Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: 0k1OHqNwUGsko3bseqTFJDc17cwj8f2IMk8fWiSVvvw=
Subject key identifier: 30:36:DA:91:D5:15:FA:F9:95:81:6C:87:7A:7F:E4:A5:57:C5:36:2C
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019CAC100A4B8578B64DE81466584EC1153B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 09A6
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: IIoda5buCs3KPjW4iPwTog2Z8oddQLpYb++Ziok+VhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0a:4b:85:78:b6:4d:e8:14:66:58:4e:c1:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=3036da91d515faf995816c877a7fe4a557c5362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:6f:84:9b:34:a5:d8:10:47:a9:e6:cb:a2:
5f:99:b3:cf:eb:17:11:95:39:ae:b8:0b:ba:35:97:
df:65:b7:31:14:3f:8a:e1:11:ba:27:fd:1e:2a:7f:
d1:e9:8c:5f:c7:ea:28:5b:f2:aa:74:20:36:50:34:
74:5d:7d:54:66:64:bf:53:a3:40:93:fb:38:2a:18:
f4:1b:20:1d:6b:85:36:08:7d:8c:07:6d:9c:d0:ec:
5a:0c:b9:0e:73:e4:c2:97:a9:24:44:12:a1:0b:4a:
93:9f:18:6e:a6:cf:2e:f3:7f:4d:32:5b:c4:27:23:
59:b9:7d:32:6b:2b:87:91:fb:6b:e7:68:cc:ce:93:
45:54:7c:2e:54:b1:f7:c9:4e:cf:f3:22:e9:42:b5:
5d:92:36:47:5c:39:97:59:52:ff:ca:d4:f8:b8:18:
2c:f6:63:b3:dd:b0:56:88:c0:9a:7f:5f:38:42:a6:
4e:b9:81:8e:e2:00:aa:33:e8:2b:ca:00:26:41:d7:
48:b6:6e:c2:49:96:27:2f:cc:7d:ef:4f:6e:d5:6a:
b5:51:72:b2:2b:58:5a:cc:c7:bd:e4:1a:42:04:b8:
82:a4:e7:0d:7c:bc:ff:5c:85:10:b6:e5:72:13:61:
22:63:0e:1e:13:2c:e1:e2:c8:7b:5b:f0:88:b0:1b:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:DA:91:D5:15:FA:F9:95:81:6C:87:7A:7F:E4:A5:57:C5:36:2C
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:fb:90:a2:da:fe:18:7a:74:cb:bd:21:87:ed:cd:ba:69:
10:16:d0:8d:44:7a:d7:ed:64:1b:71:80:c7:b4:f1:05:96:15:
d9:29:83:e2:20:ae:10:5c:62:cd:1c:60:c0:79:02:e7:4a:13:
23:73:fd:8f:a9:b8:ef:c3:93:b5:f9:b7:a5:59:09:4d:aa:55:
36:35:14:9c:c0:1a:27:65:8a:e6:46:d9:60:05:e4:a9:77:db:
a9:86:48:c3:81:08:74:52:bd:6d:af:c3:5f:26:73:3f:22:f2:
a4:25:d8:c4:45:d8:f1:b6:fc:0e:db:a9:f5:04:f4:c3:02:0c:
8b:dd:90:ae:1e:b5:f3:f3:ef:8b:3d:ed:1e:b9:e2:b6:20:d8:
ce:dc:1f:41:48:6a:49:69:f9:5a:6d:75:72:91:f5:30:3b:5e:
56:48:de:d0:62:2a:9d:99:ba:01:52:74:cd:19:8c:1f:8f:eb:
bd:7c:a5:b2:bf:91:2a:b5:0d:0b:26:ff:fd:fc:40:f9:88:49:
f8:36:bb:95:b0:d7:e4:97:54:c8:10:9d:cb:1e:64:7e:ce:24:
30:e1:a5:dd:a3:c8:67:fd:33:b3:78:ff:0c:5f:4a:c5:31:06:
f9:56:61:92:89:99:4a:c1:07:e9:65:f9:62:49:54:27:6b:f3:
46:6b:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:28 2026 by rpki-client