Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: MokfvBcYO0wGeSVpzlVsD8LgnFq/VhA+oLkXSKHmnDQ=
Subject key identifier: 30:09:71:C5:A7:53:17:56:24:B2:DA:23:01:37:62:88:CC:8D:E0:9B
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019D2960DCD4475B62833889F898D28BD6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa (hash: ceH7xNtIASBG/OmWLD8LM3MYEGRNf6JiHbcW322GG3k=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: tjGtrFV49CVMWf3nrtl0rwpttnRmi9VL1S/aS4tgb5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:dc:d4:47:5b:62:83:38:89:f8:98:d2:8b:d6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=300971c5a753175624b2da2301376288cc8de09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:73:5a:82:67:d5:7a:06:c2:71:7b:b4:ac:
7c:3e:13:81:0e:c4:d8:e1:ca:97:34:8b:a4:69:1d:
3f:cf:42:eb:5e:74:87:9b:7e:ac:a5:8e:cf:ee:be:
a5:cf:cc:bc:ee:94:ba:aa:0b:3d:a5:69:29:47:b8:
46:30:3e:ac:9e:51:29:cd:89:8a:0f:40:03:df:2d:
62:8f:f7:c8:62:17:33:d8:d9:df:e9:02:ec:06:38:
db:de:25:db:91:5b:26:fd:eb:c3:17:e0:86:eb:08:
a2:91:be:a2:c0:60:6b:18:72:c8:92:70:47:87:fd:
7e:9e:ef:f3:38:96:fe:61:76:3a:71:ba:3e:5b:2b:
1b:11:54:34:fe:0b:57:48:7d:a0:0b:df:04:87:b1:
38:c3:cd:a3:7d:31:c3:79:2f:87:e8:95:69:f3:e7:
1a:13:47:a7:8e:bf:c4:ec:d9:75:12:e9:48:0f:70:
b3:5f:90:f1:2f:ae:25:92:ca:e2:fe:9b:6d:68:d8:
03:30:45:67:5f:e0:4b:01:35:7c:21:f5:cc:6a:c0:
1b:b9:d3:44:f0:77:0d:fc:72:ff:96:46:93:4e:04:
3e:2b:c7:d5:b5:96:a8:68:d6:88:76:8f:23:51:80:
cf:56:f7:9f:d8:54:e8:51:b6:21:96:4c:2b:f5:04:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:71:C5:A7:53:17:56:24:B2:DA:23:01:37:62:88:CC:8D:E0:9B
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:5c:52:e2:9f:0d:ca:a4:fe:41:c7:3f:c7:f4:75:ad:37:
e1:97:d6:c5:ee:04:ed:b4:e2:51:1e:a5:eb:79:fc:da:4b:8a:
2f:03:28:85:a4:03:55:d4:8e:2c:4e:a8:dd:ba:44:8a:8d:84:
3c:d4:2b:e9:48:94:49:c4:29:30:c1:99:b5:31:d7:37:23:4a:
a1:d3:1e:49:8c:b0:10:ce:1a:f4:1e:fe:0d:32:31:75:0b:df:
34:e3:d2:b4:f3:75:03:48:c7:49:d6:c2:da:6a:37:b5:35:8d:
02:32:9a:cf:9b:e4:63:f4:13:ca:ec:b7:0c:90:6a:4d:94:e7:
ff:ea:98:50:0c:89:2f:43:e0:8b:c3:45:c0:0f:93:f5:aa:21:
b0:43:5b:8a:97:b7:53:ab:0d:0c:42:ec:c7:97:ae:bf:15:ab:
44:e9:21:06:a8:f7:85:04:53:15:12:dd:6a:85:6f:f2:de:d1:
6d:9c:44:2c:72:a4:ed:20:9b:87:34:90:d7:3d:44:c9:1b:e3:
b2:f6:e3:8f:63:cf:78:d2:f4:a7:63:39:5a:97:98:3a:3a:6e:
dd:20:8d:5f:a2:5a:51:53:40:4d:cb:ed:0f:d9:9b:1d:33:91:
7b:05:86:c1:5d:91:68:3a:59:b7:67:72:1b:fd:79:62:03:67:
57:2c:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:16 2026 by rpki-client