Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: H+OIkQSuCIeKSrghTgp7sJAxjjIVF4bgfxmHtb5rvjo=
Subject key identifier: D8:98:2B:40:E7:00:9A:70:3E:51:F2:E5:6A:93:B3:78:19:20:D3:22
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 019D2704E50794B0062169834E733B6748BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 0692
Signing time: Wed 25 Mar 2026 22:02:05 +0000
Manifest this update: Wed 25 Mar 2026 22:02:05 +0000
Manifest next update: Thu 26 Mar 2026 22:02:05 +0000
Files and hashes: 1: j8yGFu1k6_cogtT2LrDEqPHQJXU.roa (hash: 5Bbq3oVj4UwDrk3sxxzhNCBHybTGlRHYvfkfCXUPA9E=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: O1P2oKHT1JqmNmvacyr2emqPms9+aOoxfqrtyTeIikE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e5:07:94:b0:06:21:69:83:4e:73:3b:67:48:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Mar 25 22:02:05 2026 GMT
Not After : Mar 26 22:02:05 2026 GMT
Subject: CN=d8982b40e7009a703e51f2e56a93b3781920d322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:a0:9f:e1:89:90:1b:17:4b:d0:44:6f:6a:
52:92:02:e6:b3:86:7c:e5:fa:6c:66:cf:a6:db:e3:
06:5a:d5:26:d2:88:51:d0:30:03:ec:7e:2c:d9:2e:
2e:15:dc:f1:e0:42:28:b1:59:ae:5b:56:df:06:d8:
ac:37:50:71:8e:a0:31:7d:b2:81:b3:89:e7:48:50:
bd:fb:39:f9:75:92:7b:45:0d:02:cc:b9:83:4a:8f:
23:c2:91:07:f7:7b:90:91:8b:88:1a:ab:82:d9:ab:
92:93:14:f2:cc:7d:3e:63:3b:47:eb:d6:87:47:58:
e2:84:b2:19:0c:b3:df:ae:ff:6b:87:d4:83:ae:a6:
43:58:a7:0a:92:09:c0:2a:98:8a:5a:46:20:71:2a:
72:ef:39:3f:c1:23:cb:a1:68:f0:4e:e2:5d:da:cf:
42:32:78:a6:92:3f:95:75:d0:78:da:d4:32:60:bd:
18:8f:76:d3:b6:1f:bd:32:84:77:54:cf:d6:df:b3:
60:9c:05:1f:63:7e:1a:3d:34:f2:cc:75:73:b9:ca:
3e:ad:2e:ab:96:34:5e:f6:18:05:67:37:33:ef:11:
d4:f8:b4:bf:64:a6:24:3c:e4:85:fe:b9:84:42:4c:
4a:aa:fd:b9:64:32:88:5f:25:e7:67:c2:01:cd:3f:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:2B:40:E7:00:9A:70:3E:51:F2:E5:6A:93:B3:78:19:20:D3:22
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bc:e8:b4:7e:0c:1a:24:27:e7:e8:03:39:92:47:0f:c8:4e:
a5:8d:26:15:56:70:a7:d2:25:48:31:9d:d2:ce:c9:a1:94:27:
7f:e8:6e:01:e2:c1:61:de:83:b6:6f:21:d7:f8:2d:ce:0d:2c:
ba:54:d4:3e:da:a4:a5:91:66:54:11:4a:1b:14:5a:1c:2b:10:
fb:db:b1:f2:07:5e:8f:4f:a9:a9:c2:9e:af:63:95:ef:79:e3:
8e:c7:46:8e:03:27:b2:4c:ca:b9:b9:10:e5:65:4c:60:34:7d:
58:6e:68:d7:7c:68:76:ab:6c:6b:b0:b3:9a:e5:ee:5a:46:09:
2d:f8:ed:7e:71:66:cd:f5:b2:6a:87:65:72:28:d5:88:93:5b:
64:2e:76:f4:f1:f2:66:a3:48:97:51:ef:a5:f9:24:7d:41:fe:
3b:20:38:62:58:09:8b:f4:ed:32:13:51:54:95:e7:fd:e6:8e:
6b:fc:89:d8:44:6c:ca:c8:2b:9c:ce:f3:94:ef:2d:28:e3:b1:
f8:ea:e9:33:dc:57:97:dd:f4:d5:1a:f5:e5:68:55:21:65:4e:
4e:bc:f6:80:76:79:1e:eb:0b:4b:98:30:72:32:f7:dc:dc:08:
a9:36:7d:c5:12:96:e5:10:53:ea:5a:47:67:a4:36:c6:99:0d:
73:b6:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:30 2026 by rpki-client