Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: tI/hxo0ifzy01d4Z6YBBgJVSlBOzA8Q8IWSDvXQvP2o=
Subject key identifier: F1:1F:2E:B7:B2:5C:A0:20:F6:19:FF:B8:FB:C8:CD:98:48:72:9B:6C
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 019CAC47293F8C564A1CE50D0E3B978E19C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 02:01:10 +0000
Manifest this update: Mon 02 Mar 2026 02:01:10 +0000
Manifest next update: Tue 03 Mar 2026 02:01:10 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: uG6qagGDRsS/u5giChmJXaRIbMO0uHRgZ7F4KMKN0oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:29:3f:8c:56:4a:1c:e5:0d:0e:3b:97:8e:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Mar 2 02:01:10 2026 GMT
Not After : Mar 3 02:01:10 2026 GMT
Subject: CN=f11f2eb7b25ca020f619ffb8fbc8cd9848729b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:7d:83:73:0c:9e:e4:22:16:92:34:6c:f3:
d8:c4:c1:6d:ac:2d:33:4b:71:bf:19:a4:8a:85:f2:
48:2b:79:e0:0f:82:92:fe:42:9b:49:87:8f:0b:e3:
ca:ed:60:a1:5c:ed:cb:ee:61:f5:d3:31:13:d9:b4:
31:ac:ea:ba:84:01:1c:6c:c4:f0:c3:f2:da:34:e1:
34:d0:ba:b7:c3:9c:cb:d4:7d:cd:6f:15:3d:36:fe:
3a:17:ff:ab:d8:69:92:82:df:f0:27:f2:9e:e3:e6:
0a:76:f1:9d:4e:b6:db:e0:76:cc:9e:d0:8a:51:94:
4f:c7:b2:d3:8d:b6:a7:79:76:fe:c4:d2:4e:c1:c7:
8b:47:e0:43:e6:78:81:18:9c:78:25:3a:5b:da:1b:
ee:46:73:fb:8e:cf:20:82:a6:ce:d5:2d:a8:7c:97:
6c:a3:46:0f:5d:bd:da:50:32:c4:74:50:91:b6:45:
b2:05:6c:87:97:ea:06:4d:5e:38:d4:47:ac:bc:36:
41:db:e6:c9:8b:92:1f:88:ab:e2:fd:35:7f:be:09:
ba:f5:f7:3e:16:1d:ff:5b:ae:76:6c:88:ab:c5:9f:
26:a3:8a:2b:e5:44:6a:ef:00:f7:7a:69:fc:bf:c5:
63:24:09:6e:40:46:97:5b:7c:f7:b5:51:e3:4c:87:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:2E:B7:B2:5C:A0:20:F6:19:FF:B8:FB:C8:CD:98:48:72:9B:6C
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b9:2b:1a:12:ca:b8:90:63:c1:fb:2b:78:47:18:27:99:a6:
4c:17:ea:80:47:17:86:d3:05:85:63:a9:0f:47:18:71:66:41:
6d:ec:34:d4:91:71:33:fa:4f:de:d9:4a:12:74:21:df:bb:aa:
e3:ef:45:fb:94:77:8b:eb:80:d0:dc:27:f3:23:bc:74:37:56:
14:44:bf:a5:3a:2a:0a:bd:8c:03:e1:da:20:fc:07:cc:f3:d1:
72:74:79:e8:3c:ce:1c:21:41:93:3d:21:57:22:aa:6a:83:cc:
7f:d0:c3:00:8f:dd:c3:c9:11:45:25:29:31:46:83:f5:2c:e9:
b5:95:64:26:26:44:ce:fc:ac:d3:58:60:21:3c:4f:33:87:c4:
57:a0:3c:3c:91:ba:1c:e5:68:97:69:7d:e3:9c:da:64:9c:96:
e3:f5:e6:36:32:a2:ad:a7:ab:41:cd:56:e2:18:67:c7:c8:7a:
53:b2:ca:a7:d5:bc:3a:fa:0c:6d:68:06:5f:35:aa:bd:0c:35:
23:da:55:bb:22:63:b3:5b:4a:44:bc:dd:0f:2b:83:20:63:14:
cb:b9:bd:4b:b8:01:aa:61:18:20:51:c3:3d:42:b1:be:0f:1a:
26:1a:89:df:97:28:2a:a3:ef:23:c2:21:b5:d5:e0:11:f4:e5:
a8:3d:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:54 2026 by rpki-client