Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier: o5FYZR/+77nztD2zWML+7njPbCJ0F3VpC8qh6TtalVQ=
Subject key identifier: 86:43:44:1F:0C:28:80:7C:38:55:50:35:FD:7D:2F:C9:F6:C9:05:7C
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 019CAE351D9FF4DB343DE18D14C3D53E54C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number: 07BD
Signing time: Mon 02 Mar 2026 11:00:42 +0000
Manifest this update: Mon 02 Mar 2026 11:00:42 +0000
Manifest next update: Tue 03 Mar 2026 11:00:42 +0000
Files and hashes: 1: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (hash: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng=)
2: SfyGLqqUmhSJdrvNRjgqa719X1o.roa (hash: W5M17NIRo4ubi5ZsSmZINBoyskG2lROrQJ2bZs1LviM=)
3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: 2pmqN0yvbEWB/GvqBmmCauzUj/UHIBQVyxCb0tTRuY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:1d:9f:f4:db:34:3d:e1:8d:14:c3:d5:3e:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Mar 2 11:00:42 2026 GMT
Not After : Mar 3 11:00:42 2026 GMT
Subject: CN=8643441f0c28807c38555035fd7d2fc9f6c9057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:05:39:ec:0d:aa:f0:4e:0f:00:ef:03:4b:
10:3d:99:7d:f8:4e:82:d5:36:ed:c2:f8:30:50:68:
be:41:d9:91:c6:83:62:1a:2c:ed:2b:33:bc:03:bf:
e2:f5:d0:62:fa:2d:45:f8:80:1d:bd:a2:54:74:05:
be:9e:47:96:2b:b8:f5:e2:f0:6b:19:40:f0:3a:04:
57:0e:5f:b6:9b:e8:86:a3:81:6f:84:f8:34:5a:01:
03:d5:b4:3b:11:26:9e:f2:2e:7b:b9:66:2c:cc:06:
f3:d2:d3:7d:de:7a:45:c2:dc:59:bc:e7:37:33:29:
85:ba:27:99:14:33:b1:21:b1:d5:38:32:50:61:eb:
e7:90:73:d8:7a:3a:20:cc:5c:53:24:35:7a:06:05:
b1:ba:e2:20:84:a4:23:b0:cd:b3:6a:af:54:7f:85:
4d:b2:4a:52:f2:e1:09:05:2d:87:9b:ea:47:db:e1:
0b:57:61:6f:3e:5c:33:36:1d:eb:be:db:79:6e:3f:
22:91:16:63:60:88:14:63:c0:6e:84:e8:f2:8c:43:
5f:ba:42:89:d0:57:5f:85:6c:2d:ac:6d:b6:19:59:
86:7c:d8:2e:22:bb:05:5e:3c:84:dc:4d:b8:b5:ce:
3b:41:3d:a5:b6:9c:3f:13:68:b6:89:33:e1:74:e2:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:44:1F:0C:28:80:7C:38:55:50:35:FD:7D:2F:C9:F6:C9:05:7C
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4f:ca:93:29:0c:db:24:df:d8:86:32:be:97:d4:7d:c8:4c:
f7:4f:b2:9d:ca:3b:22:24:9c:80:b4:82:73:b2:2c:40:6e:61:
47:e1:df:c2:ba:1b:b6:81:8b:ef:fd:30:2c:6b:64:87:83:4a:
4f:76:df:d6:78:6d:98:0e:5d:1e:45:5f:5c:e0:27:9f:a2:ab:
4e:ab:2c:bf:ce:57:7f:f4:c6:d5:77:a5:2d:96:93:8f:1f:34:
4f:b1:27:28:b1:d6:dd:11:62:b9:14:22:19:09:ce:ac:8b:33:
17:9c:4d:4e:79:9e:6e:48:61:dc:e8:2b:08:54:61:17:f0:d0:
1f:0c:e4:4d:1c:0c:cf:af:1f:78:5b:98:40:7a:73:d6:cc:58:
61:91:99:5b:5d:68:47:bc:0b:00:54:f6:89:f4:db:da:94:a1:
fb:8e:e4:f2:16:bf:34:91:cc:6f:ca:0b:ef:03:d8:0e:63:37:
dc:52:05:7e:1c:8f:d2:d6:75:39:42:c1:1d:3a:30:6d:2f:27:
6a:e9:bc:66:cd:d5:e3:5d:1b:fb:43:ff:6d:87:f2:56:ad:bb:
a5:5a:a8:63:b4:4d:d4:c4:b8:ce:fa:5b:9f:6e:2c:11:91:48:
e2:ca:d0:d5:bf:4b:e7:d9:07:0a:9c:1a:45:31:83:8b:fa:df:
42:ec:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:41 2026 by rpki-client