Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: fQegOzZxd/MO+ejY5jEp+6Hz77dSRpVIbJa8pGXYbY4=
Subject key identifier: 02:76:9C:D1:4A:0D:7A:69:8D:72:0A:F9:29:2C:B6:22:90:13:9B:48
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 019D9A3E5686BF1A65049DA8ACCB037B0072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (hash: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: ERjnMtinbZ7fVY+rWfN+dpptnSW2+b3fvctH5ssG/rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:56:86:bf:1a:65:04:9d:a8:ac:cb:03:7b:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=02769cd14a0d7a698d720af9292cb62290139b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:cb:66:c7:71:95:60:a9:9d:85:1b:d5:b1:
17:c2:2d:c9:39:57:26:95:8b:a7:ad:a5:3f:dd:2b:
7d:b8:f7:1d:e4:1f:1b:49:44:8c:97:6e:9a:58:5b:
f3:49:54:1b:c1:fd:48:66:e5:bd:ed:2f:de:18:da:
16:dd:3e:25:6b:e9:64:68:06:fd:43:b6:f6:9f:c7:
44:d5:59:c4:c1:c1:a4:88:59:41:3d:77:41:d8:cb:
27:40:28:e2:7e:0e:47:49:aa:45:8b:d4:08:19:ed:
e2:aa:85:50:3a:7e:b4:f4:a3:ca:ce:af:69:e6:19:
62:cb:a6:5b:d9:7e:e5:52:7f:4b:4b:53:65:3d:d0:
33:0f:29:8f:3f:5a:08:18:07:cc:d3:73:23:92:e6:
f4:3d:4e:2e:03:74:a4:75:b0:28:3e:9d:dd:99:f8:
dc:c9:ce:db:03:cb:7f:ab:66:b0:05:29:19:17:12:
69:cd:6b:fa:79:08:40:60:96:03:ef:c3:6a:e7:b6:
54:fd:e7:e0:9f:8f:a6:bb:53:08:3a:8a:2a:0a:61:
08:a5:ed:45:b8:25:6f:73:5f:44:4e:bf:ed:67:6e:
32:11:b6:d8:a8:5b:fa:30:65:fc:71:93:89:96:72:
10:f5:15:1e:14:69:a6:5f:6b:0b:9d:d0:f1:32:a6:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:9C:D1:4A:0D:7A:69:8D:72:0A:F9:29:2C:B6:22:90:13:9B:48
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fe:b7:1a:72:e4:0e:f6:35:fb:c1:5b:d5:b1:81:fc:3d:19:
d2:0a:e7:cc:c7:4f:c3:a0:fd:66:c3:07:b1:ff:ee:31:a0:91:
a9:2e:fd:b4:b6:ab:4f:7f:24:ad:97:9d:cd:89:90:fe:98:3a:
30:f0:c1:5f:4b:b3:ec:ad:26:d6:7f:93:d0:9e:c5:83:ed:ce:
d3:e3:23:7b:7d:3a:ee:94:a4:82:34:c2:28:7b:f7:c7:cc:49:
d4:4e:14:31:41:50:c0:61:b6:7e:2f:c9:17:01:79:6b:48:d4:
05:95:19:76:38:e2:03:89:59:e7:be:59:20:76:00:98:4d:ca:
d8:00:d7:ae:63:ee:60:2f:9f:73:c0:fa:28:f9:9d:fd:8f:19:
89:d1:2b:68:c7:d3:3f:82:a9:0c:17:f2:c5:0a:6e:32:dd:89:
47:e8:30:e6:28:52:27:4d:72:20:86:c9:58:ff:a6:e5:c7:68:
38:f2:30:ac:0a:ba:e8:8d:91:19:f6:9d:a0:54:63:c6:2c:f6:
db:7a:a3:6f:2f:c5:17:bb:6e:fb:70:e0:81:67:32:ce:b8:8b:
8e:9c:83:ac:19:3a:07:5d:2b:dc:04:43:c1:5d:19:8b:5c:b4:
fc:5c:1e:d1:62:5c:40:35:2a:3b:f3:c6:d0:66:9c:af:49:de:
a0:ad:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:59 2026 by rpki-client