Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: jdqcAWcRoCOFsDmDbGZG2zOyRxaR5QJK+JSL61s+/M4=
Subject key identifier: F0:F1:F5:8C:4F:49:84:67:1A:62:1A:3A:1B:EA:78:67:C1:48:36:B1
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 019DA41CA3171D6CA3B68A47D513AB41EA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 061E
Signing time: Sun 19 Apr 2026 05:00:33 +0000
Manifest this update: Sun 19 Apr 2026 05:00:33 +0000
Manifest next update: Mon 20 Apr 2026 05:00:33 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: 2KLXNP1AJrvOmY5Hhew8NskE0yVvgO+TUjA4JrpiamA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:a3:17:1d:6c:a3:b6:8a:47:d5:13:ab:41:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Apr 19 05:00:33 2026 GMT
Not After : Apr 20 05:00:33 2026 GMT
Subject: CN=f0f1f58c4f4984671a621a3a1bea7867c14836b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:b2:95:de:e5:a8:65:d9:af:40:a7:03:62:
fd:1f:d7:c3:2a:bc:32:ba:e3:1b:df:8d:8f:eb:89:
c9:fa:fb:b5:f2:ad:4c:bd:ba:85:ac:de:d8:27:ca:
38:d9:0d:e8:04:f4:59:cd:e7:b5:02:b2:9a:b9:1a:
c4:db:b9:e8:94:5c:fa:fb:41:85:ae:e7:87:92:3c:
7f:b6:89:9e:77:f2:c8:7f:0f:c4:fb:59:17:0c:16:
ce:be:b5:a7:b6:4a:57:c9:88:bd:05:3a:77:da:b8:
21:24:e4:8b:b0:77:07:89:b2:50:6b:4c:48:55:dc:
17:c4:9a:d5:93:ac:d0:f4:3e:0a:2e:cc:74:54:8d:
7f:dc:a5:ba:b4:82:22:0f:cd:26:23:e7:55:9e:ee:
a0:fc:99:9e:72:2c:87:06:1e:e9:3c:db:d8:a0:d3:
72:01:79:8a:50:66:73:59:ea:95:2b:36:ae:98:a4:
c8:95:ef:31:be:0c:05:9e:16:be:20:31:d7:01:c4:
05:f6:23:f1:75:2c:10:a4:67:29:e4:19:e6:46:ad:
e8:2b:96:b2:a4:83:f6:fa:c6:08:b8:66:1f:f0:c3:
7f:f1:3c:6a:f7:85:83:70:7a:67:96:ed:03:74:c6:
b8:08:43:a7:09:87:56:ee:99:e3:f7:b1:55:7e:16:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:F5:8C:4F:49:84:67:1A:62:1A:3A:1B:EA:78:67:C1:48:36:B1
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:d2:0e:ac:ad:56:1a:f9:62:a0:ec:bf:86:f1:c5:7b:a1:
80:82:3a:42:58:ed:d5:92:00:a6:2f:70:c1:1a:59:9d:fe:37:
d9:7d:3d:62:c1:47:97:13:df:7a:c6:d1:cc:4c:85:21:b9:ac:
f0:c5:d5:92:bd:8b:5e:d0:63:8d:6b:e4:ca:fd:65:56:3a:70:
f6:7d:c6:d0:15:d6:09:5b:83:34:ea:e5:63:7e:b0:c1:1e:59:
fc:e5:2b:6b:57:0a:aa:b0:e6:4f:26:76:2c:29:c9:71:ba:c1:
dc:40:53:f4:78:8c:30:b2:9e:4f:07:c6:37:f4:f5:0a:f4:84:
ae:aa:da:ac:0c:93:aa:ba:b6:9e:0c:92:a3:bf:54:67:64:f4:
c6:47:fe:c8:63:07:84:f8:8e:46:e4:18:93:47:1e:68:86:3a:
8a:1a:11:5e:03:27:2c:c6:13:97:e5:54:8d:42:20:2c:89:bd:
62:91:b7:88:1b:48:1a:58:cd:71:0e:c4:17:81:01:25:4c:a0:
cb:03:15:a5:0d:8f:da:f6:d4:c8:f4:2e:fd:ff:80:0f:5b:a0:
ee:2a:f2:cc:1a:4d:6e:b5:8e:ad:5a:86:eb:f6:a5:32:e4:91:
bf:24:ea:07:c7:8c:19:7a:eb:87:27:14:ac:8d:cc:6c:02:e7:
2f:9e:4a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:01 2026 by rpki-client