Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: ccVdmFDPWnmZUo/qzHPnw7QFPr/rP/sD/3ew8FSiVZc=
Subject key identifier: CB:37:08:01:04:A1:05:F9:9E:0E:31:AB:5E:95:26:EE:E0:9C:9E:7F
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019D2470F22DD086C7651243FCCB6EEDE828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 10:01:14 +0000
Manifest this update: Wed 25 Mar 2026 10:01:14 +0000
Manifest next update: Thu 26 Mar 2026 10:01:14 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 5UCSolBSwjxIs0kne55CZV6L5RjAIuuBgjteNbqisd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:f2:2d:d0:86:c7:65:12:43:fc:cb:6e:ed:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Mar 25 10:01:14 2026 GMT
Not After : Mar 26 10:01:14 2026 GMT
Subject: CN=cb37080104a105f99e0e31ab5e9526eee09c9e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:69:ec:c4:e2:41:5e:5d:48:0f:fd:f5:37:
a5:75:5e:e7:80:21:0b:db:27:c9:b2:91:11:4b:ca:
6b:1b:ce:7d:33:37:a3:27:16:98:5d:44:14:8b:06:
b0:c6:dc:07:dc:63:73:2f:88:08:c0:f4:75:f6:ab:
fa:14:06:36:19:5c:61:bc:90:2d:fe:1b:3a:74:a6:
88:d4:e8:6e:d5:d2:c9:da:36:4a:60:e2:56:c0:b1:
d2:c7:32:75:2f:7b:60:b1:ef:44:a9:05:e8:54:be:
37:d7:fb:15:dc:9c:70:f6:3f:6e:ee:7e:22:29:93:
81:0d:36:6c:b4:8f:5f:86:5a:9a:dd:f3:9c:36:3f:
70:dd:ce:a7:f5:86:2e:13:55:22:31:c6:5b:b5:4b:
e9:9c:4b:76:4d:74:81:b4:cf:94:54:e8:e5:20:ba:
64:3b:ca:03:3b:d8:fd:99:b4:fc:30:7b:99:fc:66:
68:1d:f7:9a:2b:3a:81:c7:44:90:ba:62:c7:45:3d:
ac:0d:35:e0:01:69:90:45:97:b7:74:19:a6:5c:24:
cd:40:be:01:94:d0:81:14:2d:26:9a:29:f6:0d:54:
44:b2:fe:a9:6c:82:fc:25:bd:44:09:bb:7b:b4:02:
68:ce:19:4a:e2:aa:b6:d7:87:50:f4:02:b1:57:62:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:08:01:04:A1:05:F9:9E:0E:31:AB:5E:95:26:EE:E0:9C:9E:7F
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4b:c9:c6:8e:42:7e:f9:7c:83:42:5f:61:9a:8c:14:df:5f:
27:23:20:92:a8:13:32:e4:8d:eb:75:f2:9e:35:02:51:f8:ba:
6a:ae:5f:c0:48:ad:35:ce:c7:eb:30:b3:93:54:05:e1:eb:97:
9e:07:28:19:08:90:b2:19:29:f7:22:b2:6d:6d:f9:48:66:e3:
52:1c:39:31:a7:e7:a4:d4:4c:64:85:b8:c4:63:8e:bf:73:33:
4a:c7:4b:59:4e:3e:3e:ff:00:39:1f:27:b7:cc:9e:1a:ba:8c:
83:3e:9e:66:f8:1f:26:26:f3:cd:f9:8a:97:ba:81:55:b0:dc:
c3:31:55:6d:12:34:c7:2a:38:34:43:5d:c3:57:a9:ed:4e:7a:
50:b0:69:d7:af:b9:a7:27:be:df:1d:be:01:f3:14:e0:9d:cf:
50:fc:5b:54:57:11:6d:36:bf:1d:1c:80:25:86:f9:41:6b:2a:
47:3e:12:51:b5:47:c5:56:a5:2c:de:1c:d3:69:04:d5:99:09:
51:64:98:36:f1:ae:ab:66:b1:28:45:fe:1c:d1:f7:6f:49:3b:
b4:5a:66:85:c0:97:c8:ff:72:22:d7:fd:b1:f3:59:04:85:61:
99:1c:c5:89:d1:a5:be:8b:95:2c:e9:90:73:0c:22:ad:cb:df:
f6:c7:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:44 2026 by rpki-client