Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: aBjc0ET/BJdjrZg+PztjoIBEtYkZ9z4WMQElkrtqClE=
Subject key identifier: A8:78:6F:CE:E7:F9:99:47:9B:03:23:2C:19:4F:AD:6F:EF:71:0B:09
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 019CA9EA9F31B77F3837DDD995B9897CA251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 15:00:51 +0000
Manifest this update: Sun 01 Mar 2026 15:00:51 +0000
Manifest next update: Mon 02 Mar 2026 15:00:51 +0000
Files and hashes: 1: J0PZBVWFTINnhdQjJ1kEEUY1JP8.roa (hash: Whf1HQd5oE3GSY4trhkL4bAm/CeLA6p+cMBaOxA2wd4=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: FqYxdM2crEkekpK2sQaz0sf41sXBy7FvEEYft/37BQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:9f:31:b7:7f:38:37:dd:d9:95:b9:89:7c:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Mar 1 15:00:51 2026 GMT
Not After : Mar 2 15:00:51 2026 GMT
Subject: CN=a8786fcee7f999479b03232c194fad6fef710b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:4c:82:87:eb:b1:6e:75:01:26:99:84:28:
0e:11:cb:5f:30:c0:f7:6a:40:4e:23:77:00:73:4b:
07:ed:61:5f:d2:8e:3c:4d:2b:52:18:a5:5f:37:77:
40:8e:f5:2d:93:17:c4:3e:80:19:45:07:1e:74:f1:
ee:45:23:37:1e:0e:06:e6:f8:58:16:4d:37:bc:60:
bd:48:53:19:b4:af:de:f2:44:18:a8:ab:aa:37:5f:
cf:51:3c:f2:16:5a:18:30:1c:00:a6:db:73:57:c4:
54:62:43:05:4f:b3:14:b7:47:5e:a2:a0:55:7a:a2:
f9:66:81:d8:40:7c:33:fe:b5:da:4d:ec:fa:3d:7d:
fb:ad:0c:84:2c:8e:d2:00:d1:a4:6d:8a:53:22:f4:
db:10:aa:3f:e3:93:47:0a:be:3b:d2:80:ab:16:4d:
53:da:95:75:79:65:f6:6a:f6:0d:a0:96:69:89:88:
7d:17:de:c9:c9:84:7d:02:90:e0:6b:5d:f8:65:10:
3a:4b:0e:b5:25:bd:41:04:cd:83:d1:9b:be:31:66:
fd:77:7f:e0:3f:4b:c0:5b:cd:65:8c:ce:43:2c:5b:
20:68:30:42:71:fe:f4:94:49:d6:e1:6e:40:c2:54:
98:e6:4a:57:19:b6:b9:2f:2c:0c:59:15:11:b3:04:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:6F:CE:E7:F9:99:47:9B:03:23:2C:19:4F:AD:6F:EF:71:0B:09
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:80:53:12:f0:39:31:3a:26:89:37:e2:6c:23:88:99:cd:1a:
ac:e7:a4:fd:79:2b:4e:b1:a3:13:22:7a:53:9c:5c:0b:45:00:
1c:a8:f3:85:3e:00:7b:b8:12:19:6d:91:c5:77:88:b9:d1:88:
00:ef:ed:ce:d9:c8:bf:e3:39:4f:c1:91:ff:db:13:1f:fe:45:
a7:7b:69:bc:75:9b:34:1a:ac:59:98:45:e6:6f:ca:75:b0:3b:
b5:73:3d:fb:8c:e0:75:ec:5c:23:30:0b:90:0e:9c:69:26:44:
ae:3f:ec:ac:54:0d:ab:4b:7e:33:d3:95:96:93:63:e2:c8:30:
1e:ea:2d:d3:17:0b:3a:40:bc:51:a7:d8:45:d2:c8:c2:82:fb:
07:df:80:44:b3:e6:9b:07:28:93:e3:7f:10:f3:31:47:21:35:
3e:74:11:f4:2d:da:17:cb:33:6e:52:70:26:ff:81:e9:ee:36:
da:73:be:dd:99:bd:80:19:74:50:7a:98:94:80:97:d6:b2:ab:
bf:72:7c:9f:dc:d2:3d:fe:9a:39:f0:5b:6c:1d:6d:d3:b1:1e:
c2:09:5c:10:42:b9:55:7d:c8:43:40:fc:28:81:d8:e9:e0:d5:
50:73:72:e8:45:ff:cc:d0:31:34:96:5f:45:23:c6:c0:0d:b3:
e5:8b:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:54 2026 by rpki-client