Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: f97M+Cr2f6qcEX+BAw5hJN45wWNSE8K03wXauHCJSyQ=
Subject key identifier: A9:13:F2:5A:E0:36:CA:1B:E1:29:87:C4:CE:E3:6F:AB:CF:43:F1:55
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019CAC0FE89FF5395D7E577F0EBC4B5DF6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: sMddOyjeG3uKh31KdnwtcfnLXVI4gd4505pldCGTUkc=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e8:9f:f5:39:5d:7e:57:7f:0e:bc:4b:5d:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=a913f25ae036ca1be12987c4cee36fabcf43f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:22:96:fe:ad:ab:fd:e0:c4:e8:79:ef:7a:
a4:08:11:32:a3:ee:f9:d9:5f:d5:27:36:da:13:49:
34:35:f7:fb:9c:15:ef:cc:85:07:97:48:c5:a9:3b:
b2:65:69:03:9a:98:b2:76:7c:5d:c0:2c:83:9a:ed:
6a:1f:73:86:72:57:79:a3:28:6c:74:7a:3c:51:36:
88:e9:3a:34:58:e6:22:67:15:a5:b0:e0:1d:14:bf:
aa:e3:33:6d:39:e8:44:44:5b:55:42:58:8d:4b:36:
c0:65:9a:e8:9d:53:9c:31:b8:6f:21:fb:03:61:1c:
27:e1:91:0b:e0:f9:f7:76:e8:dd:b5:f0:0d:c2:32:
bf:ff:66:c4:ca:85:d7:77:0f:b1:26:c6:ff:3d:b0:
09:9a:ab:28:94:08:fe:09:4c:4a:0f:2c:ce:bc:72:
2a:9e:7e:79:bb:39:d5:c6:6e:86:49:1b:f3:38:b0:
a6:62:7f:97:5c:4e:29:be:2b:27:e0:c2:b1:4a:ae:
68:55:d2:7f:53:8c:0a:8f:97:4f:43:66:c8:53:01:
af:7e:f7:54:c0:7d:03:60:3e:a5:eb:9d:26:ef:b6:
fb:0d:67:de:59:98:e7:4a:fb:35:1a:c5:27:2b:ce:
ff:46:b1:a9:a0:04:d2:26:35:12:ba:23:2a:8b:04:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:F2:5A:E0:36:CA:1B:E1:29:87:C4:CE:E3:6F:AB:CF:43:F1:55
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b1:b6:46:8d:5d:41:cc:c6:4a:52:cd:a0:73:66:57:c5:0f:
6b:f8:38:ec:98:0b:e8:fb:62:02:76:cb:90:0a:41:91:ff:cf:
9e:77:65:26:c2:54:b6:34:45:f0:50:a6:a1:d0:97:87:41:c1:
1b:4e:17:29:af:ea:56:c7:12:b7:4a:f8:88:ae:62:4f:9c:3c:
01:56:d7:ac:19:12:e8:68:e6:73:c4:e5:73:16:1e:37:df:3e:
ed:44:d6:46:0f:75:0a:e5:df:09:79:a2:6e:ba:55:85:b4:ba:
61:22:e6:47:41:98:52:7c:ed:0d:a4:78:88:4c:15:cc:da:3b:
40:80:3d:9f:da:b2:54:a4:16:5e:bc:95:89:16:72:d6:d8:c7:
d1:8b:c7:b1:3e:89:98:eb:f1:9f:94:41:47:e0:92:e1:f9:f3:
5c:83:73:3d:28:9c:3e:b4:06:49:23:fe:b1:79:60:d7:84:14:
c9:5b:ac:d3:f5:8b:d5:32:25:b0:27:e5:bc:5c:9c:bc:50:88:
fa:96:e5:81:bb:5d:c1:55:82:fe:fc:ef:fa:75:2d:eb:52:3f:
92:de:e6:ce:21:9a:58:9b:26:9b:b9:40:7d:61:cf:ec:78:ca:
76:95:01:32:93:09:aa:ee:22:e2:35:cc:4b:12:de:7c:c7:68:
ae:03:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:33 2026 by rpki-client