Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: D3NKZW0WG9UH1NS4BKZfDhiVhRUOe875TRviBIAJQHw=
Subject key identifier: ED:FD:21:F7:03:31:34:7C:4F:57:20:94:14:09:07:B2:FD:B4:AE:54
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 019CABD9D9F071257A930B0716C2B3D1618E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0C84
Signing time: Mon 02 Mar 2026 00:01:46 +0000
Manifest this update: Mon 02 Mar 2026 00:01:46 +0000
Manifest next update: Tue 03 Mar 2026 00:01:46 +0000
Files and hashes: 1: JLHc8-P_7_DUKLbSOYfj3hNYY4o.roa (hash: WG0boTSyS99K3270L73wT11CILS0oIYBWT3s8ssKoJ0=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: /X56XIKS12S6SPiYlzoswQkVpK6WiT6dzONOAJPBEYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d9:f0:71:25:7a:93:0b:07:16:c2:b3:d1:61:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Mar 2 00:01:46 2026 GMT
Not After : Mar 3 00:01:46 2026 GMT
Subject: CN=edfd21f70331347c4f572094140907b2fdb4ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:2e:29:71:75:fe:a1:f9:1e:6e:5f:0a:54:
0a:e5:8a:da:85:4b:19:9b:f2:c6:f7:45:dc:6c:f9:
22:81:f2:ad:a5:08:07:6d:09:33:24:3d:3b:7c:79:
df:80:e6:fb:e7:21:b3:ea:3b:fa:97:54:80:70:ae:
8b:68:44:8f:ed:f2:ff:c9:42:fa:76:b9:6a:db:fc:
54:34:7b:b0:0b:18:15:5b:3a:68:ad:a1:b6:e6:b9:
ef:10:a0:94:ff:f4:0e:7d:a1:a0:09:42:e6:2b:7d:
62:72:bb:76:2d:7d:07:9e:3b:60:04:89:39:dd:be:
d2:a1:5e:a2:27:ec:e3:15:fb:dd:df:db:a4:cb:03:
26:d3:d7:04:c9:d5:52:35:0b:b8:2e:8f:4b:90:2a:
7c:a0:f9:6d:66:53:56:09:32:c1:cd:87:5a:e1:b0:
f4:cc:92:3e:ec:db:aa:e8:f4:b8:f7:a6:15:ad:c8:
e2:a8:5f:54:90:9b:1a:4e:13:15:f3:f2:5e:07:e6:
c8:79:a4:b7:5a:dc:8d:59:74:36:f1:c7:51:58:46:
ef:91:ec:7f:23:05:8f:2c:3f:6a:37:97:58:cf:17:
bd:d5:91:28:7a:5a:8c:65:73:97:2c:4e:0e:d7:aa:
8b:62:35:b3:92:89:f2:4a:cd:8c:56:ed:7e:68:4b:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:21:F7:03:31:34:7C:4F:57:20:94:14:09:07:B2:FD:B4:AE:54
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:41:a9:58:9a:51:fd:af:4d:14:2d:61:7f:05:34:2f:83:
f4:00:92:57:38:a9:0a:a4:db:cc:83:f2:aa:06:b7:09:c5:15:
6e:20:91:95:9f:c9:e4:96:37:78:19:42:e2:6e:f5:4d:4b:52:
11:5c:10:07:c4:1b:49:d8:85:77:44:21:33:c7:61:93:9f:66:
d8:3e:d2:0f:af:6d:1d:e1:34:50:0f:e1:15:66:50:09:fe:cb:
b6:34:15:28:6c:c3:c8:be:98:16:8c:12:92:67:d3:03:ab:f6:
1b:93:e7:6b:28:a9:a7:59:4a:5d:97:99:53:56:57:e2:bc:38:
b6:15:1f:e6:87:a6:16:d8:6a:de:9e:ad:1f:3d:d2:75:8e:4c:
44:b2:50:93:55:50:8d:8b:9d:9a:bf:33:5e:d6:30:3c:f6:e2:
20:b6:6c:30:72:ab:ca:8e:0b:52:6a:79:37:e8:61:c9:cc:90:
68:4b:23:e7:0c:66:27:b6:4e:92:83:c6:e8:ef:3d:fa:cb:8c:
c6:5e:4b:6f:bf:12:82:f2:63:a9:32:d1:6b:73:89:37:e7:5a:
81:8b:4e:55:a8:61:ab:bc:f1:de:2b:7f:72:3a:a0:2d:41:68:
d8:5b:14:d4:3d:25:34:49:43:01:08:bd:0a:bf:c3:06:77:5f:
b9:70:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:44 2026 by rpki-client