Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
File: kljqmCx9enWV6Dphx66z12GIlww.mft (raw, json)
Hash identifier: fRsR8LjvdsFOeZLchMXOT7ex4TN5bTxiL2ZLXrDlTww=
Subject key identifier: 4C:3F:C4:D4:AD:09:5C:57:78:0F:2C:34:8E:DC:16:8D:7E:ED:CE:04
Authority key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
Certificate issuer: /CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Certificate serial: 019D2A3B56FADBCBA9B650405183638DA17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
Manifest number: 162D
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: kljqmCx9enWV6Dphx66z12GIlww.crl (hash: Nt5KIUWinSGaHd/SUKEv7a2aYUSh35hTIC19U18F9l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:56:fa:db:cb:a9:b6:50:40:51:83:63:8d:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=4c3fc4d4ad095c57780f2c348edc168d7eedce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:c2:09:0f:ab:c7:e6:ec:90:6a:f6:4b:2a:
e1:6f:9b:2f:79:47:a5:fb:d7:6c:f1:33:21:02:9a:
3d:53:e5:6b:49:fa:3f:a3:31:85:01:8c:f7:c0:88:
86:ce:0b:f7:d2:7c:12:70:57:1f:70:f9:64:7f:92:
a4:cb:43:70:47:81:fd:67:f9:96:99:2f:90:3d:a6:
e2:43:63:7c:f6:3c:86:01:2e:bc:96:ba:7c:4a:bf:
a1:f8:59:f1:43:d2:cf:fd:8e:bf:f4:21:a2:0b:94:
40:57:d4:69:ab:e0:92:0b:ba:50:f5:a8:f5:1d:b4:
21:72:bd:1d:3b:91:95:c7:4f:61:0a:22:96:c6:ac:
53:0d:bb:75:8e:86:81:b8:a0:f3:ff:ea:b7:27:01:
c8:c5:40:b1:5c:26:de:bb:ea:a5:6e:41:85:62:23:
21:a6:88:65:59:2e:c7:ac:99:4c:04:99:d0:2c:e1:
84:8f:f4:db:2f:a2:11:f2:a6:b4:44:9f:a6:60:af:
a6:5b:69:76:fa:b2:99:c5:e9:4f:57:9e:64:67:b9:
4a:fa:e6:61:14:4f:b2:77:10:76:c6:87:06:40:76:
1b:1d:b6:89:87:70:2f:e2:3f:03:b5:11:09:8b:57:
0b:a3:d4:9c:30:09:60:e5:7c:69:81:a2:bc:a2:9a:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3F:C4:D4:AD:09:5C:57:78:0F:2C:34:8E:DC:16:8D:7E:ED:CE:04
X509v3 Authority Key Identifier:
keyid:92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:6b:a6:d8:4d:41:28:d3:3b:6f:5d:e6:62:22:7f:16:cc:
f3:bb:ad:70:ca:2f:50:fc:2a:2d:04:5a:c8:72:62:db:e4:a3:
d8:1d:57:5b:3b:b3:cf:c8:ca:f0:c0:8b:6d:fe:24:66:71:62:
09:dc:b1:7d:0d:07:7a:ff:5f:c5:61:8c:c4:bc:b5:ad:5e:7d:
fe:95:a6:dc:8e:8f:70:1f:35:8b:6f:0f:83:fb:e8:8d:9b:f4:
ca:a3:d8:7e:4b:83:a7:6d:9e:34:0b:3f:63:72:b6:0d:51:e9:
fb:00:e2:31:0d:a3:02:55:1e:b7:c5:56:97:fb:a8:cd:34:87:
f2:db:8c:fb:a2:b2:fc:e4:d7:ba:59:6b:11:84:fd:52:43:20:
da:0a:f7:8d:ae:e0:b9:3f:07:bf:a9:1c:79:39:7f:c3:a8:3b:
fe:1c:de:b8:55:2b:86:3d:ee:ba:72:1f:83:ab:4c:54:7f:80:
34:13:81:91:15:31:56:45:8e:29:ef:4e:0f:3d:d6:d9:9b:7d:
c5:73:55:ee:35:cc:de:66:2d:d9:53:a7:bc:9c:ec:9b:24:32:
98:b2:00:4b:1a:07:d6:3e:25:c6:db:14:31:d3:aa:84:3b:d9:
33:ba:82:1e:7b:e5:77:60:cb:63:e9:77:08:20:30:60:ed:a0:
2f:aa:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:27 2026 by rpki-client