Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File: k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier: Rfyw8AuCVTf7KG7WGAcwuDHZiYjObPhaWq+tnf+/JH0=
Subject key identifier: 6C:78:D8:A9:92:F5:1A:60:D0:24:F1:53:20:89:9A:10:E5:2E:04:20
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 019D9A0735B8328CBA9CBAF2B02B5CF46C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 06:00:56 +0000
Manifest this update: Fri 17 Apr 2026 06:00:56 +0000
Manifest next update: Sat 18 Apr 2026 06:00:56 +0000
Files and hashes: 1: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: qdQBP7WZ3JCw1ktLmJ6zQg/JNYFbYO7ckWlo0yIe9Hg=)
2: qZQDb_OLECs9_cvzC4NvW-jUYJY.roa (hash: Xte6c3KnBqX3Xm7/vG9ebJ4eg8ffxrvgU6w78IU7x5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:35:b8:32:8c:ba:9c:ba:f2:b0:2b:5c:f4:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Apr 17 06:00:56 2026 GMT
Not After : Apr 18 06:00:56 2026 GMT
Subject: CN=6c78d8a992f51a60d024f15320899a10e52e0420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:f3:6d:f3:cd:cd:97:b5:7f:a8:f9:38:38:
ad:37:74:e0:60:f7:55:44:31:5b:2c:be:e1:19:35:
a2:57:a9:c0:5e:cd:f6:8e:78:5b:21:6f:80:91:ad:
a6:a3:fc:ed:5b:6c:41:74:86:ab:b4:c8:3e:da:47:
aa:89:41:d3:13:ab:f8:a4:7e:75:76:5f:14:77:04:
08:35:b8:43:44:63:a1:fb:46:87:89:2a:5b:d7:5e:
f9:1a:40:38:31:65:dd:2e:99:18:bb:07:6e:06:d9:
84:40:67:12:0d:75:e8:68:39:80:38:37:2d:da:f5:
da:be:76:35:5d:90:f4:c3:93:93:0d:24:c4:8a:29:
05:06:23:a1:49:99:00:89:c3:c0:3b:d1:21:b1:97:
33:e4:37:ad:a1:6c:31:cf:15:cb:43:c5:72:0d:ee:
bd:d3:e9:03:78:8c:66:08:7d:87:38:dc:bb:28:05:
ea:90:f8:88:4b:3a:33:cb:42:f4:12:df:25:61:c3:
94:b5:83:28:ec:b4:58:58:61:7b:72:64:de:48:b6:
8e:e5:54:38:1e:0f:f9:8f:0c:3b:80:0e:b5:8d:9c:
4e:8b:fa:7b:ee:f5:1a:22:f7:4e:28:3d:21:45:85:
f2:fd:34:4d:b3:f8:70:f7:43:3c:ad:77:03:25:87:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:D8:A9:92:F5:1A:60:D0:24:F1:53:20:89:9A:10:E5:2E:04:20
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b4:cf:cd:b6:49:05:46:93:b0:11:28:2c:18:15:ed:87:1c:
e1:56:0f:9f:25:a7:35:68:32:c8:0f:a6:1b:be:a8:71:db:38:
7d:e3:17:bf:f2:92:d0:6a:0f:23:e7:5f:0a:32:64:be:7a:a8:
0c:4b:9b:8e:0a:96:53:66:07:3e:fd:7e:e8:7c:d2:87:a2:78:
64:bd:00:44:66:81:43:61:d1:0e:72:2d:00:19:29:1b:26:af:
76:e8:8b:61:ae:43:29:9c:6f:ce:4a:63:f5:43:23:db:71:e0:
b9:41:91:1f:ba:13:33:ea:2f:7f:f8:a1:b9:bb:d8:da:f2:03:
cb:50:35:bf:c2:42:45:fa:7c:0b:30:22:6d:72:cc:0f:43:0d:
63:0c:bf:5f:33:af:fd:af:ab:1f:df:e8:d3:15:e5:f2:50:ef:
cb:59:f7:63:c7:57:4c:16:6d:c8:48:e3:8e:f0:43:27:fa:ac:
7f:5b:da:eb:f2:2f:09:9a:8b:33:47:85:0e:09:85:c5:62:1c:
ef:98:35:23:4c:94:7b:6c:ff:0d:bb:2d:a2:9a:2d:33:f2:8f:
d2:52:fb:11:41:0d:a6:c1:c8:b1:cd:43:86:f9:f4:a9:bd:32:
81:74:6b:5f:60:98:03:c7:ce:c6:52:02:d8:b0:11:c8:83:f6:
94:c8:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:13 2026 by rpki-client