:41:
c1:8c:ae:70:e0:96:39:47:00:9f:7d:90:32:84:c6:
b0:e6:d2:a6:be:cb:fa:8e:e1:64:1c:e7:74:72:3b:
1c:a7:da:0d:df:1f:a3:7b:af:db:bd:e9:d5:22:3e:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:56:8F:5D:11:34:87:3C:50:43:8E:AE:D3:6D:D9:88:66:4F:A8
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:99:df:d0:99:04:50:9c:9a:12:ca:fd:ed:9b:97:66:43:
4d:95:aa:f9:f4:c3:d9:90:2b:37:48:06:c5:aa:69:23:27:40:
4e:e2:2f:1a:b1:f9:1e:22:f8:07:13:4d:c6:4e:f4:c4:42:45:
28:ed:78:36:34:11:dc:d5:43:09:e9:22:c6:cf:e2:f3:b0:25:
d1:45:bf:dc:f1:a5:88:8d:30:24:9b:65:5d:bf:d1:fa:37:3e:
77:34:e2:d3:24:fe:65:b6:f1:0f:52:a4:59:b8:e2:a4:1d:be:
2e:75:0a:92:e7:22:ff:af:45:62:37:0e:b9:34:bd:d9:fe:cb:
ce:9e:17:d5:aa:e7:0b:4c:96:65:a9:10:0b:13:e8:6a:9d:9f:
b1:dd:87:00:b8:0f:34:95:f3:c6:b8:e6:be:b7:ff:ca:e3:34:
12:a1:7d:1f:4e:22:50:41:63:8a:0a:1c:9a:3c:ef:a0:b8:e8:
f8:c9:36:8b:e6:dc:d6:27:3f:f5:32:1a:28:94:41:2f:f3:bd:
81:8d:a9:02:d3:84:2d:a4:55:88:0c:e8:66:84:cd:cf:a9:21:
41:d7:d4:c1:87:ee:59:62:f8:d2:e4:d7:92:8f:c6:3c:a9:e1:
6f:da:36:cf:f7:4c:4e:77:f5:c7:a2:12:14:df:ce:a8:63:29:
4e:e3:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:35 2026 by rpki-client