Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: f2BqawpFWxt4pKPj2brWcYGgjJbZXgICqekiTKOSt0U=
Subject key identifier: 07:DB:7B:8D:AF:48:A0:F8:08:7A:8D:7F:65:98:6F:B4:84:46:61:58
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019D2960FD20E5C0EC0F348EFEDB4BAB2206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:55 +0000
Manifest this update: Thu 26 Mar 2026 09:01:55 +0000
Manifest next update: Fri 27 Mar 2026 09:01:55 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: 3NPq62dVMVEKXPWOHgPhe+UsuwB/h7r0yKcmAwJr+SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fd:20:e5:c0:ec:0f:34:8e:fe:db:4b:ab:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Mar 26 09:01:55 2026 GMT
Not After : Mar 27 09:01:55 2026 GMT
Subject: CN=07db7b8daf48a0f8087a8d7f65986fb484466158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:a4:24:1c:da:5f:09:8a:7a:00:9e:9f:27:
2a:52:e9:a3:a5:75:bc:f5:a8:cd:a1:b8:7c:fd:d0:
9c:a3:6c:66:36:fa:d9:5c:34:eb:5d:0f:1e:31:62:
c5:92:90:2b:bc:20:68:94:ff:8e:58:f2:a6:c7:6c:
82:de:81:06:3c:54:fd:d5:bf:8e:e1:f0:ef:73:9f:
05:30:d5:e1:ca:ca:bb:58:ae:9c:99:6e:13:c3:78:
f2:38:2b:58:2d:57:d0:8c:0a:d3:b0:36:ea:19:11:
a8:0b:00:b0:50:c0:a2:5b:cf:ad:89:c7:1b:0f:56:
f0:bd:2f:8f:1a:0c:d4:43:39:b9:9e:52:a3:e5:16:
0c:ce:f6:e7:4f:fb:3d:61:34:58:b8:ee:84:81:13:
90:bd:1d:a1:7c:6d:7f:19:7c:12:aa:5d:de:c3:9f:
c7:1d:62:b3:b2:64:9b:9c:5d:2f:3e:c9:bb:a9:f8:
6b:98:63:0c:f9:72:22:e7:61:1c:44:36:f9:06:ef:
22:b8:43:70:1e:e0:b0:28:67:40:83:60:77:4b:e9:
e6:e0:2f:33:35:50:7f:8e:45:ea:50:17:e7:05:ad:
b5:2f:dc:86:c0:5c:02:f2:dc:6d:ef:bb:a0:61:a9:
c1:c9:36:fc:c2:fb:02:7d:76:cf:06:21:e2:9d:b9:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:7B:8D:AF:48:A0:F8:08:7A:8D:7F:65:98:6F:B4:84:46:61:58
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:28:9c:94:80:f2:a5:48:5c:d0:de:1a:ed:b4:2e:e0:17:
b7:99:c1:ff:5d:e4:aa:d7:82:59:5d:29:99:b7:4b:fe:74:a7:
aa:8c:40:cc:0d:28:c6:17:2b:9e:c7:2b:7d:67:d9:e3:e1:7b:
4a:a6:11:c2:c2:41:da:5b:e9:ff:ad:43:96:61:5e:4e:83:1f:
ac:bc:85:39:7c:a0:b3:74:76:cf:ad:e1:c0:75:39:20:64:38:
b7:72:c8:8a:f4:52:93:e5:35:28:24:c1:65:b9:83:84:91:da:
cb:aa:7c:0e:d6:29:2d:ab:e7:fc:c2:e2:97:35:c6:fa:89:98:
48:c8:1b:0c:86:2f:5e:3f:d1:15:31:58:d7:23:15:e2:f8:01:
cf:51:94:8a:17:5f:17:7e:2a:bb:cb:64:8f:a6:e3:cc:be:89:
9d:ff:80:a5:49:f6:9a:90:93:e0:07:e6:45:dc:00:b0:dc:52:
d8:c3:41:6b:e4:b0:85:30:c3:f5:28:73:61:a7:25:0e:99:d6:
d8:30:a3:23:9d:b3:a4:1c:9d:c7:f1:77:11:5a:fd:24:37:cb:
87:c0:23:e3:5e:53:32:26:ec:14:95:38:41:1c:8c:4a:50:d2:
c3:c7:ad:29:15:64:9f:06:71:89:56:20:fb:2c:e4:99:a1:df:
d1:0b:d6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:23 2026 by rpki-client