Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: QG2aEiV3qswh7LQ91UxqYLM6ThsFYIAUBpRqAY0fsuY=
Subject key identifier: 02:A7:75:90:11:3F:7D:33:0E:19:13:2F:EE:53:D5:5C:29:5F:CF:E4
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 019D2997585CB2A702DD658BF79A866F2322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 114A
Signing time: Thu 26 Mar 2026 10:01:17 +0000
Manifest this update: Thu 26 Mar 2026 10:01:17 +0000
Manifest next update: Fri 27 Mar 2026 10:01:17 +0000
Files and hashes: 1: iuwBL7EOrQa4HbLS-ENYqi2dlmg.roa (hash: l+IA0E4FLdunXgerhqHKPGiXveZnWwjczc5i6icbMxI=)
2: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: JeakceVdO1ljDB1EaWJOMKkg3g9hiwR7WMKowLyPj2g=)
3: lPKn0A-IXhdHwCClGsh4tcwcKys.roa (hash: r48MZGYcfxv5fZud0sCAUwlrU9Dsef9uT7Z4ZtLSoLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:58:5c:b2:a7:02:dd:65:8b:f7:9a:86:6f:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Mar 26 10:01:17 2026 GMT
Not After : Mar 27 10:01:17 2026 GMT
Subject: CN=02a77590113f7d330e19132fee53d55c295fcfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:2e:bd:6d:a2:82:15:54:13:12:d0:c3:e6:
1e:0d:3c:f7:6e:83:fa:1e:af:02:0b:ad:72:aa:87:
1a:3e:99:ec:74:56:13:6b:c5:1a:be:a9:48:3b:fd:
90:d2:0b:34:7d:72:cc:16:94:9b:51:6e:11:3b:d9:
d5:30:4e:d2:9d:9d:78:91:07:96:06:9c:31:a7:22:
6c:6c:7c:e6:80:08:17:0e:d2:54:52:b1:38:e0:f6:
cb:21:84:b8:c6:44:c0:07:dc:ac:f7:6d:83:60:23:
02:de:18:29:99:61:68:57:ab:5e:5c:5a:06:9c:f2:
14:51:3b:78:87:a5:bc:5b:a7:6c:4b:31:b2:19:26:
19:5b:5f:f0:8f:dc:ea:3b:1b:07:79:b4:37:d3:05:
0d:2d:53:33:1c:68:e1:b0:b4:e0:53:0a:84:62:f8:
47:25:aa:f3:fe:a9:9f:80:f3:e4:94:72:e0:78:da:
aa:5c:cd:fb:4c:59:89:dc:23:46:70:90:5f:25:c9:
2e:66:fe:ec:cf:fd:62:ed:93:45:0f:83:70:2e:7c:
59:e9:cf:fd:76:03:d4:de:62:02:c3:19:3e:f7:00:
35:30:17:16:76:23:aa:68:43:60:0a:60:80:f5:0d:
46:51:a5:17:23:a6:1c:97:2b:73:30:31:fa:2b:14:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A7:75:90:11:3F:7D:33:0E:19:13:2F:EE:53:D5:5C:29:5F:CF:E4
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:a1:cc:e2:1b:ba:7d:5e:7f:ab:83:6c:2a:a7:85:ea:d7:
0a:f2:e3:95:b3:fe:9e:74:15:11:b8:6f:ae:19:10:77:82:96:
8d:c9:60:17:48:ea:9f:28:81:e6:43:46:2f:2f:c4:de:6a:f8:
bb:f4:97:15:3a:36:71:46:67:74:d4:28:70:79:0d:c7:ba:13:
00:64:cb:67:8e:a1:d0:ed:49:c3:61:d7:28:52:10:df:d3:31:
b2:bc:6a:79:c5:6a:71:4e:9c:28:92:f4:05:04:f4:ed:28:94:
7b:40:73:83:1a:6f:ae:17:b1:4f:4a:51:95:e6:27:d4:79:2a:
10:31:05:dc:01:b0:5d:e9:0d:64:0f:ed:01:bd:3f:bd:8c:68:
0c:21:e9:f4:1b:69:5b:25:de:db:38:34:90:b9:ca:86:e8:ff:
f1:3e:60:13:7b:9a:7f:fd:79:0c:44:e7:12:fe:4b:f2:61:78:
f9:9a:5f:f8:1f:67:eb:03:39:3b:19:52:fe:17:c0:d6:aa:29:
87:64:16:54:0c:98:15:84:23:cd:a3:fc:1b:ea:4d:ae:52:31:
62:5a:81:cd:58:23:a3:44:ad:d4:33:08:98:44:f0:5a:7c:ce:
6d:5f:1b:1e:c2:22:0b:af:99:07:92:8f:93:30:51:49:9f:2c:
f2:78:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:18 2026 by rpki-client