Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
File: kMDxVcgmfsgeEIO337k_NOm5Aa4.mft (raw, json)
Hash identifier: Bgm2glgGQ6fzztAM4f0kZligsIkhOBvFCEE7Dq8wKCQ=
Subject key identifier: 45:B4:D7:6D:A8:BB:9D:87:69:CB:DF:8E:60:A6:B7:3C:22:86:6F:A2
Authority key identifier: 90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE
Certificate issuer: /CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae
Certificate serial: 019D28165C20CABB412ECEC7E63CFEA15AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
Manifest number: 018C
Signing time: Thu 26 Mar 2026 03:00:46 +0000
Manifest this update: Thu 26 Mar 2026 03:00:46 +0000
Manifest next update: Fri 27 Mar 2026 03:00:46 +0000
Files and hashes: 1: 7LWHjRPRc5Mqc6PjEVvxHU9li60.roa (hash: rkyd9gjKfsmzi2GqgoHu5uafY8E9ecEWsP84KwNsmfU=)
2: kMDxVcgmfsgeEIO337k_NOm5Aa4.crl (hash: v2O03YwLcTOHysXzdOI+LEefUz7ng0Tzpcm7XjpqRT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5c:20:ca:bb:41:2e:ce:c7:e6:3c:fe:a1:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae
Validity
Not Before: Mar 26 03:00:46 2026 GMT
Not After : Mar 27 03:00:46 2026 GMT
Subject: CN=45b4d76da8bb9d8769cbdf8e60a6b73c22866fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:02:ad:a1:d4:90:e3:a6:46:46:46:c5:b5:
52:08:d2:f9:fb:ce:ab:f5:c1:b6:50:e4:92:51:c4:
17:78:0e:93:45:ba:90:40:f2:70:44:18:d6:32:97:
dd:27:d4:17:b7:fe:41:11:0d:a5:8f:ae:a5:93:7a:
2a:59:6c:f9:94:75:81:c5:d4:3e:50:98:b3:7b:78:
72:6c:99:da:80:6b:f6:06:b9:da:86:39:9b:32:cf:
94:6b:d6:c7:0c:ed:f9:f7:9c:44:ce:05:52:2e:9f:
d4:0c:36:bd:6f:58:5f:a7:3b:5d:1e:87:0c:fd:cb:
82:d1:76:cf:a0:0f:bf:01:0b:05:8b:a3:8f:0e:4d:
a8:14:20:ca:63:56:f8:29:6b:1d:42:fc:a1:75:d7:
71:c7:59:93:c2:68:d6:e6:29:46:90:83:2f:2d:e8:
2c:f1:5e:65:0b:60:d5:77:65:9b:18:0a:03:86:01:
21:99:7e:96:06:6e:4b:a1:33:31:f5:fb:8c:71:d5:
8a:0a:8d:c1:a8:5d:d5:58:78:3e:08:a1:fe:36:3a:
0f:d6:ee:0c:74:ec:8c:c7:d5:94:3d:fc:df:69:98:
f5:69:ef:99:d9:56:9f:f6:9d:0e:6e:33:f1:13:50:
eb:bf:30:df:af:3d:78:65:9a:86:e5:ee:e2:b9:6e:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:D7:6D:A8:BB:9D:87:69:CB:DF:8E:60:A6:B7:3C:22:86:6F:A2
X509v3 Authority Key Identifier:
keyid:90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:c8:c0:0f:18:38:cb:e3:91:4c:3e:c7:0b:b3:6c:60:dc:
2a:e5:94:70:c8:b4:19:b3:e1:4e:f3:21:c7:50:1f:b7:5a:3b:
2b:f4:5c:44:64:49:a9:3e:3d:82:9a:1b:cd:1d:ea:00:f3:b8:
d0:48:be:db:14:ce:4b:b7:74:0d:37:5d:89:a3:18:58:c6:57:
fc:8e:f7:77:66:8c:e9:b4:3c:51:c9:1f:15:4a:86:ad:65:fb:
c5:39:48:38:a5:12:4b:08:7d:b0:aa:d0:ff:b8:4f:1e:c7:68:
48:5a:4e:cd:82:b1:98:d4:72:e7:b0:c8:35:ea:1a:3c:32:7d:
74:53:88:c1:7e:d9:e1:e4:0b:6b:f8:01:51:ff:af:08:5b:9d:
bb:9e:83:6f:bd:a3:1c:f6:85:4e:3d:f0:17:14:cd:bb:05:8a:
5a:bc:47:af:d5:b7:e5:52:68:80:dd:3a:b8:f9:34:14:93:e5:
9b:93:68:14:ce:2f:6e:48:c6:55:33:cc:85:0c:db:3c:05:d6:
a7:56:1b:8a:ba:48:1b:9a:ee:b1:4b:88:49:92:ba:c0:1f:bb:
e1:fb:f7:6d:b5:3b:d8:77:56:6c:11:cc:26:aa:70:11:e4:bd:
46:47:4a:f3:88:3f:43:1a:2f:60:a3:ec:2b:26:a6:58:bc:63:
b0:aa:dc:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFlwgyrtBLs7H5jz+oVqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYzBmMTU1YzgyNjdlYzgxZTEwODNiN2RmYjkzZjM0ZTli
OTAxYWUwHhcNMjYwMzI2MDMwMDQ2WhcNMjYwMzI3MDMwMDQ2WjAzMTEwLwYDVQQD
Eyg0NWI0ZDc2ZGE4YmI5ZDg3NjljYmRmOGU2MGE2YjczYzIyODY2ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj88CraHUkOOmRkZGxbVSCNL5+86r
9cG2UOSSUcQXeA6TRbqQQPJwRBjWMpfdJ9QXt/5BEQ2lj66lk3oqWWz5lHWBxdQ+
UJize3hybJnagGv2BrnahjmbMs+Ua9bHDO3595xEzgVSLp/UDDa9b1hfpztdHocM
/cuC0XbPoA+/AQsFi6OPDk2oFCDKY1b4KWsdQvyhdddxx1mTwmjW5ilGkIMvLegs
8V5lC2DVd2WbGAoDhgEhmX6WBm5LoTMx9fuMcdWKCo3BqF3VWHg+CKH+NjoP1u4M
dOyMx9WUPfzfaZj1ae+Z2Vaf9p0ObjPxE1DrvzDfrz14ZZqG5e7iuW4QXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW0122ou52HacvfjmCmtzwihm+iMB8GA1UdIwQY
MBaAFJDA8VXIJn7IHhCDt9+5PzTpuQGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEt
NTk2MWQzNDZhMTcyLzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEtNTk2MWQzNDZhMTcy
LzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCrIwA8Y
OMvjkUw+xwuzbGDcKuWUcMi0GbPhTvMhx1Aft1o7K/RcRGRJqT49gpobzR3qAPO4
0Ei+2xTOS7d0DTddiaMYWMZX/I73d2aM6bQ8UckfFUqGrWX7xTlIOKUSSwh9sKrQ
/7hPHsdoSFpOzYKxmNRy57DINeoaPDJ9dFOIwX7Z4eQLa/gBUf+vCFudu56Db72j
HPaFTj3wFxTNuwWKWrxHr9W35VJogN06uPk0FJPlm5NoFM4vbkjGVTPMhQzbPAXW
p1YbirpIG5rusUuISZK6wB+74fv3bbU72HdWbBHMJqpwEeS9RkdK84g/QxovYKPs
KyamWLxjsKrclA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:34 2026 by rpki-client