Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: Cn8tbFm3twkBgzTyAe9/hOD0eL9WxSZa2WbdRR0Ujls=
Subject key identifier: 68:AA:52:3A:D7:1F:FA:FF:53:BA:0C:CB:B9:65:23:8A:9A:E5:6F:5A
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 019D98F4A2D02EBF1030A5195D2DC0031EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: xbSyqwGGgSAw4MdsXSpLJppFzvMPaAjUA/01PYan40Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a2:d0:2e:bf:10:30:a5:19:5d:2d:c0:03:1e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=68aa523ad71ffaff53ba0ccbb965238a9ae56f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:2c:3d:fc:8b:44:bd:4e:2f:9e:7c:53:00:
9a:0e:10:dc:34:06:3e:33:ff:10:f9:22:75:71:65:
09:f8:e4:f8:6d:87:99:4f:09:45:90:86:f5:9c:05:
82:cf:70:6a:b8:97:24:02:ee:45:67:f1:43:d6:bd:
9a:71:49:b7:dd:c7:85:41:fd:5f:38:5f:68:45:21:
79:ed:55:5a:bf:7b:46:cb:aa:49:e2:71:9e:b9:62:
08:90:70:91:be:a0:fb:27:d8:9b:06:41:90:ec:22:
de:59:be:6f:4f:1e:dc:94:2b:ad:eb:89:6f:3b:80:
84:f9:cf:fb:b1:e0:84:12:e5:56:c4:a7:7a:ed:ba:
30:82:17:d7:24:4d:15:30:3c:b9:ca:ab:56:7e:cc:
b0:09:dc:92:10:a9:a2:01:a5:54:a6:f5:fc:ad:d0:
01:98:cc:f7:11:99:03:39:7d:20:44:9c:88:0b:c7:
08:73:ff:f8:e9:b9:e8:b9:58:47:48:bd:82:6d:ba:
05:10:8b:9e:e6:a7:1d:47:05:0c:7b:8b:48:23:07:
53:9e:cf:68:bb:77:17:a9:4f:ed:5a:88:9b:1f:b0:
d8:27:79:e5:bc:f8:94:6a:50:31:00:1c:2f:35:8c:
79:51:45:3c:22:83:41:1c:2b:75:5c:32:80:b4:07:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:52:3A:D7:1F:FA:FF:53:BA:0C:CB:B9:65:23:8A:9A:E5:6F:5A
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:da:8f:d2:e0:ac:06:c5:bf:35:13:67:6e:a0:bf:63:ca:73:
c4:41:51:9c:b2:9b:ff:85:4e:d4:21:c0:1b:af:08:67:b9:5f:
12:49:be:77:99:56:77:a9:38:31:29:e9:7d:60:12:87:48:9e:
a2:69:34:66:a1:fe:4f:49:95:2f:1c:41:c2:ec:18:5b:87:93:
58:a3:cd:61:64:b1:de:e8:e2:fc:9a:81:99:f6:36:f4:e6:fd:
e0:0c:43:02:c2:f3:13:43:17:ef:bd:f6:40:7d:f9:42:60:1b:
f9:d1:02:af:d2:41:0a:e0:78:76:e6:bb:fc:a4:26:c7:a8:81:
54:fb:15:86:84:ee:16:7d:ff:72:2c:ed:8c:f7:a7:44:ac:80:
93:72:53:23:a9:48:f0:15:47:52:91:26:d4:c2:fd:3d:5c:96:
25:fb:1d:97:28:41:08:bc:52:66:3d:bd:71:63:07:83:d0:5c:
87:18:53:e2:cf:b8:37:7d:a3:7b:28:ba:ec:02:45:06:02:ba:
07:58:5f:1e:0c:0e:af:de:49:14:7b:f0:78:4e:11:94:33:7d:
d2:c7:82:2c:6f:f1:24:af:0d:3b:7c:9c:c9:07:26:0a:8b:af:
b0:33:17:51:7c:b7:f0:1b:cb:5b:e0:41:67:b8:f1:04:24:ad:
ff:08:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:48 2026 by rpki-client