Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: TNMiPxvMh/xfFxPvskWo4eniWmANOCPHA9nWgtDQFno=
Subject key identifier: 02:3E:36:02:30:12:CE:FE:CE:1B:CB:5E:30:B0:51:8C:65:D7:D7:DC
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019D273A8E1304E2EC735BAB97945E0E815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 02E0
Signing time: Wed 25 Mar 2026 23:00:41 +0000
Manifest this update: Wed 25 Mar 2026 23:00:41 +0000
Manifest next update: Thu 26 Mar 2026 23:00:41 +0000
Files and hashes: 1: Ah1zkCt41Yg3NZ4mfPJC8T6zRHQ.roa (hash: NMfgnHqRrDwsZCUvzQT+wIBkVfDVMOG4Osq0Hs4uyVU=)
2: dTPhWcmoSCJmhGreyJsPD4EE5t0.roa (hash: hsV4SDj2rIN1TNflJCH5NKHRDE3joBuyhtpUXGC4Fik=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: wXwrA1AcyPHdWm6K0h4RsosZ5sf2zobYeOoCK0JY/Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8e:13:04:e2:ec:73:5b:ab:97:94:5e:0e:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Mar 25 23:00:41 2026 GMT
Not After : Mar 26 23:00:41 2026 GMT
Subject: CN=023e36023012cefece1bcb5e30b0518c65d7d7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:fe:f7:94:02:2d:44:42:a7:48:4f:0a:39:
cb:fc:a5:6c:96:c9:40:35:18:bb:cf:16:80:4b:8f:
08:bf:43:da:bd:06:e9:d1:b3:ba:77:3a:d0:97:f5:
6a:f7:94:40:b2:3b:61:7d:c2:e9:96:1c:44:b0:57:
75:c2:47:1c:94:32:5f:94:11:09:3f:87:46:e2:87:
b1:ce:b1:42:5a:12:e1:f9:3e:d9:75:4f:c4:aa:89:
43:96:28:61:92:66:e1:65:1c:33:7e:c3:ba:53:42:
ab:01:3e:44:ed:db:fd:59:09:39:d6:8b:9f:e2:d0:
c8:01:71:ab:1e:04:20:6d:b4:b4:0b:cb:ce:c1:04:
c7:86:df:6d:00:c4:cc:e0:12:75:21:26:20:30:85:
42:fa:d8:b0:ac:79:e2:00:08:55:6c:2c:df:f1:42:
b6:45:7c:6e:36:60:0f:ac:29:73:63:cd:76:3c:c3:
b3:85:6b:32:bc:db:d8:90:f5:c9:42:3f:56:81:5c:
86:e7:d9:f2:ee:6c:33:cf:77:59:f6:e6:72:4e:c9:
5c:52:cd:73:43:21:b2:d5:02:d1:3a:ca:94:60:0b:
37:ca:f8:69:0a:0b:c1:04:b5:ca:ea:1c:a5:e5:f9:
38:04:5e:5c:a6:34:a2:fa:c0:aa:00:f8:38:2b:11:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:36:02:30:12:CE:FE:CE:1B:CB:5E:30:B0:51:8C:65:D7:D7:DC
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:4a:b7:65:d3:6e:c4:9e:b2:32:0c:11:55:99:cf:38:83:
52:7e:04:f5:02:9b:2e:d5:6e:ef:c2:5a:2c:5e:1a:7a:83:4b:
6c:7a:1e:ef:2c:38:7c:d6:78:7c:bb:ae:27:dc:08:e5:2a:30:
e7:a1:dc:cb:48:eb:47:b7:0e:c2:7f:05:a7:4b:ca:5a:50:fb:
7a:99:0b:62:0d:72:14:c1:5b:b8:0b:24:3e:98:cc:3a:6c:0c:
96:9a:51:f8:55:00:04:6f:29:c3:c5:04:cc:52:7f:3c:b6:1c:
b4:bd:35:35:af:93:55:16:15:dd:76:56:c0:e1:33:7b:b2:90:
9e:30:fe:92:6d:8c:98:14:88:20:ae:b9:56:e4:67:df:aa:d8:
8d:2d:87:bf:f0:b6:21:10:cd:bf:af:16:51:9d:cc:5a:d4:f2:
9d:a4:9a:c7:61:04:a9:1c:46:48:cc:5b:d1:5c:60:97:e6:b8:
fa:6c:48:81:26:e9:1c:80:52:7f:7e:8f:15:fa:8f:1d:9b:04:
66:cf:cb:13:fd:9c:2f:db:26:35:fb:0d:f3:d5:6b:6c:e2:34:
29:6e:c0:e7:b8:c2:cc:bf:28:a7:bd:d5:9c:11:01:98:0f:9d:
41:f0:05:00:ca:21:ce:06:51:13:37:fa:b3:6a:52:cf:f1:13:
0e:cd:32:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:28 2026 by rpki-client