Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: Kxfr7TQApbOv/EnVYyT5FVYuGrKHIJryNbMN7R6Y2z0=
Subject key identifier: 44:F6:07:5F:86:CE:3F:16:88:35:1B:51:0B:7C:2C:E6:7E:7D:5A:08
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 019D29CDE4DE15F486678528E4F32755DBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 11:00:52 +0000
Manifest this update: Thu 26 Mar 2026 11:00:52 +0000
Manifest next update: Fri 27 Mar 2026 11:00:52 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: PEMN4gmXL9DBt3Hha0pboUCdP4BT5ifv04IoW72qPOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e4:de:15:f4:86:67:85:28:e4:f3:27:55:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Mar 26 11:00:52 2026 GMT
Not After : Mar 27 11:00:52 2026 GMT
Subject: CN=44f6075f86ce3f1688351b510b7c2ce67e7d5a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:d2:cf:ce:40:01:af:9a:d6:3a:c9:e5:9a:
c8:90:d9:1e:ac:cb:73:8e:39:d6:31:1e:98:d8:53:
19:b9:b6:e4:23:53:38:da:b2:3c:c3:03:81:87:02:
66:c9:81:88:3c:66:95:ff:6c:e5:dd:af:8c:18:de:
1f:ff:f3:fc:05:15:5d:52:e6:89:a1:34:9f:fa:0c:
5d:05:5f:e5:04:d2:ed:0b:5e:10:6f:90:a8:b1:9a:
ed:d8:be:c4:08:1f:4d:ff:e8:8b:79:72:d1:38:33:
e0:49:a2:df:f3:10:06:f4:94:b3:b9:c2:67:9c:f9:
73:97:fb:ac:b8:6d:b9:5d:13:67:6d:8c:07:45:be:
85:4b:79:7d:52:3e:38:ad:59:db:a2:40:e4:ad:27:
ea:c7:51:d7:d0:76:0a:1a:b2:df:d1:1e:23:a5:3e:
b7:c0:f6:99:4a:9f:35:c5:69:21:ee:c8:1c:31:5b:
ba:60:5a:f9:0c:46:43:5f:71:bf:ac:df:0b:c0:c1:
8a:0d:a6:ac:82:db:83:6d:c1:6a:14:29:ac:cb:b0:
aa:4b:9e:ac:55:aa:9b:74:b8:86:7b:b2:8e:7f:8a:
84:29:67:ef:0c:37:45:20:5b:fc:bb:5e:a4:a1:3b:
13:79:e5:27:29:bf:36:ee:70:cc:84:1a:e7:54:b5:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F6:07:5F:86:CE:3F:16:88:35:1B:51:0B:7C:2C:E6:7E:7D:5A:08
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:ed:c8:c7:5c:44:a3:b5:ee:6e:59:03:e7:bd:0a:44:bc:
14:e4:a4:d6:24:df:8c:e5:ee:2e:16:6a:00:15:2f:39:81:41:
8a:4a:7f:52:bc:a0:da:db:6f:06:d5:42:f0:f9:fb:0e:0c:5a:
97:f5:70:39:fe:42:fd:8e:b9:b1:79:8e:f8:32:d5:80:c3:65:
83:5f:c0:ef:02:25:17:b8:f4:8b:9a:db:bf:35:0d:37:98:55:
ea:be:11:4f:32:d7:ef:70:f7:e9:a1:43:46:7a:3d:3f:26:d5:
4b:30:dd:41:07:f9:8e:6a:e5:df:cf:cf:ef:fa:d1:29:71:4b:
11:d2:17:03:f0:5f:3c:4f:f1:93:c9:22:95:11:4c:fd:8a:23:
c5:12:65:f5:33:cc:8b:a2:b0:b1:44:b0:f1:3b:1b:44:3d:68:
6e:85:df:11:3e:87:de:72:f2:cb:3e:f9:d4:92:7c:bf:c8:69:
9d:85:fe:71:81:89:d7:be:3f:a2:53:4a:df:0c:81:19:a2:bc:
a3:ad:84:8d:3b:58:98:14:2a:4f:59:99:2b:5d:80:df:32:78:
0b:19:ef:36:45:fe:39:f7:d7:07:c6:0f:33:31:eb:64:f8:60:
da:98:1a:40:b6:c9:db:ad:63:e9:6e:b5:bd:e1:c4:fc:68:72:
c4:86:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:18 2026 by rpki-client