Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: KA8nYU/XY+I/NA3BBLrvDytN0i0tkBI8nilJBnj3jTc=
Subject key identifier: DD:0C:E2:EB:E1:85:18:F3:C8:5D:D4:A0:6C:EE:3A:59:53:AC:AD:42
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019D99D075F913F517E54BDEA90C3C32B661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 07D3
Signing time: Fri 17 Apr 2026 05:01:08 +0000
Manifest this update: Fri 17 Apr 2026 05:01:08 +0000
Manifest next update: Sat 18 Apr 2026 05:01:08 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: iT08q7aqW3baL6MdS1hmYV3EzyaGv/gOjhyiEKghFLA=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:75:f9:13:f5:17:e5:4b:de:a9:0c:3c:32:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Apr 17 05:01:08 2026 GMT
Not After : Apr 18 05:01:08 2026 GMT
Subject: CN=dd0ce2ebe18518f3c85dd4a06cee3a5953acad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:a5:a7:ba:21:2c:55:aa:fd:f8:8b:16:99:
23:9b:e0:b2:bb:4c:83:fe:b4:03:8a:98:62:e6:4c:
bb:cc:40:ed:a7:28:25:17:16:e1:c8:be:18:66:a1:
4d:86:bb:f4:83:fa:68:12:32:7a:59:dd:ce:26:71:
24:74:d8:14:c2:3a:8f:8c:8b:53:25:bb:21:b6:b0:
29:2f:7c:ad:1d:71:74:12:67:9d:d8:84:a5:55:f0:
4a:95:81:e7:8c:6f:9c:1d:cb:cc:2f:a9:bd:17:30:
44:ae:8a:c6:dd:30:4d:d8:53:01:4f:f5:a8:80:d6:
d3:a0:a4:3a:d6:bb:b3:e4:77:84:9f:af:3d:3c:a7:
e8:d3:02:18:5e:0f:97:5e:df:4d:93:84:63:87:5c:
76:3e:a8:1b:71:a1:e6:88:3c:13:62:a2:bb:1d:a9:
01:b5:40:54:12:b0:f6:11:7c:c2:f8:7a:75:44:2e:
77:55:21:ff:2c:83:36:23:fd:1a:81:17:cf:13:56:
46:52:8b:b4:c2:6e:c0:7c:27:4f:85:e8:54:95:f8:
63:fe:fb:4e:12:23:c8:8d:61:84:7f:2f:d2:26:69:
99:62:cf:74:ed:96:12:77:a9:9e:2e:43:fd:72:a9:
4a:e4:89:4b:a3:30:73:73:f7:1d:be:3a:48:7a:43:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:E2:EB:E1:85:18:F3:C8:5D:D4:A0:6C:EE:3A:59:53:AC:AD:42
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:23:39:94:c4:3b:97:ae:af:29:36:a6:9b:59:8c:40:46:
10:87:03:5a:77:ce:ca:4c:4c:1d:36:40:38:a4:7a:88:78:96:
07:4d:ba:1f:09:ad:65:de:ea:74:d4:d3:e9:65:ff:d7:26:a2:
df:35:0a:1a:ac:a1:99:7f:11:3a:da:0b:09:fe:10:fa:0f:92:
12:f4:b9:f9:35:5a:fe:bf:29:de:13:52:36:7e:5f:77:2d:d1:
8a:a5:41:6a:68:dd:cb:67:38:12:94:27:17:71:e0:f6:ea:df:
8b:79:e4:2a:dd:07:8f:da:87:75:64:f6:87:75:b5:69:0b:07:
4e:d9:2f:84:75:f2:b9:fb:26:cd:58:23:18:99:d2:d3:41:91:
a1:a9:d4:aa:93:b4:f6:94:98:fc:88:0a:d5:2e:d2:86:f7:3c:
12:16:e5:7f:95:68:01:50:b0:f1:89:75:6f:36:13:5f:19:aa:
05:f2:c9:42:69:60:9f:97:9d:8f:64:3e:75:4d:57:ec:d0:91:
36:ba:dc:01:5a:2e:c2:79:2a:27:d7:05:b7:d2:db:93:dc:30:
2d:00:e8:fe:48:0c:7a:e3:81:8e:fb:5b:3e:8d:e2:e0:2d:26:
8b:31:5f:4e:08:09:ba:02:c2:a6:b9:7c:9a:bd:99:0b:5b:d7:
02:12:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:27 2026 by rpki-client