Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: /4p2QVNb6+qt27Kqjb4jHCPQfQcgHWxIxvsZbcLYpeY=
Subject key identifier: 40:8D:9D:F6:8C:44:61:C3:87:C3:26:54:54:FD:B8:24:8C:37:E0:0A
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019E1EA3D5F037A4F7E33B11273C50AF016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:01:53 +0000
Manifest this update: Wed 13 May 2026 00:01:53 +0000
Manifest next update: Thu 14 May 2026 00:01:53 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: G0cJnLp+sxliyODbmqHi/BPp+BYZTB2nn4WvxHPHDiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d5:f0:37:a4:f7:e3:3b:11:27:3c:50:af:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: May 13 00:01:53 2026 GMT
Not After : May 14 00:01:53 2026 GMT
Subject: CN=408d9df68c4461c387c3265454fdb8248c37e00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:4b:92:c5:03:1c:24:1a:cb:51:91:89:52:
d1:47:21:a6:ac:3f:a9:7a:8d:db:eb:1f:43:69:28:
6c:7d:15:38:53:3b:2a:05:41:db:c9:63:15:a4:56:
52:c5:d0:f0:63:ad:31:35:ab:c1:60:94:7c:55:14:
a5:d7:fc:34:e6:50:b2:a6:01:c7:f6:63:1a:79:a9:
4f:83:ca:c2:82:9c:6e:54:87:1b:34:7a:3d:55:df:
e4:7f:9e:3e:ea:97:8e:3c:11:f0:93:87:3a:8f:a3:
c7:32:d4:b2:6b:8b:77:bd:4e:0d:f9:da:b3:42:19:
91:23:25:ef:27:a1:07:f4:e5:33:f5:16:35:89:b6:
68:7c:aa:e2:ac:64:73:ff:e3:8a:b3:bb:3a:e4:fb:
b7:27:7b:71:6e:47:e2:b4:c4:2a:a4:a7:9a:1b:6f:
35:24:8c:98:15:2c:b0:ac:4f:be:5d:d5:88:ac:db:
8d:78:7d:6c:42:4f:db:e6:92:38:1c:ff:ab:b4:d6:
a2:9d:98:9f:af:b3:2b:6b:23:1e:ea:e0:4e:4f:c8:
46:a6:bc:a8:87:19:a9:00:28:19:86:34:67:10:11:
2d:49:d4:c6:46:c7:66:75:42:c8:3e:c3:d3:ff:ad:
95:fd:22:32:ec:fc:ec:7d:3d:6e:8a:4c:92:a3:e3:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:9D:F6:8C:44:61:C3:87:C3:26:54:54:FD:B8:24:8C:37:E0:0A
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:c5:d2:a1:9a:83:cb:4e:75:16:3b:98:46:5d:23:54:2e:
31:14:17:d5:b3:9e:40:5d:d6:53:f1:fb:dc:81:d8:41:2a:73:
b1:94:4a:2e:ce:94:91:95:1b:90:24:74:3c:80:fc:af:02:9f:
49:0e:56:57:88:3a:e7:99:1c:94:27:18:66:be:0e:f4:42:b0:
3d:5c:80:f0:95:1d:b7:14:a3:69:1f:46:8b:4b:b1:85:a9:2a:
2a:ae:d8:bc:f6:41:b2:24:a6:4f:2d:04:8e:6a:9a:fa:d2:fa:
86:e3:66:60:1a:67:dc:27:43:a6:76:c7:8d:5c:27:11:ad:9f:
46:11:41:97:03:65:3f:96:ef:fa:ba:41:76:c0:f2:b3:cb:6f:
de:23:a5:44:4a:e9:49:ea:27:66:50:ec:4e:8f:e0:f6:14:87:
93:6a:b1:aa:53:32:d9:22:98:d8:f7:8f:f3:f3:50:da:6e:6d:
51:a1:89:d7:46:1a:62:e0:75:84:51:8e:20:7d:86:d8:7d:f8:
13:51:32:3a:d2:8f:e7:ea:a4:cb:f3:4a:70:96:fd:35:4a:92:
4f:5d:16:08:10:78:63:29:cf:b8:fc:76:ee:69:35:9f:09:28:
be:b0:30:fa:95:e9:7b:26:fe:af:b3:0e:b1:7b:08:cf:03:a0:
3b:70:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:46 2026 by rpki-client