Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: Ad+sguclELYmvJ49pC3TvZnZ8QmVPrG1TP/xE7d6qWI=
Subject key identifier: F7:43:F8:3D:81:D5:69:55:27:9E:43:15:13:59:EC:28:07:DC:04:45
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019CABD97C697323C0A1A87B05BF1D403171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 12AC
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: EM8Lbqo8hPFeSU6QCXG6KDto7hNdwUENBxIUH2NAJOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7c:69:73:23:c0:a1:a8:7b:05:bf:1d:40:31:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=f743f83d81d56955279e43151359ec2807dc0445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:54:84:02:78:a5:76:a8:38:f5:fb:39:6c:
ad:65:1a:ea:9f:9c:68:64:31:68:36:c6:57:59:b5:
da:37:c8:68:e3:8d:bd:1d:62:3c:de:8c:67:ec:04:
b4:81:06:a3:8e:0e:29:fb:9e:40:1b:8e:92:fc:69:
f3:88:2e:85:ac:e4:34:b7:5f:79:70:73:9f:4c:2c:
9a:a6:79:57:fb:57:05:fb:a8:76:1d:27:db:d6:0b:
92:c8:51:69:a1:39:20:8f:48:71:7a:2d:49:65:ba:
68:b3:e5:54:c3:e0:29:78:c3:a0:4c:f2:2f:1f:1c:
fc:c6:c0:f3:26:95:34:7c:e7:c5:fc:e0:29:f2:dd:
70:07:73:65:2a:d9:e2:5b:36:eb:d9:3c:42:6f:74:
e3:a3:65:ac:f9:f3:b4:a0:0c:1f:27:86:2b:24:a4:
fb:bd:7b:05:9b:59:2e:20:0b:2a:31:74:8c:96:b9:
d8:51:93:4e:b9:e9:b0:75:2a:fb:91:fb:e7:3b:6e:
7f:c2:20:4c:d9:e9:7c:62:42:38:c2:1f:38:72:30:
a6:20:35:45:40:e8:5d:fb:2d:b9:68:24:5e:ba:cd:
18:5d:ac:52:04:a0:d1:ac:9b:a1:98:ce:3d:c5:7a:
82:ff:f3:df:03:ad:f8:62:f2:57:43:18:27:4b:5f:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:F8:3D:81:D5:69:55:27:9E:43:15:13:59:EC:28:07:DC:04:45
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:a0:56:5c:1c:85:cf:30:51:a2:56:d9:ad:4e:42:28:c7:
ad:4b:66:cc:8f:61:a3:6e:8b:a7:c9:b0:5a:65:12:1b:8c:88:
4b:6c:45:80:40:fc:99:5b:8b:06:42:b8:ff:61:37:e9:cd:38:
fc:93:1c:57:20:67:4b:38:84:ad:07:64:2f:71:0c:a1:a2:6c:
0a:db:ed:5c:ad:40:1e:aa:11:08:17:4f:df:2f:81:e2:30:27:
71:ed:83:80:4c:cc:d8:3b:7f:f0:e6:e5:01:d0:41:71:33:ab:
6d:0b:dd:07:4e:52:ee:9e:70:42:7b:1b:9e:ed:c0:e0:d0:b8:
c9:66:83:95:60:9e:ef:0e:37:45:e5:9e:4f:dd:6e:6d:e5:6a:
6f:62:2b:38:89:50:95:bb:6c:41:0d:a5:6a:46:dc:35:3f:28:
2f:c8:ea:8d:ce:94:b1:ad:00:1f:cb:15:01:f6:52:ef:94:51:
d6:52:e0:09:e5:ae:73:bb:30:ef:48:45:94:eb:ea:34:28:e1:
f5:f8:35:e1:02:13:08:32:43:6e:55:05:1f:da:e4:47:a6:aa:
1f:7c:c8:3d:6a:d9:0b:a9:68:4a:7b:d2:e4:e2:95:c2:4a:a3:
68:16:d7:50:2e:5b:e9:c1:dc:2e:99:d4:cb:30:12:73:ee:d9:
94:f8:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:35 2026 by rpki-client