Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: MaBZbwll/z2y1qjU60eHUep2F4DEkbO0wUaQVrICBS8=
Subject key identifier: B8:1B:F5:61:6F:B4:9C:54:35:1A:4B:FC:E6:44:62:75:3C:F8:E6:C5
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019CAA58BDEF60BADC275B5A70611DC4EFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0757
Signing time: Sun 01 Mar 2026 17:01:08 +0000
Manifest this update: Sun 01 Mar 2026 17:01:08 +0000
Manifest next update: Mon 02 Mar 2026 17:01:08 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: fF7rwcvbjSnpbghlcPIxW5RoOKacqrweck/DI6O3c4g=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bd:ef:60:ba:dc:27:5b:5a:70:61:1d:c4:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Mar 1 17:01:08 2026 GMT
Not After : Mar 2 17:01:08 2026 GMT
Subject: CN=b81bf5616fb49c54351a4bfce64462753cf8e6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:92:99:6c:76:44:1c:41:41:7f:9a:47:2b:
c4:e1:2f:cb:bd:df:6c:07:3d:58:3e:73:ae:84:80:
38:2e:23:50:56:c4:48:eb:f6:24:c0:44:4f:d2:2d:
45:e3:fe:11:2c:d8:aa:8f:f2:ad:89:b8:1e:83:8e:
dd:f1:73:31:d2:dc:f5:5b:bb:c4:19:a9:37:5c:9f:
d0:fb:32:cf:b1:da:9b:6f:8d:8c:f7:2c:14:1b:5f:
50:05:99:b5:86:87:b5:d6:dd:71:e9:f5:3e:ce:3c:
62:f0:c4:2d:53:34:b5:12:51:87:a2:5b:88:82:74:
87:74:a9:05:af:3b:01:00:db:d6:18:db:6d:75:5f:
a6:b2:0f:d3:d6:8e:06:b7:0b:0a:e7:6e:a6:27:7f:
94:06:26:26:d9:5e:57:23:eb:34:b0:55:24:45:69:
56:df:dd:77:74:87:fc:21:d5:15:0c:ed:93:6b:2f:
ff:70:f6:7d:c0:d6:f0:f0:21:12:da:60:4b:a5:10:
08:28:1c:15:26:ac:dd:df:72:11:0f:d3:b0:23:ad:
93:00:0a:d3:d8:69:b8:eb:80:79:70:86:7b:ba:06:
7a:84:1e:37:c4:49:84:4e:e2:e3:61:b4:1e:95:53:
43:8e:d3:2c:63:59:99:06:94:d5:0d:e4:6a:d5:68:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:F5:61:6F:B4:9C:54:35:1A:4B:FC:E6:44:62:75:3C:F8:E6:C5
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:04:0f:b0:80:8d:5d:fc:c9:fe:26:de:59:0a:b2:1f:b2:
b8:48:af:dd:57:b3:8b:ff:9e:30:12:f4:46:b0:ac:c6:f9:c1:
5a:85:3a:75:4f:89:f1:ba:5f:0e:7a:60:59:5c:17:7e:65:ad:
2e:b4:cb:e2:21:59:b7:f6:44:7a:04:39:84:42:55:65:71:7b:
d5:65:83:4d:8c:14:04:04:c4:72:e2:ce:cf:9f:32:54:5d:cd:
db:44:b1:72:74:df:4d:16:6a:61:a0:2f:31:e1:94:4f:32:e1:
4b:55:c9:7c:4f:c6:cd:7f:2c:d6:9f:e8:4d:d2:68:f3:dd:36:
85:29:70:73:c2:34:85:67:9a:c3:50:a7:ce:79:be:ed:46:32:
70:bb:23:f5:7f:2e:78:62:77:98:8f:fc:97:08:88:95:88:06:
af:47:7e:ca:97:f1:d5:58:df:2e:2b:3f:e4:f3:80:23:58:6d:
75:12:ce:7f:f9:78:76:4f:c5:48:a5:ad:bc:f3:c4:6a:f9:db:
b0:ea:2e:3d:b3:bf:0d:7f:cf:7b:45:3f:3f:49:3f:11:66:5d:
b4:f5:5b:59:2d:6f:68:35:8a:65:78:5a:60:0c:05:50:d8:15:
6f:f8:c7:f8:67:d2:e7:8b:67:b0:cd:81:40:7b:f4:f0:a7:4e:
4d:f3:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:45 2026 by rpki-client