Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: l9AUgIqcPZqZsa6aRhfBL72cnre3sG16EXvvTAHqvoc=
Subject key identifier: 31:16:2C:00:1A:8A:C8:BC:F9:D0:30:3D:7D:3F:09:C0:EC:99:59:B0
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019D2772F2A0DBE800C64A264AA5EEACE20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:02:17 +0000
Manifest this update: Thu 26 Mar 2026 00:02:17 +0000
Manifest next update: Fri 27 Mar 2026 00:02:17 +0000
Files and hashes: 1: LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa (hash: ryTaJPSpPyp4HVacNx6TqyKRXMOPCVThkC5CxXFK++o=)
2: Yn86QLVAHpPgUIOHf9xuouUcLOQ.roa (hash: 6awOm1GCHlzhqt7HZ19OchKYQoEQ3dPq9ujImJdFJic=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: pVzzp8DvtM4Y1TYh9lWJW+bO+lhYKosihvsQcV5nabo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:f2:a0:db:e8:00:c6:4a:26:4a:a5:ee:ac:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Mar 26 00:02:17 2026 GMT
Not After : Mar 27 00:02:17 2026 GMT
Subject: CN=31162c001a8ac8bcf9d0303d7d3f09c0ec9959b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:a7:a7:79:50:e0:8e:c9:de:ae:a1:e7:a9:
87:64:1b:16:57:a4:34:0b:34:87:1c:db:90:06:ef:
c6:c1:2e:a1:f8:0e:26:44:ce:87:31:55:df:6b:9e:
d9:6e:6e:c7:ff:e0:a3:48:1f:82:5a:49:2f:9e:a7:
81:b7:be:cf:3f:15:6c:1d:bc:09:82:f3:2b:f8:b1:
32:63:78:8a:25:39:d0:6e:ac:a5:d6:ca:0e:3f:36:
76:8f:75:09:17:1b:f6:d7:8a:03:62:72:ac:86:f1:
f5:66:df:2e:01:11:8f:8b:8a:27:1f:54:65:5f:9a:
3e:ae:e9:e1:9e:2e:4e:70:4b:39:a1:ea:6e:58:48:
0b:96:38:1e:f9:cf:f8:a3:e8:c2:75:de:b5:92:69:
bf:04:f6:a8:08:2c:c2:48:70:2f:6e:06:79:41:5c:
16:b7:1e:d2:d5:09:3c:03:a8:fb:d2:57:e7:78:57:
6b:da:99:7f:42:8f:ed:a7:a1:9f:39:a7:27:66:05:
53:5b:dc:bb:48:80:bb:8d:ef:e6:6e:f0:4a:c8:6b:
dd:a5:f2:1d:9c:89:e1:7c:bc:20:5a:2a:6f:46:cb:
a0:5b:20:83:d5:76:5b:6f:f4:21:54:80:24:b7:0d:
df:06:bd:94:98:ed:1b:42:c2:db:f7:1f:8a:e7:b1:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:2C:00:1A:8A:C8:BC:F9:D0:30:3D:7D:3F:09:C0:EC:99:59:B0
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:83:e8:8a:db:dd:fc:21:a2:73:fc:9d:96:e7:bd:68:e1:
f8:a5:08:e3:6c:0d:29:e7:96:12:b3:d6:6e:7d:1c:b9:f6:be:
6e:d4:ce:93:8b:e9:4e:8b:23:68:3a:d3:fc:40:6b:8d:3a:ac:
dd:ca:6b:8c:5f:9f:93:bd:62:03:b0:74:13:92:36:2f:4f:32:
9a:28:80:98:a9:0b:1e:65:66:bc:96:9e:7d:6f:e9:b6:bc:b5:
60:86:f5:c0:25:92:0f:cb:a8:bc:1e:5f:74:38:62:f9:51:8c:
9e:5f:d1:ef:50:eb:06:2f:a1:b8:11:25:d1:ef:47:a5:cc:1e:
8e:79:2f:70:75:ef:88:e9:c0:42:9f:96:6a:76:ff:d8:d7:ab:
72:1e:71:f9:16:b9:ad:f3:a9:a4:ee:d3:f8:a8:37:0a:8a:59:
85:5a:98:0c:5c:98:ff:e5:78:dc:83:35:81:4e:dd:71:24:f3:
ce:17:4c:05:ae:dd:93:d1:2f:1b:2f:d6:9b:a8:01:c0:91:40:
73:ec:5f:ac:c6:08:57:14:51:44:15:40:a9:c5:7a:ef:70:3d:
be:ed:50:f2:29:10:53:d3:cf:b3:22:c9:7c:98:dc:4e:40:b1:
77:34:a0:8c:00:60:d3:e3:b9:a5:ee:2b:90:dd:14:e3:3e:62:
06:dd:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:19 2026 by rpki-client