Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: Cz4XV/qKPS4sAgsNXtm2F7EEeDbPETa3hngPB8yJ0XM=
Subject key identifier: FD:00:9B:B5:D8:BF:8C:51:8E:56:5A:67:01:B8:70:D7:1A:A8:25:99
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019D9961F74A5D5AA0B318593C51BD82F827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 03:00:27 +0000
Manifest this update: Fri 17 Apr 2026 03:00:27 +0000
Manifest next update: Sat 18 Apr 2026 03:00:27 +0000
Files and hashes: 1: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (hash: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM=)
2: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (hash: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q=)
3: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: JNqeZPxiQDvwG38dBghxEt1FT4AmFsUd0NDzgL3yy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f7:4a:5d:5a:a0:b3:18:59:3c:51:bd:82:f8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Apr 17 03:00:27 2026 GMT
Not After : Apr 18 03:00:27 2026 GMT
Subject: CN=fd009bb5d8bf8c518e565a6701b870d71aa82599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:e4:e2:5b:88:c9:ae:56:85:89:ba:27:b9:
bf:69:19:36:c4:50:58:c1:ad:66:3a:b6:d8:c9:ca:
06:5c:fc:65:93:2b:31:f9:01:c9:a5:35:91:95:b9:
02:50:28:58:ef:59:cc:a0:be:a1:83:c6:78:81:43:
d6:6f:1b:da:f3:8f:b3:f8:be:b3:86:21:3a:e1:d0:
b8:26:12:36:72:af:dd:05:bb:80:4d:9e:f5:ee:fd:
67:e9:bf:ba:d8:09:ad:35:81:87:42:bb:2f:ba:c3:
89:41:f2:d3:76:f6:2e:0b:62:ff:87:89:e1:db:ae:
54:97:51:71:05:11:46:eb:55:75:17:a6:83:81:96:
c5:64:c8:b8:72:00:42:0d:3c:fc:2e:a7:2d:4f:60:
b0:cd:4c:99:0a:c0:20:45:6a:aa:f3:9a:b7:ba:8a:
bb:f3:1f:37:c0:60:b5:0f:b5:41:25:9c:d1:82:ab:
f6:fd:c8:64:13:ed:4e:f3:a0:31:af:dc:4c:30:ac:
a2:29:92:ed:f2:4c:a3:2d:db:7d:c7:e2:19:39:31:
34:56:54:8f:21:bc:20:17:43:a7:4b:81:b6:a7:82:
97:96:98:ca:e2:b6:6d:e0:d2:99:ed:42:2d:6c:d2:
89:ba:82:e2:ab:0b:79:35:f0:d4:e4:78:9e:15:d5:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:9B:B5:D8:BF:8C:51:8E:56:5A:67:01:B8:70:D7:1A:A8:25:99
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:44:82:48:60:84:27:d1:f3:31:8b:82:80:36:3b:64:d4:
4c:21:f4:e4:db:3a:00:f3:70:7f:28:93:31:07:b6:a6:bf:6f:
44:cc:04:62:ef:d3:5b:63:0c:84:ad:44:ac:5f:3e:26:12:d1:
c8:e5:a9:8c:71:1b:5c:9f:f8:45:28:3f:9b:2e:06:be:bb:fb:
df:87:2b:ba:5a:83:6d:21:5d:b1:5c:5c:77:9c:e8:27:5c:a3:
7f:ce:3a:90:08:70:ef:5a:8c:b2:b3:43:e0:84:ca:60:65:8d:
e6:5d:52:a8:2e:46:9e:98:c3:55:ef:e1:14:c1:3c:b7:56:c0:
42:82:6d:63:c3:f3:9b:ab:a8:e4:fa:ce:96:b9:76:9d:f8:4e:
f3:8f:8b:20:82:01:fc:77:b1:a6:2d:93:a2:a8:3e:1c:87:b8:
32:fa:5e:7b:1e:c2:f9:dd:b8:be:d4:71:ba:f6:9f:30:70:30:
1c:09:2a:c6:aa:49:d4:23:4e:c1:cf:49:0a:70:8b:4e:62:6b:
30:87:2f:d9:b0:07:c0:fa:af:4f:77:3f:b4:db:67:12:ff:45:
5a:d6:e3:93:fc:63:bd:f6:4a:ca:96:c3:97:9f:a2:28:86:04:
9f:99:43:83:a9:db:4b:ee:fd:3e:21:2f:e4:f5:25:50:72:6b:
16:2b:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:33 2026 by rpki-client