Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: xog77jyflark09einb3o7NkcsCFare/Uyb6vhgqLyyk=
Subject key identifier: D2:49:12:90:7B:2B:50:3F:37:40:C3:46:76:1D:5A:9A:27:03:C9:DA
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019D29976B4D34C88F8788E2FBDC35DC5FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 084F
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: CIjC0rRFY+4Bch2tgkhMzRVi2b/1CJZf9HTBQK2RL2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6b:4d:34:c8:8f:87:88:e2:fb:dc:35:dc:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=d24912907b2b503f3740c346761d5a9a2703c9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:a1:3d:87:ed:1c:fe:22:ce:83:31:a6:db:
3f:5b:c4:28:9e:83:38:fd:db:2c:d9:87:47:a5:1e:
a6:7f:bc:03:10:4c:e9:3e:58:f0:0c:3f:7a:48:a7:
4f:0c:84:9d:6b:16:e8:0b:68:75:65:fe:8d:16:42:
6a:b9:4b:4e:f9:e0:96:7b:10:bd:b3:10:fb:c5:cb:
73:d5:b9:28:36:70:70:b8:cc:f0:d6:8b:0e:f6:56:
3c:e8:fd:da:99:6d:03:3a:cc:be:76:d9:33:ce:ea:
ed:d4:5b:51:b3:5f:4b:41:50:e7:2e:19:15:5c:93:
90:b9:5c:f1:90:9d:cf:d5:3a:ba:fb:6c:d3:0f:ca:
60:5a:70:48:ec:16:8d:f7:21:46:42:35:3f:25:1c:
40:71:6b:04:a2:c1:15:af:5f:27:86:a5:dc:ec:b0:
28:94:af:e4:83:54:a2:9e:05:50:18:e6:d8:59:78:
8a:1e:62:b5:41:1f:e2:fa:e5:b9:aa:56:91:35:40:
4d:13:77:8f:f9:0e:38:44:61:2b:90:e3:cf:ae:06:
7a:e8:03:2e:92:d6:ac:91:1c:65:9b:62:f8:86:e7:
91:2a:26:56:00:f7:b7:13:aa:98:cd:08:3a:f6:a9:
9d:28:26:3a:79:46:1e:66:e7:fb:e1:00:32:9d:b7:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:12:90:7B:2B:50:3F:37:40:C3:46:76:1D:5A:9A:27:03:C9:DA
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:67:4f:68:68:4a:dc:f6:11:cc:06:33:5c:75:a9:d7:0e:4b:
e2:d2:46:74:e8:06:b7:e6:26:25:68:57:0a:c8:2a:c5:33:b3:
7e:ce:b4:6f:1d:7d:06:32:c5:3a:be:30:38:60:66:ea:d9:5a:
54:0b:51:ab:73:2a:99:65:b5:39:7d:e3:94:37:e1:f7:80:78:
03:2f:b7:d8:fb:dd:35:1a:89:26:b4:f7:5d:0d:c0:49:82:25:
94:25:72:a6:ae:42:40:ce:e4:79:d8:0c:f8:14:8c:71:44:75:
56:c2:48:a5:6f:dc:f8:14:64:0a:5e:4a:45:ed:e3:57:2f:73:
aa:11:73:00:d6:51:a1:f0:0d:f5:31:22:91:ca:f7:0e:72:48:
b0:ae:51:b8:67:f4:e5:7e:26:79:d7:2a:77:40:57:62:11:d6:
34:eb:be:c0:01:8e:4c:10:24:60:89:28:69:0e:81:53:23:98:
78:07:aa:37:71:73:d6:db:7a:d9:78:6a:5b:a2:53:73:b8:cc:
5f:d1:b2:01:40:55:eb:9d:e3:c7:67:f6:cd:1a:28:2a:6f:c6:
06:18:20:a8:90:6a:e7:aa:92:e5:2a:f8:c7:81:ce:1f:1f:f2:
c7:65:0b:fb:40:6a:01:81:87:d2:d4:b1:d4:7f:c7:76:06:c5:
e2:1c:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:52 2026 by rpki-client