Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: pG0wDsHfTGeaNYmtFSpFIZ1L8MWizyIQjM5FcKNABME=
Subject key identifier: 0B:EA:6A:31:3C:30:EB:8C:1D:D5:64:A5:2B:2D:32:D6:9A:E6:22:E2
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019D27E06DF8B6EA2FBDEF5DBDB729BA4493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0755
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: GItjOEgsLOXljAcMTWXv+SOPvNWSXzOPRH6ydzmp7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6d:f8:b6:ea:2f:bd:ef:5d:bd:b7:29:ba:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=0bea6a313c30eb8c1dd564a52b2d32d69ae622e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:84:50:66:26:27:f1:13:a5:b5:7c:5b:81:
ea:5f:dd:56:fd:57:6c:01:98:1a:cd:60:78:21:19:
36:6b:07:69:67:c6:9d:3c:57:83:0f:38:9a:f3:11:
cc:84:3d:a2:71:2c:28:33:c9:a5:2c:a9:a2:4e:31:
d8:ff:82:aa:19:2f:04:a9:b4:f8:92:9b:12:e0:18:
dd:e5:98:58:00:d3:e1:b9:3f:83:46:22:a9:a4:1e:
2e:62:66:16:ed:f8:bc:74:5a:a2:9a:2b:0f:fc:4d:
e5:1e:3b:66:31:e3:35:6c:82:c2:32:8c:04:41:1a:
a8:18:6f:ad:82:fb:a8:60:95:2e:4d:9b:ae:54:08:
ef:8d:0d:61:f0:17:7e:4a:e1:cd:9c:a6:e2:0c:ed:
ea:65:a3:f4:ee:bb:7f:ce:7e:8f:2f:1c:e2:d5:c1:
40:f1:3f:ca:3a:d4:4c:4e:b4:f1:0c:4e:e4:a9:29:
92:9c:b1:1d:d4:02:23:63:0a:2d:7b:6e:25:72:62:
fc:24:30:f5:7e:49:81:52:5d:07:00:4f:4d:4f:6d:
8e:c5:87:ee:22:ef:06:56:16:f9:5d:2d:d5:92:de:
c3:a3:88:0a:db:e4:3f:ea:27:44:06:b8:5c:d4:9e:
9c:6e:5f:2a:e8:bf:3e:0c:fd:6a:59:bc:f9:f1:a1:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:6A:31:3C:30:EB:8C:1D:D5:64:A5:2B:2D:32:D6:9A:E6:22:E2
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c8:30:c1:cd:bd:ab:90:38:03:2d:d0:33:ab:6a:eb:13:43:
4c:0e:fb:a7:0e:e7:88:96:8a:25:f2:74:aa:d0:6b:7c:83:32:
5a:19:76:1f:67:f8:60:d8:88:2e:34:e1:77:37:00:6b:5f:37:
e1:c0:52:65:d8:da:92:5c:30:97:f2:a0:55:64:58:d2:80:61:
6b:7e:f1:cc:c8:82:ec:73:c2:9f:bc:11:47:3f:1d:cc:03:f5:
39:5d:99:9a:32:be:b9:39:7c:ca:35:f3:2d:d6:93:b1:b7:41:
49:31:3e:86:26:59:99:bb:70:24:88:16:bf:19:a3:3b:de:34:
da:9c:5f:08:7b:45:77:fa:a1:83:12:a4:d8:ca:b5:ba:2a:05:
88:66:9b:a5:37:97:5d:cc:5b:45:a5:4e:94:0d:82:ed:b9:c6:
5b:1d:e9:82:29:6f:a4:72:76:b8:dd:f6:56:04:e9:dd:f3:bb:
ba:c0:2f:bd:8e:c7:79:1b:15:6e:1d:b4:e4:90:a2:55:18:f9:
ec:94:a5:21:d6:4b:23:4e:81:bf:f2:99:c7:4c:a2:e6:e8:6b:
fd:9f:ef:84:5d:ef:38:d0:8e:cd:18:8d:93:54:c6:ec:aa:f2:
d9:34:ca:a1:1f:76:b4:86:1b:6d:cc:e4:20:a2:87:db:a9:28:
e2:34:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:00 2026 by rpki-client