Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: yDhAIw/7uzUNyMTxYsFwvpkTrv6cSvgzHXM/CA0cD9Y=
Subject key identifier: 2B:7F:B8:8A:69:EE:F5:0E:18:E9:60:63:54:21:BB:F3:C5:3A:6F:AB
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019D2772001CC9C9F931276424BB4F7E1F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:15 +0000
Manifest this update: Thu 26 Mar 2026 00:01:15 +0000
Manifest next update: Fri 27 Mar 2026 00:01:15 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: KnQ+EaGC5kXnTIbXGJ2TVPRSuHtmFAitoBo2x+M6OkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:00:1c:c9:c9:f9:31:27:64:24:bb:4f:7e:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Mar 26 00:01:15 2026 GMT
Not After : Mar 27 00:01:15 2026 GMT
Subject: CN=2b7fb88a69eef50e18e960635421bbf3c53a6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:09:7b:2c:58:47:b1:61:4a:f0:ed:c8:b9:
8c:0f:fb:7f:a7:c3:23:42:89:bc:b4:99:bb:75:a1:
0d:cc:6d:dc:28:e9:e1:b3:9c:7d:22:41:75:17:49:
dc:3e:6c:d0:7b:f9:48:4b:6a:45:a2:77:94:bc:ce:
df:55:01:5c:12:06:af:d5:b6:9b:3a:d6:94:14:fe:
54:39:3e:01:b6:e0:a1:e8:47:16:9c:50:c3:ea:c0:
91:63:73:ba:19:9e:6a:79:a6:68:50:1d:51:5c:e2:
b4:80:eb:b2:0b:67:98:d5:13:7d:a1:6c:be:f8:92:
ca:e3:fe:b9:74:d9:70:55:86:9c:5d:f2:38:97:58:
52:33:fc:38:62:72:98:e5:14:11:66:92:52:83:2a:
93:25:0a:64:9b:5f:f7:26:63:d2:6d:8b:a3:0c:e5:
65:40:71:46:d9:c6:3f:bc:65:c9:15:52:f9:da:5a:
eb:4c:09:9e:df:ed:12:68:fe:9f:b4:2f:7e:e6:79:
4a:b8:9a:0c:04:82:a0:c2:93:39:19:43:8f:cd:56:
04:94:6d:00:43:ee:4a:d3:31:1d:c0:d0:5f:55:db:
5a:12:0c:fc:06:54:6c:cb:a5:0f:11:82:25:d7:c2:
05:1b:cd:77:42:79:f1:1b:78:88:bb:1b:b4:ad:33:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:B8:8A:69:EE:F5:0E:18:E9:60:63:54:21:BB:F3:C5:3A:6F:AB
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:b8:96:84:21:96:b9:94:cd:b2:91:7e:56:f8:96:d1:7c:
cb:68:03:22:52:0d:8e:3a:69:01:59:86:9c:7c:c7:25:dc:8f:
51:9f:43:fa:a3:cb:e8:2c:8f:7b:7d:dc:95:f1:10:f4:b0:f3:
0f:0c:a0:a3:4f:aa:10:3e:23:94:59:5b:58:17:de:eb:d8:78:
4f:43:0d:79:52:68:1a:20:4a:08:78:11:70:a7:fe:bc:9d:51:
cd:fe:e5:51:46:ac:25:4d:ca:79:5a:7b:9f:b3:f6:03:b3:68:
30:bb:1c:59:64:32:87:01:16:37:6c:9a:a2:cb:75:ef:98:68:
c3:e5:0a:62:7e:ac:c6:a8:07:78:1d:07:8c:dd:f9:c9:45:4c:
45:f1:75:0e:40:60:3e:9c:5e:b6:d7:40:66:37:93:0e:9d:57:
8c:c8:47:79:ca:a8:89:b7:91:96:e9:cc:5e:7f:33:3d:c0:9b:
fe:86:bb:3e:7b:a1:a1:d9:7b:23:a0:9c:b4:57:fc:a9:d6:c5:
4b:68:37:3d:ed:79:5c:15:58:89:0e:b8:51:38:55:d7:01:75:
91:6e:38:da:59:f7:b3:ea:1f:61:25:ca:b1:8d:15:9b:1c:a6:
5d:9a:31:97:3a:43:81:8b:d4:15:11:e8:5c:ff:27:e7:e9:13:
87:dc:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:55 2026 by rpki-client