Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: cRuAEPLoC2tNhzVf64D7Jj10JIIwkf6utamX/kLeIZc=
Subject key identifier: D5:2A:A9:6E:B4:AE:11:97:B6:56:2B:96:8A:28:1A:69:C5:0D:CD:A1
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019D26CCBA81D723681A4CED3A3D9709F0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 91
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: wY2e6tj2sNnPESqF8KdTDGCJ4mFaRQnCdhhIrFeHi18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ba:81:d7:23:68:1a:4c:ed:3a:3d:97:09:f0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=d52aa96eb4ae1197b6562b968a281a69c50dcda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:87:bc:75:11:23:96:b7:50:23:32:b2:01:
21:bb:47:bf:a3:7f:3a:83:3e:68:f3:30:93:73:0c:
fa:cf:56:86:fd:d1:6c:58:f2:ee:2c:99:44:e0:11:
01:15:83:87:26:6b:d3:a9:65:e1:da:15:ae:a0:fb:
6e:39:08:b6:69:a6:82:21:46:96:88:8b:61:89:58:
e5:f3:7f:1e:00:c1:f3:ba:2c:c6:f2:95:c9:d4:5f:
0a:4b:b0:c2:83:e6:08:ae:8d:d1:92:cb:30:c8:b6:
83:81:c9:c1:12:74:09:06:db:d4:25:fa:80:9f:4e:
ed:44:7a:61:c9:f7:bf:21:e2:9f:4e:e0:55:4f:05:
0d:8c:57:61:e8:43:ff:ce:81:ea:5a:f7:90:fe:05:
63:d7:31:42:88:ff:c5:12:4d:d2:77:49:70:c5:c9:
66:cd:c5:5d:c5:6a:fa:2f:08:07:42:a0:7b:f5:8d:
ed:4f:f0:2f:10:fe:65:d3:b1:e9:ea:bd:73:92:fb:
3e:48:a9:1f:a2:1c:54:ca:c7:57:e9:65:a0:b3:a9:
8b:d4:2a:87:de:4d:9e:03:72:26:2f:78:49:5e:b0:
05:88:69:00:e1:45:5b:99:07:a3:a7:c2:a7:df:c8:
65:50:5a:fb:c0:6b:8d:af:90:04:25:de:d2:c2:3e:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:A9:6E:B4:AE:11:97:B6:56:2B:96:8A:28:1A:69:C5:0D:CD:A1
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:3f:07:bb:09:ed:ba:4c:71:8d:a9:f8:36:69:3e:a6:b4:
5b:ca:b6:73:5e:f4:eb:84:0e:a9:4e:f0:f4:c9:1a:1d:c1:a6:
21:11:78:f7:e2:42:03:ae:07:5b:6a:b2:f4:3d:12:ce:4b:08:
7c:75:3b:70:8b:b8:cd:85:c7:28:47:53:dd:81:e4:f4:10:07:
eb:40:76:02:89:83:94:ad:ca:17:c8:6d:e7:0b:41:30:66:bf:
0c:80:38:3d:0e:98:8b:39:07:f1:b4:21:a2:5d:f9:4d:a3:13:
57:36:11:6b:01:99:23:b8:f2:82:8e:c0:62:46:2e:be:bb:d7:
c8:97:88:42:6b:e0:11:40:7b:cd:80:a2:a3:d6:f3:78:c2:33:
9b:2d:2a:a8:be:b0:41:64:7f:0d:8f:06:cb:2c:65:76:76:e7:
74:a9:e4:d5:30:75:1f:0f:1b:1a:c8:42:fc:d4:55:bc:c2:e4:
7f:5d:e4:0d:f0:a7:76:14:40:33:45:5b:10:92:f9:1b:89:33:
5d:ea:a9:60:47:91:d0:88:d0:6b:7a:c9:7c:ef:4e:23:a3:ee:
5a:fd:8d:40:35:a6:fb:83:b7:4b:1d:f6:52:2d:c0:28:bb:49:
88:29:6f:61:8e:77:a6:bb:15:97:2e:1f:fb:f0:3a:99:d0:98:
94:d5:22:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzLqB1yNoGkztOj2XCfC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNTMzMDgxMzdiNDU1YjY1YTZjMjg5ZWIwM2M0ZDRlMGZi
NmZjZmUwHhcNMjYwMzI1MjEwMDQ0WhcNMjYwMzI2MjEwMDQ0WjAzMTEwLwYDVQQD
EyhkNTJhYTk2ZWI0YWUxMTk3YjY1NjJiOTY4YTI4MWE2OWM1MGRjZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FqHvHURI5a3UCMysgEhu0e/o386
gz5o8zCTcwz6z1aG/dFsWPLuLJlE4BEBFYOHJmvTqWXh2hWuoPtuOQi2aaaCIUaW
iIthiVjl838eAMHzuizG8pXJ1F8KS7DCg+YIro3RksswyLaDgcnBEnQJBtvUJfqA
n07tRHphyfe/IeKfTuBVTwUNjFdh6EP/zoHqWveQ/gVj1zFCiP/FEk3Sd0lwxclm
zcVdxWr6LwgHQqB79Y3tT/AvEP5l07Hp6r1zkvs+SKkfohxUysdX6WWgs6mL1CqH
3k2eA3ImL3hJXrAFiGkA4UVbmQejp8Kn38hlUFr7wGuNr5AEJd7Swj4UTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUqqW60rhGXtlYrloooGmnFDc2hMB8GA1UdIwQY
MBaAFCpTMIE3tFW2WmwonrA8TU4Ptvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgt
NzgyMjgxNTE1OTA3LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgtNzgyMjgxNTE1OTA3
LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzs/B7sJ
7bpMcY2p+DZpPqa0W8q2c17064QOqU7w9MkaHcGmIRF49+JCA64HW2qy9D0SzksI
fHU7cIu4zYXHKEdT3YHk9BAH60B2AomDlK3KF8ht5wtBMGa/DIA4PQ6YizkH8bQh
ol35TaMTVzYRawGZI7jygo7AYkYuvrvXyJeIQmvgEUB7zYCio9bzeMIzmy0qqL6w
QWR/DY8GyyxldnbndKnk1TB1Hw8bGshC/NRVvMLkf13kDfCndhRAM0VbEJL5G4kz
XeqpYEeR0IjQa3rJfO9OI6PuWv2NQDWm+4O3Sx32Ui3AKLtJiClvYY53prsVly4f
+/A6mdCYlNUixA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:31:07 2026 by rpki-client