Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: TRc5c1Vpi0OAWJN5YcKfMc1NdI/ca11i1u5UkmxJD08=
Subject key identifier: 99:E1:7F:0E:87:62:87:A5:72:2E:9A:BB:64:9E:7A:4A:70:94:78:33
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019D262853454EBD09EFD4CAF3F8FC5127AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 1148
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: aIWG7G7pc_c2slSSItEuUFBnVoI.roa (hash: S5hey+bOiO9SIrfKh6rWG2aF5cPDqfEVaBcsjW8NswM=)
3: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: n1KKwniboZ4uIvyhUT7yK/AZSB3XkZX8qqmjSWJVLRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:53:45:4e:bd:09:ef:d4:ca:f3:f8:fc:51:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=99e17f0e876287a5722e9abb649e7a4a70947833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:5b:29:c4:06:ae:3f:87:dc:4a:97:a5:7e:
33:81:cd:74:ab:80:57:1c:9b:9b:86:a5:e3:e1:7b:
65:0f:b5:56:59:10:52:7d:87:36:e3:8c:48:93:ed:
f1:39:67:8a:44:cf:34:18:d8:11:48:6c:e6:37:69:
bf:5b:2a:63:55:a3:eb:84:2d:f9:5d:b4:d4:52:91:
e2:62:a8:ba:f3:c0:58:a7:29:3b:d3:54:1c:c0:ae:
04:92:b9:55:0b:5e:3f:ff:8d:68:d5:c2:5e:c9:78:
49:4b:92:8c:17:a2:7f:72:c0:4e:92:18:81:35:c2:
bb:1c:67:5b:72:c7:87:06:12:55:4c:cd:b6:7c:06:
11:e3:b3:12:d4:3a:ad:97:4c:a6:72:a5:5e:19:45:
9c:e5:51:24:7a:83:10:37:83:56:2b:a5:e1:bb:df:
98:54:32:ca:67:3b:9d:69:93:35:c6:84:24:65:a7:
e2:dc:67:2a:ac:6a:80:e0:ae:fe:b1:81:2c:2c:b1:
88:83:1d:1a:cc:8d:e4:18:d4:23:2b:f7:92:76:07:
b1:b9:77:13:40:46:fc:ea:c0:e8:db:ac:94:58:cc:
84:76:bf:48:94:ff:a8:5f:01:9a:e5:ea:92:9f:39:
97:01:2f:37:3a:44:70:c3:58:07:53:3c:8c:1e:d7:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E1:7F:0E:87:62:87:A5:72:2E:9A:BB:64:9E:7A:4A:70:94:78:33
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3d:21:54:8b:24:4b:70:5e:54:ba:a6:eb:66:a2:b1:8f:d0:
e5:dd:b9:b7:b6:b9:ff:98:08:2d:1f:d7:58:d2:12:c3:2a:05:
95:38:c3:4c:97:15:bc:78:b5:41:22:e6:15:80:f2:5e:dd:28:
18:d3:8e:23:31:d7:d5:a2:7b:57:db:d1:24:e8:fc:99:7e:9d:
e6:db:5d:89:cc:af:d1:33:2d:76:ec:2b:6c:dc:32:69:b9:d0:
d5:d8:b9:aa:89:6a:02:e4:09:cd:5e:45:41:f6:9f:df:66:1f:
cf:72:77:07:32:48:ff:d5:a7:30:19:ac:2e:36:72:d6:c8:15:
59:03:78:b5:c3:be:d9:13:e3:3b:71:e0:d3:e6:dd:1a:1f:01:
04:d9:0b:a7:c0:09:82:86:1c:f7:e5:37:73:75:f0:ed:63:e6:
fb:6f:17:ca:a9:a2:d7:0f:8b:66:88:61:f6:9f:b3:09:06:d9:
00:80:6b:c2:8d:60:7a:fc:96:97:9b:96:74:ea:ac:fd:c6:99:
ba:45:53:3e:01:89:4b:e7:c9:97:fd:38:da:f0:1e:da:56:3b:
3b:ad:be:53:47:62:00:12:67:2a:07:a5:11:88:4a:84:5f:0b:
f7:67:5f:e5:0f:20:99:dc:a9:01:49:64:ee:98:34:80:d4:2d:
dc:a2:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:07 2026 by rpki-client