Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: R9B4TrQzeSHh9sreGkdIYyBpbUg9MOkQQHByzgjK0DM=
Subject key identifier: BF:08:C6:5B:95:19:26:F0:A4:A8:9F:23:89:3C:DC:3F:22:C3:B8:05
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 019CADC786B807EDE4E90A353E1067270423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 09:01:00 +0000
Manifest this update: Mon 02 Mar 2026 09:01:00 +0000
Manifest next update: Tue 03 Mar 2026 09:01:00 +0000
Files and hashes: 1: a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa (hash: jOtVSSPZObpK8XqzAlQVoc0c5TSMX2XvXMtPwq4gvlk=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: axUR6M1TrjQ2O1pSHZhavxkUe6mkBkTbGS2JaUlJBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:86:b8:07:ed:e4:e9:0a:35:3e:10:67:27:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Mar 2 09:01:00 2026 GMT
Not After : Mar 3 09:01:00 2026 GMT
Subject: CN=bf08c65b951926f0a4a89f23893cdc3f22c3b805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:11:b8:b2:22:7b:0f:b7:ef:4d:7e:64:10:
eb:6e:e7:4c:fc:39:56:ec:9a:ff:88:31:c0:b8:d1:
c6:60:18:c1:e3:fa:8f:bd:bc:6b:c9:81:b8:e0:17:
52:8c:18:eb:03:c6:2d:7f:7f:4f:5e:40:ff:d5:b3:
08:0b:d1:e3:32:ab:04:e2:fe:ff:06:04:b3:19:db:
b4:2c:d7:d9:cc:a7:87:1d:fb:cf:0f:7d:97:fe:e8:
a0:8a:27:fc:d8:5e:d2:30:fd:5a:9e:f4:06:9e:24:
8d:fb:7a:00:95:f8:7a:ae:9d:0b:18:16:5a:b2:ea:
03:d5:0e:c9:a4:ef:ff:85:0e:90:c4:6a:10:6b:19:
51:94:6b:32:e2:66:59:e0:b1:6a:59:ae:3d:9b:0e:
94:44:8b:88:91:0d:c3:77:1b:d9:46:bf:5c:21:a1:
be:65:66:a1:34:d0:e3:40:3b:f3:b1:67:c5:e2:52:
52:a2:b1:44:80:f1:69:d9:a3:1c:53:e5:73:dc:a1:
62:8d:e9:f8:3f:a7:6e:9d:a3:b8:26:68:b1:1d:09:
88:e9:de:bd:25:aa:99:bd:fa:0f:85:98:48:dd:40:
21:ec:86:3e:95:41:fe:2f:d6:06:11:8e:9f:fa:1f:
c1:71:bc:17:47:ae:58:c2:8b:36:67:b0:ba:8a:f0:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:C6:5B:95:19:26:F0:A4:A8:9F:23:89:3C:DC:3F:22:C3:B8:05
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:df:7c:e9:14:a4:12:8a:91:5d:91:e4:7d:6b:fa:97:26:
e1:eb:2f:cc:00:90:44:54:0b:de:96:de:dc:82:4f:cd:57:42:
65:d8:79:8a:0d:bd:a9:e9:8f:ff:ee:99:2c:e9:73:b9:eb:41:
db:cb:91:63:fd:46:75:77:65:4c:f6:99:fe:86:31:dc:07:4a:
42:0e:75:01:aa:34:1c:4d:c6:9b:de:a4:35:ca:5d:05:c6:8f:
b9:3b:7b:b5:a4:f1:ed:87:b3:9e:d8:cc:ff:b6:29:48:cd:f1:
8a:90:a4:f5:37:ac:29:02:8c:21:27:56:6c:02:7c:2d:80:f2:
79:63:fe:2e:c9:35:eb:7d:bd:d4:d9:80:5a:13:ca:e5:15:e6:
70:e8:6c:8b:16:09:76:6e:14:29:00:55:dc:0d:1b:e2:7d:c7:
6e:ff:63:8e:1e:cd:ff:37:cf:91:7c:6c:81:71:61:e4:d5:92:
3b:ee:65:16:1f:12:f6:31:90:d4:14:40:ca:e3:ea:86:ba:39:
76:56:ce:61:c8:c2:32:6e:45:5e:3c:f0:72:d4:1f:ab:f0:ee:
46:2a:98:d9:e2:41:c4:ce:28:32:f3:57:96:d2:e9:a9:b7:b1:
09:31:ec:2b:97:83:a7:fe:d6:0c:1d:e2:a3:14:38:d9:b8:89:
34:e8:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:11 2026 by rpki-client