Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: ebtIyjmLK0RQ6LMwR0oBWZg3YAInkR8NjsRUMJgKQWM=
Subject key identifier: 8C:10:4D:89:40:B4:C3:AA:B4:69:7D:CD:B5:36:23:08:37:7F:95:E2
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 019CACB46C0FA1B4EEF53DE55271519172E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 127E
Signing time: Mon 02 Mar 2026 04:00:31 +0000
Manifest this update: Mon 02 Mar 2026 04:00:31 +0000
Manifest next update: Tue 03 Mar 2026 04:00:31 +0000
Files and hashes: 1: qwC2Qa61-K92mibT4xQ6QPDFeGk.roa (hash: UFLL3aT7fmcKZdAjIGdfo8UCBZ0v+aHyEhVXBSuvgE0=)
2: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: ABtY52m2QDKKWs1RXJk6AZIqpVlqr0XBMm4v+RtalGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6c:0f:a1:b4:ee:f5:3d:e5:52:71:51:91:72:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Mar 2 04:00:31 2026 GMT
Not After : Mar 3 04:00:31 2026 GMT
Subject: CN=8c104d8940b4c3aab4697dcdb5362308377f95e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:4e:dc:f6:e0:17:09:26:05:ac:a6:b9:8c:
f2:17:a1:1a:14:0b:4b:55:a3:51:b2:bc:6b:6d:cf:
31:2a:29:57:17:c0:42:c2:41:20:88:5f:aa:c7:d3:
d1:b2:3c:b4:59:4a:83:77:49:94:b5:60:3a:f3:9b:
e3:33:17:59:d7:d9:d6:8a:0f:11:18:16:23:a1:42:
ee:fe:fd:3d:96:2e:ff:c0:58:15:24:ff:fe:b6:52:
6b:92:aa:79:f8:73:54:d3:c1:d2:84:6d:21:02:06:
8b:98:b6:7d:85:9c:87:69:a4:0e:88:cd:4f:e4:4a:
19:81:45:43:d9:df:3b:06:d7:e6:8e:c7:c3:c2:0a:
91:08:bd:35:dc:18:b0:cd:74:a0:94:da:42:78:c1:
0b:7f:eb:7d:a5:44:7b:a2:73:9b:07:99:c3:46:37:
a4:68:90:f3:72:f9:e7:52:c1:95:bb:78:35:27:ff:
67:8a:a7:fc:3a:9d:2c:4e:94:3d:49:81:5c:61:f4:
86:6b:7f:4e:87:45:93:f7:be:a9:bc:4d:c1:c0:b1:
ef:17:fa:b3:d5:bc:4c:8d:3d:de:15:f2:1d:73:8b:
9e:7d:06:55:91:8c:a3:f2:a8:01:6b:79:26:55:08:
ac:c6:8f:21:96:c7:bf:2c:1c:c7:0a:df:48:23:c5:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:4D:89:40:B4:C3:AA:B4:69:7D:CD:B5:36:23:08:37:7F:95:E2
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d6:56:9d:f2:a1:cf:96:c8:42:b2:f2:9d:b9:17:39:62:b9:
d4:63:f3:00:ce:be:2e:c6:83:78:b7:9f:6c:ec:81:4a:88:42:
5f:e2:cb:49:8b:15:83:29:13:58:21:1d:a0:1e:f3:b5:9d:4d:
51:77:d4:97:9c:4d:58:34:7b:87:1e:61:37:c9:e3:52:b4:c8:
f2:20:e0:3f:b9:db:b7:28:2e:51:bb:10:5b:86:b7:39:c2:c7:
4d:04:e6:8f:37:54:6f:4a:7f:4d:c4:35:38:f0:bc:8a:84:9c:
a1:e3:e0:db:76:dd:81:e9:92:fa:c6:5e:9a:6a:4e:d5:9e:4c:
ba:6a:ad:48:d9:38:d6:d3:7c:d0:15:c6:12:ab:04:58:67:01:
dd:b8:14:20:2d:8d:c5:70:d7:33:7b:66:63:07:d0:84:0b:e6:
8e:66:51:c3:10:ea:40:40:a8:2e:15:e2:9c:59:1f:5a:d1:50:
31:aa:52:2c:07:f2:2e:20:0d:4b:f5:f4:3a:b0:d2:40:e2:6b:
94:dc:86:2f:25:17:2f:32:68:c7:4f:5d:39:31:f2:a8:05:cf:
dd:ff:4a:8c:0a:1e:36:9c:49:1a:f5:b1:9a:59:b1:7c:e0:d4:
48:64:47:49:50:3f:9f:2a:87:af:29:23:a8:ba:c9:e1:dd:9a:
7d:a5:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:47 2026 by rpki-client