Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: ZhtGvoTcP8iS/uiXaN1QBhDpMF+q4ErsO9fDjKQxLD0=
Subject key identifier: 6E:4C:15:D3:E9:EC:2B:B3:D7:80:EF:7E:1B:0A:82:59:E6:7A:FF:80
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 019CACB57E1EA98E742C0E86B56CAC0A6B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 1345
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: aS25oNGT3Qd403VN4pD9jPSnpccWkiQE7izOAv+cNSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7e:1e:a9:8e:74:2c:0e:86:b5:6c:ac:0a:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=6e4c15d3e9ec2bb3d780ef7e1b0a8259e67aff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:8f:eb:20:5e:1e:c4:72:c0:89:3d:8f:a3:
bf:75:e3:8a:36:bc:3b:93:9b:1d:d4:8b:59:6d:a8:
61:3e:d6:63:02:e1:aa:54:1a:b7:db:55:8b:11:b4:
be:80:6b:c5:5a:88:6c:32:2d:2d:d5:05:1e:a8:ba:
f3:d7:ed:ff:94:18:85:1d:cd:a2:8e:e2:4a:61:07:
56:0a:a9:73:a3:9b:cb:16:53:72:45:58:54:1f:4b:
8f:06:d2:8e:9b:a6:b8:91:76:3b:f0:ee:db:10:c4:
0a:5d:03:c5:ec:b2:99:54:e1:41:1a:45:5e:d5:b9:
d1:8d:fc:43:c6:f1:24:7c:d2:aa:76:a2:28:26:bc:
ea:1d:51:37:ae:3b:d1:4f:cb:4e:49:cc:e6:24:cc:
91:da:65:eb:13:f3:91:dd:f4:1e:96:3d:1b:18:e3:
64:24:f3:92:a4:b1:7d:24:fd:b1:cb:11:85:c7:0f:
2a:f5:b4:c3:63:1a:1b:ac:e4:59:f6:95:7f:b4:1d:
24:7b:57:30:55:d7:a9:92:a8:22:ad:78:d4:bd:75:
98:f3:c2:a9:1e:3f:09:a2:2c:eb:ab:48:70:1b:d9:
74:ac:76:a4:26:73:36:09:c2:cc:51:6c:7b:ca:04:
a3:7c:16:79:d2:00:63:dd:af:fa:34:d7:13:d7:e3:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4C:15:D3:E9:EC:2B:B3:D7:80:EF:7E:1B:0A:82:59:E6:7A:FF:80
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:cd:27:6a:83:7f:23:ca:91:65:8d:2d:09:2e:21:b9:ae:
3c:98:79:b5:87:2b:1d:0f:5d:a4:83:eb:f3:d3:a4:8f:82:23:
73:c1:d9:b0:bc:83:d2:f4:0f:41:94:17:83:4a:98:67:ee:d4:
03:4a:76:9b:1f:1c:96:37:3f:a6:a6:14:a2:5c:ac:4d:f3:3a:
63:1a:f4:4b:ed:d9:02:65:04:2b:8e:96:8d:3f:fa:ec:92:65:
64:9b:36:dd:96:d2:f9:7b:81:0b:54:f8:2d:55:3c:0f:cd:64:
0b:01:58:56:3c:a1:99:6c:1d:fe:6f:d7:f1:bc:b1:5d:83:0c:
71:56:d4:53:65:cf:3f:91:47:87:08:07:d6:92:1a:d3:8e:1d:
a6:da:98:a8:e1:6a:e3:a9:ac:f9:56:ff:87:d4:09:3b:dc:9f:
27:83:2d:b5:23:2b:5b:62:9d:6c:a6:ba:5a:02:c9:ce:bf:1a:
11:1e:11:a7:29:c3:a5:c6:22:ca:d3:cd:f8:77:5a:13:a6:3c:
c4:c4:91:53:4b:88:25:83:21:64:65:96:1a:d2:70:b1:51:d3:
47:1a:6e:15:06:3f:d9:cf:29:49:b1:31:1f:84:a6:d5:5b:d6:
d2:c3:ef:7f:2b:1f:f2:70:c2:d3:13:f3:d2:cf:0d:66:51:8a:
eb:1e:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:23 2026 by rpki-client