Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: h1ro2+46c1qLAysaWcbV47aRgYF6o1/IIdQBCkx9K78=
Subject key identifier: 89:10:54:CE:D6:2D:D9:B1:6B:AC:AD:8B:CA:FF:29:D6:DB:5A:EC:F4
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 019D27A8BEA456CE2DD074C52D4EF57F040F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 0242
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa (hash: gDgNzdOYz3KjBH95RxNa3YAdnlDk82nruMEoI3Ezi38=)
2: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: 3g1Ca2T/b8uJPfqxiEzVh9b7YkvqWvU+v3kx0Lp1t2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:be:a4:56:ce:2d:d0:74:c5:2d:4e:f5:7f:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=891054ced62dd9b16bacad8bcaff29d6db5aecf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:24:db:e3:87:b6:43:b9:a7:2c:f0:d1:ab:
0b:c6:e2:6c:f9:a0:47:2c:d7:3e:05:a5:93:40:6a:
e6:ce:ba:1c:b3:16:9c:36:ab:33:71:53:8d:ed:13:
d5:00:72:ef:f8:1c:05:d9:b3:9b:86:7b:50:8e:e2:
18:5a:f7:91:ca:86:3a:cc:b8:3c:3a:ce:55:ff:08:
f1:ed:54:c5:70:ea:b6:be:10:98:2e:23:a8:db:fc:
22:34:eb:f9:97:b8:19:1a:0b:d8:51:0c:98:82:a5:
f9:5e:1b:a0:af:25:66:a9:c4:b3:da:03:a9:48:15:
56:9d:8e:54:50:08:0d:b0:5a:ad:ec:3d:b3:e3:5e:
a5:07:de:3d:21:d0:aa:37:83:ff:9c:97:17:e4:68:
91:20:14:5d:fa:43:cc:22:00:c3:00:8e:e6:97:a4:
a7:c9:4f:6a:83:02:79:a6:ba:2e:4f:47:ef:c5:f4:
61:92:2d:49:3c:45:cb:cd:60:61:6b:46:9d:61:e2:
dd:e8:ab:e7:61:12:fc:96:a7:1e:2c:d0:3d:7f:55:
f6:6e:0d:9a:45:95:90:c4:eb:8a:a2:c0:d5:c7:e7:
bd:33:d1:fe:09:42:7e:b9:65:33:44:40:c4:0f:e2:
04:02:0b:4e:ff:20:4b:87:4b:61:7a:7a:75:51:41:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:54:CE:D6:2D:D9:B1:6B:AC:AD:8B:CA:FF:29:D6:DB:5A:EC:F4
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:c6:f2:d3:11:6e:ec:ed:73:29:49:7b:35:5a:a0:08:3b:
28:78:e2:15:ac:ee:a8:dd:95:5e:e7:ab:58:f0:56:bb:62:ce:
f5:93:32:e6:3f:71:18:6c:ec:3a:ce:de:8e:b8:8e:f1:b8:5a:
6a:a9:b3:be:d1:cc:8f:bf:77:99:0c:9a:58:f4:46:8c:64:40:
c8:74:bf:a2:4a:2b:e4:d3:0b:38:d0:69:9d:ef:8a:87:eb:80:
0e:40:ff:b4:5f:84:00:d1:72:54:52:97:cd:d6:c5:c6:0d:bc:
89:aa:e2:a4:40:2c:30:85:b0:81:f1:0d:d0:50:20:0f:34:ef:
cc:d3:92:8f:4a:3f:14:19:e3:79:5d:fd:8a:fb:4b:ee:82:c8:
a5:a3:04:78:14:90:88:c7:f7:75:02:86:0f:57:9e:75:82:b9:
71:ba:a6:96:e2:a9:f3:cb:51:1d:2f:3a:4b:89:26:f4:91:7a:
c4:34:36:7d:53:1f:32:1b:8b:da:a8:cd:21:70:ed:f4:8a:3e:
80:46:a7:21:5d:d0:be:e5:9d:9b:06:e4:e3:11:9b:3e:42:ce:
89:dc:53:45:f0:f6:76:86:f6:75:e0:2c:76:5e:76:b2:a1:99:
8f:6c:87:41:0d:9b:b2:fd:39:94:9e:35:fa:dc:0b:0e:51:01:
67:eb:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:16 2026 by rpki-client