Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: SoAhIOsvNJ2YuWCp9rf3yttr/cErTVGubKlordbVFSo=
Subject key identifier: B5:9A:97:9C:AD:80:FC:E4:7A:21:CA:9F:57:10:F2:04:2D:CD:8A:20
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 019D98F46A1B7CF498ACA495CCF70DDA3FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 06CD
Signing time: Fri 17 Apr 2026 01:00:47 +0000
Manifest this update: Fri 17 Apr 2026 01:00:47 +0000
Manifest next update: Sat 18 Apr 2026 01:00:47 +0000
Files and hashes: 1: j8yGFu1k6_cogtT2LrDEqPHQJXU.roa (hash: 5Bbq3oVj4UwDrk3sxxzhNCBHybTGlRHYvfkfCXUPA9E=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: vxZV64I9ozw8MDTvnvbLpq6GhF0B4Rj8U72+aZCnmeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6a:1b:7c:f4:98:ac:a4:95:cc:f7:0d:da:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Apr 17 01:00:47 2026 GMT
Not After : Apr 18 01:00:47 2026 GMT
Subject: CN=b59a979cad80fce47a21ca9f5710f2042dcd8a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:7f:72:e9:a5:f9:41:81:8a:85:5a:fd:02:
94:65:ae:fd:c8:0a:e6:99:1f:16:46:b0:42:fe:71:
6a:49:e6:78:c6:d3:93:83:16:ec:dc:47:d1:4a:ab:
96:a0:1a:75:98:a9:53:f4:6f:37:06:90:6f:2b:82:
e1:ae:ab:36:f0:3e:84:77:c4:ce:31:8c:58:97:a1:
ec:45:94:f6:d4:48:00:d6:88:e4:25:f0:f1:fd:4f:
c9:0c:df:2e:2b:22:4a:70:10:bc:40:82:bb:46:52:
7b:4d:22:0f:70:5e:15:0b:75:6a:63:5a:8d:0b:b6:
d7:fb:a5:0d:6c:3c:c5:c4:4c:03:fd:63:91:bd:d2:
5f:c1:14:d8:6d:10:aa:ed:73:8a:5b:ab:32:a6:d3:
b6:0f:b7:99:5a:ea:15:2a:27:d9:89:e1:db:57:90:
1c:61:33:94:2b:2f:cf:52:7b:d3:e7:5e:c4:bf:20:
bf:f6:a0:35:01:33:ea:54:da:5c:2b:c1:d8:41:96:
77:73:cb:42:95:50:0a:c6:25:f5:29:2c:e5:89:f9:
71:09:d5:67:f9:dc:37:9e:8f:13:2c:77:b4:cc:96:
3c:cf:e5:d8:a9:2a:28:9b:a7:5d:0c:4c:07:b3:56:
cd:3a:3d:4a:c8:68:a5:6f:2e:41:87:92:3e:d5:ed:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:97:9C:AD:80:FC:E4:7A:21:CA:9F:57:10:F2:04:2D:CD:8A:20
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:67:24:4d:40:87:99:27:fc:9f:63:17:a3:c0:ea:06:b0:6d:
2d:34:2c:c3:06:f8:c4:89:73:56:ab:1c:5d:51:14:a0:11:2f:
21:e2:04:06:0f:cf:e9:95:80:28:bb:46:f0:ce:f6:df:eb:65:
d4:7f:f9:8e:6b:7f:a6:fc:24:c2:d7:3f:db:ed:ef:48:bf:c3:
f9:6e:fc:ec:63:75:05:ec:f8:fc:ff:0b:53:3e:8b:3f:6d:c5:
dd:b5:67:4f:2b:a9:7b:26:45:95:36:0b:3b:f7:f0:82:be:2b:
33:6a:83:17:fc:3f:b2:a0:fc:c9:0c:c9:24:a7:36:36:99:90:
88:01:28:6c:09:8f:f5:4d:4d:63:b4:fe:97:3c:86:6d:e2:25:
a2:4f:14:ae:97:8a:da:ab:f6:51:06:f3:e8:6f:76:fc:a1:a3:
a4:73:c0:e3:59:8a:11:64:42:39:2d:dd:b7:1f:cc:28:2f:07:
2d:79:6e:a7:c7:64:16:aa:20:08:d9:24:5f:6e:84:e9:21:43:
d1:e7:40:43:fd:ef:ef:e6:f4:13:f2:a2:c1:eb:7a:44:e8:65:
e0:b8:ce:09:03:11:96:d4:75:49:80:d5:d1:64:90:6e:02:e0:
41:14:95:08:bb:70:a1:0d:da:b7:7b:8f:b5:c2:3c:45:7c:49:
51:4a:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:32 2026 by rpki-client