Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: gCyHYVHzEjMwPYrycHyKSPkVBj0pxHeZSx0VR7O76Ws=
Subject key identifier: B0:51:01:34:47:AE:AE:10:74:8C:7E:0E:05:6A:BA:82:EC:B5:82:B9
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019CAD596C27C5E4ABB41808DB5096433C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:00:44 +0000
Manifest this update: Mon 02 Mar 2026 07:00:44 +0000
Manifest next update: Tue 03 Mar 2026 07:00:44 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: ManhteteF7zhDRSOvuKeOUYlciSGk0rKesabXVBaatA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6c:27:c5:e4:ab:b4:18:08:db:50:96:43:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Mar 2 07:00:44 2026 GMT
Not After : Mar 3 07:00:44 2026 GMT
Subject: CN=b051013447aeae10748c7e0e056aba82ecb582b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:1c:2f:26:2f:ab:f7:e3:9f:bd:34:f1:69:
0a:32:f0:d9:21:9d:d4:b3:99:15:42:4e:e2:de:57:
44:11:ef:46:dd:64:86:32:6d:52:46:59:0c:4f:5c:
ff:61:1d:79:00:65:62:d5:03:b7:4e:42:25:f1:c1:
d9:9e:d6:9f:de:7c:5c:26:68:f4:20:90:e7:3c:f5:
ac:94:05:ce:9b:e7:78:8f:b2:d2:d8:df:4a:cc:d2:
48:46:c5:a3:b1:e6:a4:d3:f5:55:d1:ff:c5:d5:f6:
c5:59:5b:95:94:43:b0:84:e7:e1:f8:34:02:93:ac:
27:b1:b1:8e:38:d5:be:3a:84:63:c0:3b:35:52:51:
a3:17:f5:4a:f5:55:17:23:d6:bc:93:47:0d:cc:ad:
ae:e7:ac:5b:75:a8:c2:f4:03:dd:f2:08:b1:9f:ef:
83:ca:d6:64:08:77:29:8b:ee:f4:7a:e5:32:cb:fe:
d3:b5:42:bf:8f:6a:69:8e:b9:33:ee:3e:2b:fd:c5:
2d:d5:36:08:12:44:58:38:b9:0a:63:bb:88:1f:a7:
4d:1f:50:91:24:f0:26:6f:49:28:ef:14:1b:b3:1e:
81:fb:36:45:20:8a:7d:65:20:62:7d:12:a7:52:fa:
f4:3e:4e:2c:72:bd:0c:8e:f0:4c:f0:4c:da:ce:1f:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:01:34:47:AE:AE:10:74:8C:7E:0E:05:6A:BA:82:EC:B5:82:B9
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:40:49:f7:3b:f1:0c:46:05:5c:77:ee:d5:38:7d:ab:8a:72:
03:64:cf:9c:e7:e0:5f:cc:8f:85:a9:77:fb:71:c8:6a:4d:04:
37:46:8b:96:30:ac:f8:2c:8e:93:97:0a:5c:86:d4:60:7a:01:
db:3f:6f:4d:a0:ab:96:4a:b0:88:f9:fc:79:22:f8:f2:86:0b:
0f:2b:05:de:db:6f:f7:5f:a1:34:16:ee:fe:d0:7d:b3:8f:d2:
49:20:80:3c:56:f4:cc:22:c1:ea:23:00:85:72:ec:49:1b:f6:
2a:d8:da:56:a7:75:94:aa:d3:b8:4f:de:e7:28:37:79:ca:ef:
24:72:ed:27:e7:39:d5:19:c9:5a:53:42:54:c0:11:69:7d:af:
55:bd:c5:fa:62:35:5f:2e:37:ce:1a:3d:76:49:71:92:5a:73:
8c:16:8d:ad:39:69:7c:c9:c5:ec:f0:74:fc:69:2a:44:ab:92:
56:ac:45:b2:2f:79:49:9f:56:dd:56:18:bf:4b:99:25:c4:c9:
2e:5c:6b:23:db:33:0e:9a:ef:28:b9:09:00:2c:fe:16:7a:df:
69:cf:af:9d:55:32:8e:87:ad:b9:16:4b:05:21:07:9a:5d:ab:
7a:a5:45:ec:d1:7c:72:2e:d0:a3:28:99:71:80:3c:7f:d6:03:
54:65:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:37 2026 by rpki-client