Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: BA5p827j0+H/xIUIj6NmoPUcEy0xB1jgTwNn8qAWMlQ=
Subject key identifier: 87:EE:13:2E:5E:49:42:86:99:E9:52:18:16:A8:D2:C1:1E:D1:21:06
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 019D292992B52CD60E8894DD9DA3652000B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0AF1
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: _rghgGhHIYbLY2yOEoA9mmW7wqg.roa (hash: LafLigZh1QXUn5FQibqQ6Xl17st+BespqipLbfL+dgY=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: H/wmtJEfAY5dNF+w0HIS5vvDAGayMAXaEEv5eGCQmY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:92:b5:2c:d6:0e:88:94:dd:9d:a3:65:20:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=87ee132e5e49428699e9521816a8d2c11ed12106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:be:e3:a9:94:33:0c:40:4f:97:12:50:cb:
d7:70:34:fb:be:a3:52:a7:3b:16:11:36:1e:47:9f:
fc:8f:8a:7d:eb:e9:b3:c5:de:30:c3:9d:6a:30:94:
28:b1:56:6e:80:28:0b:a3:2f:96:02:35:72:a1:2c:
c0:60:03:de:df:ae:26:aa:42:e1:90:ef:ec:d5:14:
6a:22:70:28:77:05:f7:d9:63:1a:04:d4:ca:2a:69:
b3:02:72:ca:de:5c:9c:01:6d:18:ef:cb:fa:e1:1d:
aa:90:0d:b3:e4:b9:c8:e5:27:54:94:2e:00:a8:09:
8c:8f:2b:f5:e4:81:69:7e:6c:8a:2d:dd:e1:71:54:
d7:d2:1a:cd:d1:3a:c8:2e:94:df:9d:ae:4a:59:3a:
fa:35:f3:81:96:c7:31:ad:c7:e2:da:5f:a8:17:37:
16:fd:03:55:4c:12:25:85:ad:c6:bf:8b:60:ae:00:
7d:ce:58:59:94:ab:76:57:62:8f:c1:11:cb:07:1b:
4c:11:56:a2:38:e8:5c:4f:c1:ac:44:80:2c:d0:d8:
c1:a9:72:f7:8b:63:bb:33:be:2d:3e:ec:1c:f9:f4:
e5:c4:d6:67:3f:84:ad:8c:7b:c8:1c:56:49:09:53:
64:2e:19:5c:80:32:06:1e:14:e5:00:e6:12:62:75:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:13:2E:5E:49:42:86:99:E9:52:18:16:A8:D2:C1:1E:D1:21:06
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c3:cb:b1:0b:cf:b0:bd:aa:a3:0d:26:f1:dd:01:35:dd:93:
4c:31:28:6d:a0:73:c6:67:86:14:69:27:16:d2:49:b3:8f:19:
62:c6:d7:83:c6:ff:66:f0:0e:26:49:1e:e1:d5:8b:85:bc:eb:
f8:7c:d7:73:92:37:23:67:bf:dc:d1:f6:bd:90:c5:0b:a4:f0:
0e:df:e3:38:8b:0e:4d:a3:60:70:0b:13:e1:62:5e:be:e7:df:
83:86:50:1d:0d:80:9b:6a:88:77:60:53:22:8f:84:af:42:92:
9b:44:22:3a:9d:fd:95:23:3f:b4:cb:1a:f0:56:a0:4c:70:33:
67:8c:12:e2:2f:62:af:f0:61:23:70:d0:4a:ca:4c:61:13:fe:
f2:76:ec:b5:8a:83:c2:08:35:cb:28:00:2c:69:27:07:f4:93:
fe:de:71:0d:f8:6a:b4:c4:d1:4d:31:96:e1:53:08:45:87:b6:
cb:e7:1f:24:db:3a:c1:e1:42:5d:fa:7d:22:b0:7c:04:01:f4:
79:8f:40:f6:a3:2d:e0:39:db:b6:d9:7c:1c:1c:fb:a2:ec:77:
d5:bf:1d:fa:73:34:d0:92:dc:27:01:68:5b:d2:cc:85:c8:ef:
eb:f0:f7:3a:cc:3b:88:ba:d9:9e:f0:41:ba:fb:bd:36:e5:7c:
9f:fe:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:30 2026 by rpki-client