Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: P97bbZv1UOjRF6Qh68Qn6m2lqL9VgxWAWnvJpLhFD9E=
Subject key identifier: BA:E1:4C:EC:A9:B0:78:34:41:D4:5B:E5:D8:3B:BF:4C:8E:5E:CB:27
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019CAC47218CB6370365E65FA8E60CF845B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 160D
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: UIy9gUZXV88enoE-3KFhIHspXtA.roa (hash: 8X5vRqd+KBox7ge2TIXCQWKZfqoX627wmgj0tLtcDE8=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: p6/vQISIQd1D7VfeyRneRlHclUukRrcRUyoXpUHdoA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:21:8c:b6:37:03:65:e6:5f:a8:e6:0c:f8:45:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=bae14ceca9b0783441d45be5d83bbf4c8e5ecb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:3e:60:13:21:f3:15:aa:ef:ac:47:89:d9:
fb:93:3b:b3:75:5b:a8:a7:5b:8e:a0:da:ff:2c:62:
ff:40:40:79:3b:59:b5:16:cf:e4:19:1b:84:20:92:
ad:40:2e:ea:e3:3f:02:ab:eb:41:2a:47:04:32:07:
ef:10:3e:65:4c:af:e8:ca:87:cc:4c:49:9b:c1:b8:
7d:b2:6d:10:a5:cc:cc:bc:a8:be:a1:0d:cb:82:70:
cb:8b:f5:4e:aa:ef:3c:62:e0:fd:5d:40:53:3f:12:
d9:74:07:f9:30:09:6d:47:df:e4:fa:3e:71:7b:91:
ef:ee:84:d0:b9:a6:7c:36:c1:7f:5d:42:c2:0c:a5:
f4:d8:ec:03:3f:da:8b:d8:e8:f5:6b:16:1c:40:30:
fb:31:32:45:0d:9e:7b:f7:93:7f:45:00:6d:8f:99:
3b:d8:2e:26:c7:e0:3c:25:36:a0:dc:e9:ed:0c:8f:
be:b8:0a:6a:3d:06:5e:68:75:ef:6d:58:2e:4a:9c:
b0:96:d4:e2:56:21:bd:d7:6b:f3:cb:b4:3d:af:1d:
81:bd:99:2c:8b:fd:05:65:06:bc:24:a6:40:5a:87:
1a:db:f7:fa:b1:bb:fa:70:47:57:65:a8:dc:86:74:
05:33:3b:b4:50:91:f6:3c:91:16:b0:07:c3:c2:2d:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:4C:EC:A9:B0:78:34:41:D4:5B:E5:D8:3B:BF:4C:8E:5E:CB:27
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0d:54:63:ff:ef:ab:3e:9a:5a:15:a9:3e:d4:c5:8c:fb:03:
93:68:a5:67:62:89:29:c4:bd:08:b5:ed:f7:f4:f6:5b:84:a5:
09:f1:b7:fe:3f:3e:da:75:75:00:b1:94:7c:6d:5d:49:3f:d7:
20:9c:5b:68:31:1e:54:c5:1e:87:b3:b0:2e:82:e9:14:fc:99:
13:dc:0f:80:6d:bc:30:c0:49:65:2c:10:08:1e:00:53:0c:bc:
a7:a0:39:9e:bb:d4:5e:bd:dd:d5:55:25:59:e6:54:6b:52:26:
41:80:b1:56:fe:d3:68:29:8b:17:6f:43:c2:55:85:17:86:cd:
35:07:f0:15:ff:62:a8:b9:b7:1e:4d:3c:43:28:d2:0e:e1:62:
8c:19:62:35:b3:48:8e:00:e9:24:32:31:4c:18:a7:19:eb:1a:
53:b4:d0:a2:92:3a:65:18:aa:67:54:7b:11:2f:59:cb:c0:ce:
b8:33:c3:78:4b:8f:99:ad:34:1f:6a:90:cf:31:3d:3e:c1:ec:
78:d4:ae:9e:28:86:56:a4:f5:9e:9c:36:ab:f0:66:f1:88:a5:
10:7f:b8:c8:91:70:fe:c5:35:95:db:53:53:28:39:03:cc:9f:
ce:86:82:c1:8c:9c:a5:3b:fe:2b:48:e5:d5:ef:e0:1d:9f:15:
f8:af:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:06 2026 by rpki-client