Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: cyJRR+NPR6FwZYvCNPt6pbt6vc0xH+lR5G6yg85Ax9s=
Subject key identifier: D4:E8:86:30:78:25:69:D0:D2:3B:58:46:B3:87:74:9E:3B:78:98:A4
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019CADC76FB75C0F57F21A46EA3DA55B3E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: wMkICdlFL7f96o14OJ35UNGGrf/LFJCtyQgz/BHeOtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:6f:b7:5c:0f:57:f2:1a:46:ea:3d:a5:5b:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=d4e88630782569d0d23b5846b387749e3b7898a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:be:ae:1f:13:36:aa:0a:c4:71:da:cb:07:
3f:e1:ea:ae:02:3e:14:84:57:f7:43:4e:f6:d6:20:
49:89:69:af:51:91:05:db:db:8b:15:83:d0:de:f3:
0c:64:12:3e:fb:18:1a:84:97:ad:34:f2:72:4f:ce:
62:20:f5:3b:34:ad:8a:e7:fc:0f:92:fb:fd:3b:d4:
df:f5:91:d1:c8:ec:77:0f:03:4f:d5:26:ea:2e:a0:
a0:08:e2:3a:ae:25:6c:fe:e1:3b:25:d2:ab:32:c3:
cb:c9:4c:c0:76:ad:9d:5e:b1:e2:be:91:a0:6f:b6:
54:aa:87:d1:60:17:e4:f8:d6:db:98:b0:ee:e1:69:
7b:0e:e4:22:4c:60:08:96:50:48:0e:1f:d6:bd:34:
78:ae:20:6f:4f:7e:91:f1:f2:9d:43:b4:83:3a:b4:
b9:6e:c2:34:7c:cb:c8:4c:84:be:9a:81:87:41:7a:
6e:29:1e:73:77:f8:da:4a:39:8d:64:a2:59:4c:e0:
16:26:9b:28:e7:b3:c6:f1:b0:b5:39:e5:a9:c9:b8:
e2:b0:12:6b:76:83:e8:5f:9a:30:aa:a5:0b:1f:cb:
8b:d3:88:11:b8:11:ef:3a:5b:47:a2:a0:12:e7:05:
f5:94:44:97:6f:3f:75:d3:be:46:b3:ef:01:e7:ff:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:86:30:78:25:69:D0:D2:3B:58:46:B3:87:74:9E:3B:78:98:A4
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b4:18:d5:16:9c:f0:c5:13:46:dc:de:af:b7:ae:0e:05:7b:
f5:61:7b:67:fd:78:a9:83:7d:7d:60:69:d4:dc:ea:21:c6:13:
08:cf:0d:4c:18:17:bd:a4:d3:1f:cd:6a:da:86:a9:05:a7:a6:
2c:7f:5d:c2:b0:83:cb:5e:4b:8a:95:a5:25:dc:37:0f:1c:e0:
8a:bc:16:66:80:34:c7:3b:16:2c:21:c2:53:c5:f7:dc:af:3e:
a6:8e:42:58:bd:c7:c2:40:8a:28:2c:ef:8c:6c:44:0a:56:a3:
af:2a:83:76:a3:2b:e2:91:3c:f0:9a:1a:04:79:5f:32:8a:7e:
c9:e7:c2:d7:03:d0:70:ec:d5:4a:cb:1d:ee:bf:f7:19:a0:0e:
36:e8:ed:1a:d1:4f:59:bc:a6:b9:db:ea:a9:ae:4c:cb:00:31:
07:7b:7d:ac:37:99:9a:99:a3:25:8f:b2:86:1f:9e:ba:e0:83:
65:3e:e8:4a:b8:55:59:e6:d0:a1:ec:68:a9:0d:65:04:73:b0:
3e:0b:47:48:15:e9:ac:cf:2e:6d:95:6e:54:c7:64:4e:95:09:
23:76:6e:8e:b2:e0:d0:52:38:96:a1:e0:0e:75:25:c1:90:1f:
38:f0:8a:87:d4:e2:ba:4e:bf:70:45:ef:53:56:ce:ee:8b:c5:
68:bc:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:31 2026 by rpki-client