Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: k4BmTE0WqjfaRf5yX1RRNCSqynKVtJPbr5LJdEunGig=
Subject key identifier: E6:27:1F:6D:27:66:51:73:E0:D3:23:07:76:B5:D8:C6:BD:05:2D:2C
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019CAE6C299D6ADF70FB6DC92B2B6133DB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 12:00:49 +0000
Manifest this update: Mon 02 Mar 2026 12:00:49 +0000
Manifest next update: Tue 03 Mar 2026 12:00:49 +0000
Files and hashes: 1: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: W874GKuuwAHP+Ht4YTN0qMeO/NhXhYlcPKcVL9OEmM4=)
2: qZQDb_OLECs9_cvzC4NvW-jUYJY.roa (hash: Xte6c3KnBqX3Xm7/vG9ebJ4eg8ffxrvgU6w78IU7x5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:29:9d:6a:df:70:fb:6d:c9:2b:2b:61:33:db:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Mar 2 12:00:49 2026 GMT
Not After : Mar 3 12:00:49 2026 GMT
Subject: CN=e6271f6d27665173e0d3230776b5d8c6bd052d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:6e:b2:9f:63:7e:a0:49:32:1e:3b:b6:39:
d7:02:2d:66:b1:10:3a:90:68:e8:86:4a:37:a6:07:
6a:9c:06:a7:85:b6:cc:33:3a:c2:2d:ba:92:33:68:
31:20:84:b6:f4:93:f9:89:c5:2d:25:fe:d2:a0:3c:
32:31:17:86:99:c5:dc:6f:30:9c:ea:40:81:00:3b:
e9:08:83:48:7b:87:2e:24:83:f1:c6:8b:ba:32:f5:
fc:2a:77:34:8b:f3:87:37:da:f6:df:17:8f:7c:ac:
d2:35:3f:59:fd:87:c7:29:07:63:38:f4:d8:f5:4e:
92:97:0c:d6:a4:14:27:d8:d2:74:8b:e7:4b:35:71:
e0:57:31:45:44:a3:99:cb:03:d7:92:24:34:31:94:
8c:8c:4b:43:b0:eb:cf:11:1c:e7:56:a3:e7:cf:16:
e6:e1:68:d0:b5:36:94:59:c1:97:35:b8:6e:ea:64:
75:42:9d:97:6f:db:3d:3b:b3:6a:05:a0:14:5e:c7:
7d:21:d7:d7:29:8f:6d:1a:ca:69:d9:8f:d0:de:a8:
8b:47:d5:6e:d0:92:8d:4e:de:a5:5a:92:c3:3c:30:
17:7e:2d:7d:85:16:c9:41:5c:40:e9:8e:61:16:aa:
82:a2:9b:29:2c:04:25:6b:f1:d4:95:50:b5:c0:75:
75:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:1F:6D:27:66:51:73:E0:D3:23:07:76:B5:D8:C6:BD:05:2D:2C
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:2f:86:9e:37:ed:3c:e5:e8:80:b0:7c:eb:ed:fd:d8:40:
62:82:d7:93:6e:71:3a:e2:71:8a:57:a8:e2:f1:cf:81:93:e2:
3f:90:00:33:2d:dc:3c:b6:35:25:a7:2c:bc:c4:20:b5:91:c9:
fe:1a:1f:49:c7:ee:41:40:7a:39:3b:23:f3:32:b2:bf:3e:1f:
15:97:75:65:93:67:90:b8:84:11:2d:9d:22:d8:26:52:f7:50:
b7:0e:10:9f:34:f6:2c:88:2e:07:f5:c9:20:9f:9b:39:fe:7a:
5c:ab:74:d0:f3:3d:fe:2a:78:ab:aa:72:16:1a:8d:f0:36:8a:
ae:72:49:a7:a8:5e:af:b3:27:b8:e1:8f:be:ea:55:2c:51:c3:
c2:d5:9d:42:2e:78:20:40:c3:12:d4:2c:80:a5:da:77:08:a6:
9c:9e:9a:1b:75:eb:42:f8:cf:e4:91:26:e9:e8:89:5b:7a:46:
5b:d7:a9:57:ff:54:e8:b2:0a:96:02:ac:7e:51:e0:e3:ef:c5:
a4:da:f2:06:b5:3e:e3:00:fe:b7:a7:08:d1:8f:dd:91:0c:28:
90:dd:10:39:b5:eb:8d:3a:87:28:e8:c8:bb:ed:24:cf:12:98:
da:04:3f:62:99:f5:98:be:06:48:e5:6a:e0:42:1e:d9:48:0f:
26:28:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:19 2026 by rpki-client