Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: XCpydQAqBsi8h3m6XMRCWQhjolqVga7ceGixmcwYcmU=
Subject key identifier: C6:2D:E1:3F:1A:A5:67:CB:D2:D6:11:4E:3B:A4:AA:1D:68:60:FD:1F
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019D333EDE106767B6A9486D8DD1F535BCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 16FC
Signing time: Sat 28 Mar 2026 07:00:51 +0000
Manifest this update: Sat 28 Mar 2026 07:00:51 +0000
Manifest next update: Sun 29 Mar 2026 07:00:51 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: IRk86V7T2LUj1QkEdAMXrVUm0xUPpO5853v30sLwWa4=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:de:10:67:67:b6:a9:48:6d:8d:d1:f5:35:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Mar 28 07:00:51 2026 GMT
Not After : Mar 29 07:00:51 2026 GMT
Subject: CN=c62de13f1aa567cbd2d6114e3ba4aa1d6860fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:e6:f9:75:76:bb:e8:49:a3:b3:b9:8a:21:
0c:ec:0f:c3:20:ab:b7:a0:ff:1b:05:10:29:86:ee:
f3:51:83:ec:6e:5a:f8:61:cf:62:32:ce:78:73:3c:
d4:4d:9a:5e:18:ff:04:2b:68:d6:e2:0b:86:f1:54:
39:08:38:81:09:4d:93:e2:6e:d0:ea:2c:56:43:37:
2f:8c:45:a1:51:0b:ca:85:19:4c:30:18:fc:ea:4c:
69:42:b7:c4:cc:03:76:ae:c2:2f:93:b1:3e:5d:69:
e5:c7:d5:3f:9f:1b:77:43:36:39:69:9a:82:7f:d5:
5d:6c:58:25:2c:9b:64:03:a5:55:df:a1:0e:8c:95:
7c:fe:bb:1e:8f:c7:91:78:2c:ac:a3:a0:38:6f:22:
0b:72:bc:9d:e5:87:cc:4e:c9:13:d1:e5:77:99:d1:
b5:e9:45:a2:ed:c9:1d:74:63:3e:a9:37:1e:d9:1c:
c6:50:54:af:fc:5d:23:39:02:a7:5d:9a:72:48:a5:
b1:74:78:ec:77:d9:6b:a6:da:55:16:90:3d:22:b5:
37:9d:bc:4c:e0:46:23:12:8c:5d:6d:39:45:30:b7:
50:5b:2e:e5:d9:54:e9:c0:2c:f2:d2:bf:e9:f5:16:
37:9b:04:df:08:b4:05:61:40:e1:e2:c0:89:7c:89:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2D:E1:3F:1A:A5:67:CB:D2:D6:11:4E:3B:A4:AA:1D:68:60:FD:1F
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2c:81:69:90:9a:66:cc:5d:1b:dc:e1:04:23:7e:b5:56:38:
31:63:08:fd:3a:90:e5:30:d5:ce:28:47:dd:81:9f:4d:7f:a2:
17:d6:61:12:2c:3e:44:0c:32:41:68:1c:69:9c:61:59:0d:69:
1c:cc:86:12:e5:ca:f5:80:69:be:25:e4:37:22:e4:8e:0f:2f:
6d:04:e2:c1:38:de:59:ea:f6:0e:9c:ce:07:db:04:ce:ab:ac:
a4:bb:0a:b7:59:bc:1f:7e:e8:e0:ea:fd:ff:71:06:c1:56:b4:
21:96:33:30:59:cc:2a:a7:c8:c2:92:21:4c:db:d8:ca:b9:6e:
4f:61:fe:1f:0d:73:f9:d4:e2:0b:92:f4:90:cf:18:c6:b0:52:
3c:34:38:0d:df:f9:77:c7:1a:2e:0f:df:23:7d:e1:57:1a:49:
27:2d:c9:ec:4f:b6:06:b5:9a:87:ee:43:b8:2b:45:a6:df:94:
a3:25:13:7e:94:c8:fd:7b:aa:0a:5c:3b:b7:d2:f9:35:d4:97:
a0:d3:a6:3f:c8:17:a1:c1:cc:29:8b:20:64:89:43:47:77:17:
2a:26:39:5d:90:45:3d:31:6e:49:c6:ce:97:f9:f5:50:83:68:
30:9b:90:28:88:b4:86:90:bc:63:9a:5a:35:fb:49:2c:e4:c0:
da:2d:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:09 2026 by rpki-client