Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: kHB4GnkWuvasdYhUUqsZkfdEYI72beVl64uFtGHrgN4=
Subject key identifier: BB:49:40:8D:96:96:E0:91:C5:0D:7B:79:C6:B8:E0:7F:87:09:C4:63
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 019D281692D94C5AB888E55C0348D3E0ED55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 0B92
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: JbHmrg1xK7tZtoKGSektRtH3URWZrDWUGfvDaIR0LPg=)
2: riD84npooDzOqhlvH7nf9Aj294A.roa (hash: O+rbEotKGudbvk9Gq/WMzzdZufBN90ky0PyB//XXeaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:92:d9:4c:5a:b8:88:e5:5c:03:48:d3:e0:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=bb49408d9696e091c50d7b79c6b8e07f8709c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:6d:7a:cd:4f:c7:43:21:7e:7c:f5:7d:c8:
b5:d8:b7:8e:99:9c:b5:29:37:04:3b:a4:45:f0:4d:
71:01:c7:2e:b7:c0:83:5b:d1:40:d1:1c:e1:d2:69:
db:ae:d8:3d:e4:2c:18:37:bf:83:0d:c3:f5:39:cb:
e5:d7:c5:32:93:2d:0e:8e:e6:25:15:c2:86:83:c8:
b9:9d:f1:e3:1d:9f:99:04:5e:fe:99:24:8f:23:cb:
d1:67:be:a4:c4:0f:f3:44:6d:2d:ea:ce:14:a9:0f:
8e:43:d3:7b:d2:b0:c2:6b:1b:47:bf:5e:c8:62:86:
74:57:70:e7:10:9e:55:19:bc:0c:47:6d:03:2e:16:
e8:ad:42:bd:66:f4:3e:69:2e:93:8e:36:17:f4:8b:
95:23:26:7b:87:39:cd:40:1c:9b:37:bd:48:d3:e0:
cc:0f:3f:cf:6f:e9:b5:38:9f:fe:10:ec:86:2f:06:
4f:f1:15:2e:18:f2:ed:95:8d:a1:56:7f:46:c8:fd:
85:85:60:61:23:dc:c8:ef:7e:fb:18:6f:4a:c9:ea:
50:01:e1:cb:cf:29:2a:cb:2e:18:a1:58:84:34:db:
62:5e:82:e4:52:27:68:61:1e:2c:db:25:2c:69:7d:
43:e3:e2:72:80:19:6b:8b:a4:70:19:ed:b3:6c:88:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:40:8D:96:96:E0:91:C5:0D:7B:79:C6:B8:E0:7F:87:09:C4:63
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:c8:8e:f1:f0:c1:2b:0a:87:5a:7a:a8:bc:6a:d9:36:28:
7d:1b:20:86:84:28:39:f0:ac:fc:4e:a5:b7:7b:d5:7d:44:81:
73:f5:b6:bb:c5:9d:61:37:a4:df:4a:48:f7:ce:a1:44:8e:42:
2a:41:66:20:e0:1e:7d:6e:5c:5c:7a:9b:93:6e:3d:a5:92:fc:
48:f5:b4:c6:28:9b:3d:e7:0e:17:e3:43:f5:45:3e:a1:03:65:
bd:99:4d:4c:96:69:e9:33:25:06:0d:eb:2a:d3:5e:01:86:d8:
ec:0b:f6:53:99:ab:f2:23:2a:9b:a7:e1:1d:c5:a4:97:8f:da:
5b:8d:83:09:f8:94:f0:4b:3b:ed:52:53:5b:5b:0c:64:b7:f2:
2a:4c:a7:06:27:1e:f1:b1:bc:0a:48:09:e5:e6:43:21:0b:db:
84:e4:34:05:07:2d:4c:1e:36:ef:b0:da:11:ad:09:75:10:ed:
fb:d8:1f:32:cf:f9:4a:4b:bd:65:25:05:88:d4:06:6b:72:fd:
ba:75:db:ee:e5:db:eb:85:97:c6:03:3e:41:b2:d8:d9:03:81:
58:b9:01:21:88:57:27:6d:6d:50:f6:85:2a:18:f3:4d:28:8c:
7e:42:68:50:56:42:8c:42:12:ee:a0:15:e3:46:fc:1a:00:6c:
e8:1e:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:35 2026 by rpki-client