Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: z9wLmUQXCQ9Xc3SE353PRdOSSojGGbyzoeO+wMcf9IE=
Subject key identifier: DF:C1:66:0A:68:C8:3B:66:88:BB:01:62:29:D4:64:41:DB:FB:C8:31
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 019CAB342C33D20B9A0EA1BBF3323C254A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: YnYV2JkgdPrkJHMglWzXiswWQ1HrCfvp5+Ml6C5FVcs=)
2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2c:33:d2:0b:9a:0e:a1:bb:f3:32:3c:25:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=dfc1660a68c83b6688bb016229d46441dbfbc831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:61:7a:0c:40:b4:6b:8f:52:12:2b:ef:c7:
3d:dc:6f:24:f6:44:5d:66:0a:6f:e9:24:8c:2f:26:
95:c5:bf:5b:96:cc:98:fa:7e:ed:ff:ad:55:38:53:
19:e1:7b:e8:a7:a8:a2:67:f3:05:19:34:76:1b:e7:
30:5d:d7:85:09:9b:6c:62:a3:49:21:b7:28:64:34:
fc:81:c6:44:4f:70:b9:db:f8:73:32:c2:9e:31:37:
26:fc:97:9b:42:c9:aa:f9:c8:74:1b:9f:a7:5a:58:
e7:9d:a1:b8:75:67:78:d3:c6:6d:8a:3a:11:ac:74:
53:69:da:50:32:58:e4:3d:be:9c:41:1d:44:51:b4:
32:b4:d1:84:bb:79:01:d8:4e:8d:7a:17:30:7c:d3:
2a:98:a2:a3:a8:c2:49:7c:9d:cd:cd:65:b3:2b:e1:
7d:1b:d8:56:b7:fc:48:38:a5:74:ca:61:fd:07:19:
d8:b1:5d:0b:9b:bd:88:91:bc:df:de:0a:cf:84:8e:
84:76:f8:bf:f9:54:d3:76:35:6b:cc:13:6e:40:29:
16:01:d2:aa:02:e2:15:e9:65:ea:2c:2d:c0:3e:58:
a4:6d:c6:db:e9:88:75:d6:c0:e7:d3:cd:40:51:a1:
91:61:78:50:5e:55:30:a8:23:6e:57:5f:a3:95:d8:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:66:0A:68:C8:3B:66:88:BB:01:62:29:D4:64:41:DB:FB:C8:31
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:bb:96:60:75:db:ed:32:19:37:16:e5:15:e2:45:7f:82:
a7:24:a6:15:b3:4a:b2:cc:00:3e:74:ba:68:6a:8c:25:01:95:
bf:e7:23:30:3d:2d:6c:9a:4b:4d:26:2b:10:af:54:01:b8:74:
8d:37:f3:24:c4:be:a7:ac:c5:5c:2a:51:54:52:48:6a:18:52:
5a:58:32:c5:b2:f4:27:1d:0c:dd:4c:c1:46:ca:b1:1d:c2:ac:
00:86:f7:7c:ec:6b:17:b1:43:ce:a5:9a:00:42:fe:f7:98:88:
13:8e:3b:1d:de:6d:fd:6b:f3:fd:c7:bc:aa:29:7d:a5:0e:0e:
4d:86:6b:54:37:07:f1:5f:72:ea:5f:5e:a8:72:fa:98:b7:12:
f1:3d:21:f1:11:7f:58:62:cc:28:36:48:0b:04:2e:2e:04:d2:
0f:a0:53:56:41:78:4a:86:43:5b:66:25:78:1e:c2:17:6e:e5:
56:21:02:a1:eb:54:89:85:3e:c3:58:53:25:13:ec:50:56:cc:
6e:87:04:65:45:86:8f:a1:cc:4d:b8:58:7e:0c:4a:a0:78:67:
b3:bf:b3:56:a3:13:26:3b:bd:ef:54:9f:ab:09:66:9a:60:af:
4f:96:a5:5d:6e:3f:3a:2a:36:91:a7:1a:f1:4d:9a:5b:b6:e6:
b2:7c:af:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCwz0guaDqG78zI8JUp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTA3OWQ3MzQ5ODkxZDJiNDAyNDg5NWZhNjdlNDFjMThm
NTZmZDQwHhcNMjYwMzAxMjEwMDQ4WhcNMjYwMzAyMjEwMDQ4WjAzMTEwLwYDVQQD
EyhkZmMxNjYwYTY4YzgzYjY2ODhiYjAxNjIyOWQ0NjQ0MWRiZmJjODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EdhegxAtGuPUhIr78c93G8k9kRd
Zgpv6SSMLyaVxb9blsyY+n7t/61VOFMZ4Xvop6iiZ/MFGTR2G+cwXdeFCZtsYqNJ
IbcoZDT8gcZET3C52/hzMsKeMTcm/JebQsmq+ch0G5+nWljnnaG4dWd408ZtijoR
rHRTadpQMljkPb6cQR1EUbQytNGEu3kB2E6NehcwfNMqmKKjqMJJfJ3NzWWzK+F9
G9hWt/xIOKV0ymH9BxnYsV0Lm72Ikbzf3grPhI6Edvi/+VTTdjVrzBNuQCkWAdKq
AuIV6WXqLC3APlikbcbb6Yh11sDn081AUaGRYXhQXlUwqCNuV1+jldjEwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/BZgpoyDtmiLsBYinUZEHb+8gxMB8GA1UdIwQY
MBaAFJPgedc0mJHStAJIlfpn5BwY9W/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZTM2YjYtZDVhZi00MTBhLTlmYjkt
OGE5MmRmNzdhMDdmLzEvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZTM2YjYtZDVhZi00MTBhLTlmYjktOGE5MmRmNzdhMDdm
LzEvay1CNTF6U1lrZEswQWtpVi1tZmtIQmoxYjlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5G7lmB1
2+0yGTcW5RXiRX+CpySmFbNKsswAPnS6aGqMJQGVv+cjMD0tbJpLTSYrEK9UAbh0
jTfzJMS+p6zFXCpRVFJIahhSWlgyxbL0Jx0M3UzBRsqxHcKsAIb3fOxrF7FDzqWa
AEL+95iIE447Hd5t/Wvz/ce8qil9pQ4OTYZrVDcH8V9y6l9eqHL6mLcS8T0h8RF/
WGLMKDZICwQuLgTSD6BTVkF4SoZDW2YleB7CF27lViECoetUiYU+w1hTJRPsUFbM
bocEZUWGj6HMTbhYfgxKoHhns7+zVqMTJju971SfqwlmmmCvT5alXW4/Oio2kaca
8U2aW7bmsnyvVw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:04 2026 by rpki-client