Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
File: kBH7CJG4_pLLZ6vSni3MhczHhkk.mft (raw, json)
Hash identifier: bE9iRYGTj5LRPkhg0JPHyxjmJA+n11dwoJZt/jbpH4U=
Subject key identifier: D2:34:C4:8F:0F:25:95:F4:ED:ED:55:5D:DF:B3:D2:64:A5:7F:4F:3A
Authority key identifier: 90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49
Certificate issuer: /CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649
Certificate serial: 019D34BF82442D53496F6C5C697A835C100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
Manifest number: 01F1
Signing time: Sat 28 Mar 2026 14:00:58 +0000
Manifest this update: Sat 28 Mar 2026 14:00:58 +0000
Manifest next update: Sun 29 Mar 2026 14:00:58 +0000
Files and hashes: 1: kBH7CJG4_pLLZ6vSni3MhczHhkk.crl (hash: 9N6k5E9kL2aCq89EDxPCrCRR+jVAy8juVsQVpI5Xvpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:82:44:2d:53:49:6f:6c:5c:69:7a:83:5c:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649
Validity
Not Before: Mar 28 14:00:58 2026 GMT
Not After : Mar 29 14:00:58 2026 GMT
Subject: CN=d234c48f0f2595f4eded555ddfb3d264a57f4f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:e7:3d:fa:30:d7:c9:38:c1:d4:c9:5e:2c:
85:81:55:20:ec:91:50:26:9c:21:d1:88:13:7b:fa:
9c:fb:6e:ab:e9:03:4a:f2:61:ef:2f:41:f4:49:72:
f0:cb:83:cf:2e:62:0d:cc:c4:3c:4e:45:f3:74:49:
4e:f6:f1:ee:f4:3f:a5:4c:85:f2:76:31:94:97:f6:
2b:2c:e8:ca:a3:c3:15:bb:bd:d1:ba:02:39:84:df:
4b:e9:25:7e:75:36:a2:14:81:7b:70:0a:62:40:7c:
1a:f9:c2:1a:9b:5d:1f:94:8f:88:e3:b2:a8:e2:a2:
0a:d3:83:21:91:9e:2f:e3:9e:e0:4b:dc:bf:f0:d7:
4b:c6:d1:ef:86:01:40:70:f5:fc:22:b1:87:04:34:
08:d5:a6:e0:0e:0c:a5:75:10:56:e3:21:c8:0e:a0:
96:b2:80:05:d4:4c:63:e9:61:d6:6a:25:5c:b7:36:
8f:b9:cf:a8:37:95:a8:00:39:24:8b:51:61:c4:e1:
73:e0:42:5d:10:e1:4f:c9:83:6e:f9:2c:eb:aa:13:
ad:f4:6c:a6:0a:f8:87:31:aa:c7:ae:9b:6c:0a:1f:
77:a6:a9:44:71:f7:f4:87:a5:55:f1:5e:34:37:28:
29:19:9a:75:58:03:73:37:60:83:19:0b:12:ab:5d:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:C4:8F:0F:25:95:F4:ED:ED:55:5D:DF:B3:D2:64:A5:7F:4F:3A
X509v3 Authority Key Identifier:
keyid:90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d3:88:77:5c:6f:30:55:58:42:f4:28:f7:2c:54:5f:45:9f:
69:01:b9:91:a5:00:13:d8:81:a3:66:6c:5e:f3:d6:ab:46:96:
81:ca:e9:d4:36:75:b4:35:9e:dc:d8:4e:53:bc:ab:74:50:47:
b7:b8:fd:29:30:fe:66:4a:1a:ff:a4:66:0a:27:ce:e8:2b:9a:
1f:39:af:78:9e:4b:78:ff:f5:1e:6d:d9:c1:18:1e:70:ad:86:
ff:39:5c:bd:d2:8a:53:48:bc:68:f1:da:9a:ad:8c:9f:83:1b:
3f:05:84:25:eb:1a:0c:b2:c0:03:88:b8:a1:86:2f:ea:65:fb:
b1:b0:69:df:85:89:a9:85:df:bf:1a:0e:50:b7:ae:02:b8:cf:
bc:38:c7:82:58:4e:4f:7c:58:c6:32:e3:55:20:d5:c2:62:67:
38:4d:15:e6:fd:58:71:bd:86:e3:5c:f9:81:56:eb:b9:77:79:
27:5c:3d:d6:c0:c8:34:68:dc:6f:64:e1:ea:e7:7b:2a:ee:ce:
44:e4:cd:49:5a:2d:2c:bf:86:63:2b:58:0b:f8:c3:56:40:ea:
82:5e:ff:cc:93:6c:3f:98:17:06:22:cf:3a:4c:64:c3:2d:60:
31:81:4b:cb:de:01:a4:57:5d:e4:13:a4:2b:40:ff:e1:0c:1f:
ed:ad:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:24 2026 by rpki-client