Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier: bXAifE9VBZiWbtt9I/ZVCo4wRTxmIzwm9QxNrUvx74M=
Subject key identifier: 12:F3:B3:21:39:0C:74:9D:A0:98:54:C3:D5:E5:CB:51:0C:85:98:43
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 019D2A7232CCC29620D38D8328CE26CCBA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number: 0FEC
Signing time: Thu 26 Mar 2026 14:00:20 +0000
Manifest this update: Thu 26 Mar 2026 14:00:20 +0000
Manifest next update: Fri 27 Mar 2026 14:00:20 +0000
Files and hashes: 1: ZEMqj3tb1ybXDKr5XlxXEL_WdLM.roa (hash: rTSw7EgVmlH/cwLSzDAynJz/mTmMnyEjwe5X2k2ZIyU=)
2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: wx7dSP08PfaN/bjQ0D1Ovc1MgEciU226Qm+oVbUCS0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:32:cc:c2:96:20:d3:8d:83:28:ce:26:cc:ba:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Mar 26 14:00:20 2026 GMT
Not After : Mar 27 14:00:20 2026 GMT
Subject: CN=12f3b321390c749da09854c3d5e5cb510c859843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:bf:0f:37:a4:02:40:2f:cb:fc:09:fe:75:
b6:13:a7:b7:fd:72:90:e2:3c:5f:f2:9b:f3:0c:f0:
4a:50:32:17:c5:bd:58:bb:78:0b:9f:42:0e:52:fc:
60:11:48:45:62:de:16:3e:fd:05:89:af:af:f7:5d:
db:12:ef:d4:1b:1c:99:12:ef:d8:7b:e4:eb:d3:f2:
fe:60:af:98:8e:b4:79:2f:4d:bc:64:c1:59:f5:64:
73:54:0b:3a:ce:dc:d2:de:98:b0:56:87:77:bf:75:
0f:e1:d4:bf:c5:3e:e0:8f:62:3a:ae:07:fd:fa:d0:
b7:8e:8d:95:4f:36:4d:b0:92:2c:50:ae:d3:37:b4:
e6:07:50:5e:51:cf:9f:f4:de:61:6c:49:c0:16:71:
79:07:4b:66:d8:21:df:4c:eb:e7:42:1e:33:94:3a:
42:6a:91:07:30:49:8e:fb:2d:27:c5:64:66:73:88:
4d:77:56:4f:67:a0:0d:ce:7c:41:ff:d4:48:ba:cb:
f9:f4:9f:eb:58:71:ca:80:5d:c2:8e:66:12:e4:e3:
27:fe:29:ef:33:36:86:07:bc:21:2c:af:19:a1:ed:
95:2d:61:4f:e8:a6:6c:e8:37:67:c3:d9:a2:47:83:
47:97:53:e5:02:86:b1:0a:94:93:bc:54:32:b1:08:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:B3:21:39:0C:74:9D:A0:98:54:C3:D5:E5:CB:51:0C:85:98:43
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4e:2b:9b:de:db:56:84:36:54:81:f7:a9:db:bc:4c:d1:e5:
e6:c2:3f:54:e0:08:b0:ab:91:4d:34:62:46:3b:e5:02:88:73:
82:fb:37:52:45:48:f4:1f:22:3c:7f:04:31:18:e0:d4:91:bd:
fc:93:ac:12:e7:78:07:27:d1:e7:49:37:8c:31:6c:8b:a2:be:
02:ce:b0:52:9e:8d:85:c2:8e:06:2a:82:06:ff:4c:39:11:38:
3c:86:93:e3:2f:b4:08:16:26:bd:94:3d:95:72:d7:5d:73:46:
73:23:4a:9f:0d:ab:34:bc:17:37:83:7c:a8:87:00:16:20:0a:
c2:0f:36:aa:ea:67:e3:7a:a2:35:44:38:33:83:26:7d:f2:22:
0d:31:6c:5b:52:0f:82:33:bf:a3:55:74:98:06:b1:4d:dd:50:
74:8e:31:6f:d6:7a:55:5b:9c:6c:41:eb:43:a8:31:47:a6:98:
ad:c0:89:1d:ab:50:d5:6e:88:f4:9d:54:17:e9:21:dc:16:09:
5d:a2:62:56:eb:6c:fb:42:ec:c4:64:0d:d0:4b:6b:ab:c4:19:
4e:01:cd:7d:d6:a3:ad:c6:dd:a0:dd:08:8a:05:60:19:b5:f1:
42:d2:9a:24:eb:1b:a9:00:e5:1d:63:9b:ee:47:ef:6f:6a:fd:
6a:be:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:39 2026 by rpki-client