Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: PLqQ2Zg0yul+y8bcyVxFFMSukiSJCgs2WsEOEdrGF6k=
Subject key identifier: 37:0F:E4:D9:3B:85:15:10:8D:64:84:7B:4B:A2:7A:BA:67:E2:0F:31
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 019D27DF73CA9283166F0011938D50478630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0DAA
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: nPomhj2ExMUaCqvWTqM0XR9oCmchDQV+E4qGZxUGRuY=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:73:ca:92:83:16:6f:00:11:93:8d:50:47:86:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=370fe4d93b8515108d64847b4ba27aba67e20f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:dd:67:3c:0f:94:37:db:67:87:1b:79:c9:
a7:e6:8a:df:69:63:2f:1a:4c:59:fb:ad:d4:74:9b:
03:09:fa:22:f7:4b:76:6b:ad:9b:da:80:20:b4:cf:
2f:62:93:6b:a6:9f:69:0a:ee:82:51:41:9c:83:f6:
24:74:ec:96:87:9b:da:ca:6d:3e:8e:0a:23:2e:e1:
a8:31:87:76:c1:c8:75:da:36:52:fa:33:7c:45:c5:
fd:27:66:cc:43:ad:db:7a:de:ba:a4:25:64:1a:f2:
46:95:fa:04:4b:65:c4:d7:ce:0e:0d:89:c5:60:e1:
84:c3:fb:c0:d0:44:26:a3:cd:ba:b6:70:88:cd:4f:
72:af:4a:b8:10:24:5e:0b:95:61:c3:b8:ee:c9:20:
16:b4:d6:0f:7e:f8:82:30:4f:78:56:2d:2c:64:7a:
45:52:b4:d1:ce:97:5c:d2:4f:3f:ac:e6:5d:be:5e:
5d:0b:c1:e7:a8:15:d1:38:91:21:1c:44:e0:08:89:
38:49:10:36:47:12:7d:36:97:64:bf:e1:42:02:b9:
8c:4a:e9:f8:75:03:26:57:82:cc:4c:20:cb:a7:4f:
80:f0:45:ab:af:06:bf:e7:f8:83:74:af:d0:c1:76:
07:1d:f1:3e:73:34:b9:2c:a3:2b:8a:60:d1:af:93:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:E4:D9:3B:85:15:10:8D:64:84:7B:4B:A2:7A:BA:67:E2:0F:31
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7d:be:05:57:f2:31:b5:9a:14:54:c7:42:bb:62:de:16:00:
3c:73:4d:81:75:dd:f8:36:41:5d:ba:fb:28:0d:37:dc:33:ee:
d4:c7:ac:23:97:3e:88:59:e5:1d:bb:6b:09:47:9f:19:b6:83:
1d:5a:24:38:1d:10:4f:9c:41:86:30:79:ed:50:1f:67:f6:4e:
57:5e:61:45:e6:c5:a9:ef:3e:76:88:e6:69:40:1d:18:61:5b:
7e:4b:bd:65:30:4d:28:1f:a2:c9:c2:bd:54:ca:d6:aa:b4:b3:
ed:9c:c3:d1:da:06:e2:66:9c:80:a5:30:ac:5e:18:53:d4:b2:
71:90:85:18:9e:be:89:22:d3:22:6a:25:99:b7:68:97:eb:11:
5f:c9:52:23:3f:21:0c:68:5a:aa:be:e6:d8:e8:ab:9b:c0:a0:
0b:3e:ba:b5:0a:c3:a3:4a:c6:b6:02:05:f5:1a:0b:f6:5d:f7:
c0:d6:04:4c:21:60:9a:e1:d5:94:fb:0d:c0:d3:99:69:cc:fb:
b0:14:86:c7:7b:68:3f:aa:fb:27:a0:af:df:c9:4e:fd:df:3e:
7a:f5:a6:9b:c3:aa:34:51:8e:d5:f9:94:7b:1e:15:32:9d:c8:
f1:26:63:e4:fb:86:b4:40:6a:05:88:45:19:fd:ab:f7:ce:06:
74:2d:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:06 2026 by rpki-client