Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: 4QMYYWDgUe7gItxDfI7Hz/r+FiyEl2yDSUoI9g246PY=
Subject key identifier: 57:1A:42:C8:0C:D6:1D:6B:29:82:B0:74:5B:49:F1:43:E3:D0:B6:D7
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 019CAAFD64C67D8026C3825F2BE5EDBE45E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 0616
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: IDdWjfqKDEDoT5owNDTMrvBAidI.roa (hash: Cun9jfihjGmUz4jQNcB3IyvoxQWP4/ccqsrygK3OW84=)
2: NVKj6woT-fJPaVfcr9O7EUW5AlE.roa (hash: 9pmWIL3rH5wkbK7AJiKnnwiKMYGWFVxGS8vZ/hHe2wI=)
3: RPKrBbNxp_9CQhYxptiK6qfqSbk.roa (hash: NUJEbh3bKvsth8HU3RWkiOC5sGfAZYVM2xyBk7b/x6I=)
4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: 5V8KsRqq/fZ7tC1K+v81/7ImjmgaAqgspAWmgfuM3uI=)
5: rE96S2aKHeQZf0vrmquN8VX13fE.roa (hash: YrRMU2rXe7xngSe3xWiIAdBIEOfG76Z85QBRZWlUgPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:64:c6:7d:80:26:c3:82:5f:2b:e5:ed:be:45:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=571a42c80cd61d6b2982b0745b49f143e3d0b6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:5e:a1:1d:7b:64:77:3b:6b:9e:2f:a7:82:
3e:1b:66:92:9f:eb:fa:ba:b3:04:4e:a6:89:94:b2:
c0:df:cb:cf:10:da:45:a3:05:29:bb:3a:f5:c3:5e:
46:45:36:47:f9:b5:b4:33:80:40:c0:ec:68:b2:f6:
75:7c:5c:c8:f5:10:08:d2:17:da:f2:d1:0e:64:fe:
42:0a:87:ea:f0:58:a8:31:6c:5a:85:46:a9:3f:c7:
7d:b1:f9:68:27:96:b3:be:79:37:65:89:9b:7d:af:
32:51:70:e5:6c:fc:9a:cc:a1:48:52:b7:af:0e:ca:
7e:03:a9:5e:22:1d:ee:51:77:cf:fd:04:2b:65:69:
51:94:b4:a5:08:e0:a6:45:7f:cc:ad:20:c5:93:1d:
e8:4d:cf:a8:b9:a1:fb:3a:cc:a8:33:3f:5b:41:7a:
56:54:78:ff:58:6e:c6:be:10:ea:39:50:5e:3c:27:
fb:80:b8:f7:01:84:9c:31:1f:3a:05:62:0c:20:61:
2e:66:ac:0b:ac:df:6c:d5:83:78:7f:c8:a9:7c:0f:
98:eb:ef:e6:d3:ca:cb:50:37:59:c1:88:53:da:b9:
14:5d:a8:1a:f7:c5:9b:1c:87:f5:8e:2d:69:f4:14:
e2:05:db:c8:60:bf:18:bb:bf:c2:77:a8:37:bb:47:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:42:C8:0C:D6:1D:6B:29:82:B0:74:5B:49:F1:43:E3:D0:B6:D7
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ae:86:05:1a:cf:65:53:68:56:96:43:a7:d8:ae:fb:98:f1:
6c:b2:79:5a:9f:c1:a3:c3:a2:7f:9d:3f:43:d1:50:de:77:37:
80:38:7c:45:54:0e:2f:dc:85:87:01:52:4d:5f:93:02:1a:27:
d4:72:cb:ab:83:98:d6:3f:2b:eb:9a:a6:3a:b3:8e:20:39:de:
4e:2f:1d:4e:3a:1a:7b:26:b0:5b:21:48:a0:d7:e0:24:9e:19:
89:91:52:51:e9:8c:1b:b2:84:3d:74:a7:dd:93:dc:75:1b:eb:
de:31:be:48:93:26:7e:e9:e3:6c:06:cf:09:8e:c1:49:4b:08:
ac:dc:17:20:89:ee:c7:ce:52:f8:e8:a9:1b:e5:ee:11:52:79:
71:8f:06:86:70:c6:14:53:a6:66:f0:d6:47:72:56:ef:3d:38:
fd:48:48:41:ab:c9:24:db:38:6a:83:8c:0c:8e:ee:c9:4f:89:
7c:7e:05:15:d6:57:57:27:d0:06:5d:a6:15:90:fc:90:aa:a0:
e0:31:47:2c:ba:f1:07:9e:6d:00:94:db:46:58:30:7d:09:7c:
95:98:15:6a:d2:95:c3:c8:73:35:88:1a:7a:90:99:61:65:e1:
ac:8f:73:f2:f1:b3:c3:32:06:b8:e4:cc:f4:9d:75:d7:58:aa:
f7:dc:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:27 2026 by rpki-client