Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: jyE8l2SdH7xjNZDkRSixpfE7XWfSOV7GdFbyOEp0pp4=
Subject key identifier: 35:4D:7B:A2:06:3F:0E:C4:A8:EC:23:70:98:6C:D8:6B:38:14:D9:6B
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 019CABD9A19FF7C8B420012F7B2BAD53D260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 0AAC
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: rAdUCF1LiBuXCOGlnd+QME+TZa2yjUWvciSq5yFLqQE=)
2: wTB4tZGHHQPv-PQUvHNe4gZ_jgo.roa (hash: TYdOeOy0mx3TMxWyBFFWn8nDjGPanVPmVWlj7zHMp90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a1:9f:f7:c8:b4:20:01:2f:7b:2b:ad:53:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=354d7ba2063f0ec4a8ec2370986cd86b3814d96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:dd:a4:c2:fa:d8:88:a2:45:69:82:07:b5:
9b:c1:6f:e3:0a:7f:73:c0:7f:f7:23:f1:2b:1b:3f:
ef:a1:a0:2d:4d:b7:c8:ab:de:a6:99:90:d9:44:ee:
bd:90:c3:a0:31:3e:b2:e5:3f:35:c0:e7:66:de:2a:
5d:bc:a1:79:8f:7c:9a:ea:22:7d:fa:83:93:93:3c:
91:53:6b:43:a8:2e:14:8f:93:d0:56:04:b2:9c:05:
5d:c2:d0:6b:7d:2e:05:aa:0b:5e:b1:96:68:0b:4c:
c7:e8:f8:44:32:50:16:07:02:c7:64:bd:1c:97:79:
a5:4c:58:16:bc:91:28:71:08:42:47:1b:07:a3:86:
6e:05:6b:35:78:3f:c9:e5:13:9e:27:dd:a1:e4:a6:
14:93:0e:a6:09:d2:21:6b:f8:af:b6:5f:8c:ea:67:
82:64:e2:fb:5b:84:7e:07:bf:24:f2:84:8a:be:7f:
27:8c:66:71:0b:a1:3e:15:25:e2:dc:3b:23:d2:d0:
c2:ae:db:af:9d:9d:79:21:2d:cd:98:74:fb:33:d1:
5e:eb:fc:01:b5:29:95:83:f5:a6:67:4c:e3:a9:6a:
a6:fc:60:3b:fe:4e:10:e8:94:1d:61:67:f1:c1:12:
38:3b:fc:55:d2:81:bc:82:4a:e3:fb:dd:f3:cd:92:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:7B:A2:06:3F:0E:C4:A8:EC:23:70:98:6C:D8:6B:38:14:D9:6B
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4c:43:a1:82:3f:08:b5:d4:b3:cb:53:66:c6:13:a0:fb:e7:
ab:20:1d:3c:aa:91:3d:90:ca:ea:27:9b:78:b9:23:cf:7c:70:
ce:c5:d8:c9:e7:9f:47:ad:55:93:65:20:49:78:81:b1:d0:6d:
57:c1:3a:58:81:15:0d:5b:80:b5:9d:c7:5f:b8:62:8c:16:d7:
13:87:ee:af:36:7f:bf:de:63:f9:ec:dd:53:bd:47:3e:b6:ab:
c9:04:7f:63:62:39:5e:ad:c9:2d:49:59:3c:bc:66:1b:b4:d1:
55:40:b4:88:12:e4:a7:a5:89:ec:54:85:1b:62:55:aa:89:ad:
56:44:00:3d:b0:f9:ab:28:45:d0:d6:4f:b3:27:05:f4:12:d6:
0c:2f:5d:38:20:6c:82:4b:98:ab:49:47:21:ac:4e:78:18:02:
5f:48:58:07:e4:22:fb:c2:f6:84:b0:c5:da:91:9b:eb:6a:06:
38:51:a7:fa:82:b3:50:b7:d9:e2:25:f0:a7:af:d0:af:9c:66:
03:f4:3d:de:d5:18:be:69:c9:00:04:2e:15:fc:33:34:be:a6:
66:f5:2b:e8:46:7e:09:0d:16:2e:30:a3:74:1e:94:ff:57:2b:
3c:ba:ed:ac:bf:67:66:4b:78:be:8f:b5:81:5d:24:48:6f:eb:
e7:54:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:08 2026 by rpki-client