Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: OD2Kum6PfIBs2dC/4i9Z0/e4V9LtI33EVDWEXjzeX6g=
Subject key identifier: 43:A3:AD:B8:76:0A:9B:C8:77:F6:A4:10:C1:8C:E7:21:69:43:3D:FB
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019D25BA257DA6D8D9E66C11D50BD1BCF94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:00:49 +0000
Manifest this update: Wed 25 Mar 2026 16:00:49 +0000
Manifest next update: Thu 26 Mar 2026 16:00:49 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: ZEAqxyoGGP7GcOrmi0J2aQvzGTL+N48xEHQWYUX2KTU=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:25:7d:a6:d8:d9:e6:6c:11:d5:0b:d1:bc:f9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Mar 25 16:00:49 2026 GMT
Not After : Mar 26 16:00:49 2026 GMT
Subject: CN=43a3adb8760a9bc877f6a410c18ce72169433dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:fb:43:91:e1:b1:22:e4:8d:db:1a:31:48:
fb:67:31:0a:eb:ef:62:0f:57:2e:32:39:12:3a:2d:
08:72:70:24:df:34:d1:40:06:94:08:dc:80:67:e1:
99:19:f5:64:c0:59:85:d5:5c:b1:09:e9:0f:28:2a:
1f:00:8b:6a:e7:c9:79:c8:f0:5f:f6:81:79:0a:45:
63:0e:a4:2d:cb:f7:11:bb:85:f0:bc:f3:91:9b:5b:
a4:2a:dd:36:21:62:e0:6d:37:66:00:9c:06:dd:32:
d0:03:54:e8:99:d5:dc:58:2f:73:28:bd:92:9f:72:
3e:92:88:8a:6a:be:6b:bf:74:30:9c:43:ec:8e:75:
d9:59:61:3e:3f:93:25:78:ca:80:ee:59:dd:55:1b:
0c:c4:85:3d:13:b3:76:f0:9c:e6:6a:2e:4d:1b:4c:
22:c9:49:5a:7c:88:52:71:84:1f:45:52:a9:fa:02:
ac:bc:41:5e:3e:4e:43:38:e8:18:6f:95:a1:9e:de:
c5:3e:a7:2f:d0:72:37:4a:e7:1b:05:14:85:96:f0:
2e:9d:89:4a:29:36:ed:b8:07:c9:7f:c7:ba:23:4e:
c3:d4:a8:02:83:af:b1:7b:5a:0b:72:e9:81:14:3c:
57:b2:69:9e:58:37:ae:d9:ec:43:ad:1a:bb:29:e9:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:AD:B8:76:0A:9B:C8:77:F6:A4:10:C1:8C:E7:21:69:43:3D:FB
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:2e:24:1c:3a:d6:55:43:99:23:84:f4:51:59:b1:4a:97:
62:b2:6a:44:a9:78:bb:b9:f8:c2:b1:ad:fc:24:f9:cb:51:45:
8a:04:8a:96:fc:21:32:c0:f3:02:ea:df:6e:74:24:97:6a:ce:
72:6a:e8:31:a5:1a:83:49:24:66:1d:7d:d4:d5:68:38:95:73:
26:4a:c3:77:51:4d:bf:07:28:a4:a0:aa:1d:66:5b:98:b7:a4:
24:94:01:fe:6a:76:32:cd:02:4a:85:92:49:1c:46:dd:d4:79:
22:18:61:b7:4d:03:c7:08:ec:ee:3a:bf:ba:a6:26:18:c0:b7:
f5:79:c8:d4:91:73:43:77:0b:7f:4a:d9:cd:64:d9:03:52:8b:
fa:e4:00:9d:a3:ae:72:78:d3:f9:4b:69:d1:c6:d7:0d:d3:cf:
31:3f:6a:30:76:ac:d5:d0:c7:19:f6:64:9a:03:b2:df:61:5d:
c7:b5:e3:2c:6d:49:12:5e:1f:8f:81:5b:cc:49:b5:59:d8:dd:
f3:87:b2:2f:25:e3:11:66:af:8e:71:c8:ea:75:30:5b:b4:fe:
78:1f:84:3a:f1:e3:d8:e2:2b:e8:bb:3e:4e:5d:e8:94:80:d7:
50:47:12:67:1b:c8:35:2a:eb:53:64:3e:58:01:4b:1d:23:ac:
e4:b5:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:05 2026 by rpki-client