Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: Arl8sdL02kPfu5Vq3M4eJqabjJeVZJ5HVPxZuXJia1c=
Subject key identifier: 4D:C9:C5:B9:3A:5B:1F:D1:A0:17:9C:3D:8A:D4:44:48:DC:6F:7C:DC
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 019D9B50F790C75810775E2B2A5D4FADCEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 0D00
Signing time: Fri 17 Apr 2026 12:01:07 +0000
Manifest this update: Fri 17 Apr 2026 12:01:07 +0000
Manifest next update: Sat 18 Apr 2026 12:01:07 +0000
Files and hashes: 1: JLHc8-P_7_DUKLbSOYfj3hNYY4o.roa (hash: WG0boTSyS99K3270L73wT11CILS0oIYBWT3s8ssKoJ0=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: E6u6QwQRbRTD/P153u9Xl5VVDTeQsuHxolSfs7D4ao0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f7:90:c7:58:10:77:5e:2b:2a:5d:4f:ad:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Apr 17 12:01:07 2026 GMT
Not After : Apr 18 12:01:07 2026 GMT
Subject: CN=4dc9c5b93a5b1fd1a0179c3d8ad44448dc6f7cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:25:8a:0b:2b:4f:f0:63:93:55:c1:8c:e6:
4d:5d:8b:81:76:1a:cc:13:c6:50:6b:b1:58:7e:ff:
a4:97:a6:f7:36:59:9c:f5:5f:be:c4:b0:db:e6:68:
61:04:35:7a:75:d2:35:15:06:4d:a1:7d:bd:d4:a8:
aa:94:8a:4d:09:93:b3:02:4f:7a:92:59:d0:5c:7e:
62:c3:1d:11:1c:ee:65:e7:93:6f:86:2d:54:03:14:
65:88:2f:1a:1d:08:87:e9:bc:28:69:ed:97:22:13:
a1:1f:60:a9:37:3b:01:e7:e4:94:13:93:11:b8:0f:
58:8b:80:52:59:ad:19:f9:73:de:72:50:7b:7e:f4:
58:09:28:fc:11:41:9a:8f:ad:2b:f5:a8:a1:4f:c1:
86:eb:44:9b:d7:03:7f:5e:ca:2b:ce:93:47:a2:5f:
58:d2:46:a7:4e:d8:e7:98:be:44:4c:df:34:d8:6c:
2e:92:88:e8:24:dc:9d:45:d1:87:1d:3d:f9:4a:5e:
b5:3c:f3:0e:0c:e6:21:bc:af:24:e5:b9:81:46:c5:
a8:2f:de:f7:91:1f:29:f0:72:aa:9f:24:53:81:83:
4e:84:85:e6:3e:0a:76:f8:53:86:8c:df:b0:df:09:
ed:93:91:cc:fb:e8:ef:7e:fc:0c:02:d2:21:8e:01:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:C5:B9:3A:5B:1F:D1:A0:17:9C:3D:8A:D4:44:48:DC:6F:7C:DC
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:35:94:42:d2:46:7c:a0:10:88:39:c2:e0:a0:73:c4:6b:
cf:3d:4d:59:85:42:4e:a5:9b:d0:a0:06:fe:48:99:07:8e:39:
ac:ac:8f:83:cc:9f:4d:c9:ef:bf:0a:8a:13:cb:a5:96:72:82:
eb:7a:7e:b1:b5:fe:06:93:a7:6c:d5:19:1d:58:e3:0c:8d:08:
1b:17:bb:96:eb:a8:47:ea:a0:c4:69:f9:70:88:cc:b2:fd:06:
d8:4c:17:d8:a1:68:31:67:1d:6d:bf:03:58:8d:55:0d:ff:f3:
a7:ea:f9:c8:be:2a:aa:a8:da:21:f8:28:e1:d8:d1:aa:30:08:
cc:46:89:04:52:28:33:19:31:f5:cd:a7:47:d5:0b:fd:be:86:
06:77:59:f2:d3:cc:7c:a8:4f:c0:fe:47:2b:18:6e:78:5b:dd:
cc:5b:21:ab:71:07:96:88:29:a5:c1:00:b2:a4:60:b2:22:88:
9d:cf:9e:3b:b2:59:8f:85:3c:ac:f6:60:3c:e4:f1:c3:0b:13:
df:9c:73:be:34:47:f0:9e:f0:9e:5d:e8:fa:df:f8:27:04:ee:
2c:bd:2a:54:cc:b4:71:f5:0c:28:b0:df:fc:c2:5b:4b:f2:91:
8b:03:7f:75:08:a8:c0:72:c2:0f:9e:70:77:f4:1c:a3:bb:05:
45:7a:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:11 2026 by rpki-client