Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: IgWk21tbvQHYIDz63j/DJZSulMH0bAe88y5WNENSEHM=
Subject key identifier: 64:36:D8:F6:41:BA:73:DA:65:E2:DE:1A:7B:9B:47:33:6D:8A:9A:0C
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019D258357D52825BB8978A3082E1C148164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 15:00:57 +0000
Manifest this update: Wed 25 Mar 2026 15:00:57 +0000
Manifest next update: Thu 26 Mar 2026 15:00:57 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: 5hyfwnSHlZjjm8yX6BsKviJejUSIRoVa06UHc7aMsvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:57:d5:28:25:bb:89:78:a3:08:2e:1c:14:81:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Mar 25 15:00:57 2026 GMT
Not After : Mar 26 15:00:57 2026 GMT
Subject: CN=6436d8f641ba73da65e2de1a7b9b47336d8a9a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:ce:6e:19:c3:86:4a:1b:aa:f9:e3:fa:a9:
69:4c:c1:de:91:94:2a:ad:51:65:2a:96:08:7e:5c:
4d:37:25:c8:ae:16:81:bc:24:ba:34:cd:67:a3:af:
1b:16:d9:45:61:1b:c7:1b:5a:4b:e1:56:21:c1:c7:
7d:f0:32:a7:08:b1:cc:8d:e8:fe:91:f0:bf:46:12:
fe:77:82:13:75:52:18:02:92:ed:53:14:db:18:a4:
a3:4a:be:1d:86:08:4f:a9:84:78:d0:c8:67:e3:f5:
e8:8c:b4:9e:38:b1:4e:20:45:b2:78:74:8b:76:69:
82:3d:3e:4f:a0:15:1a:e8:c3:9f:e5:43:93:20:dc:
3b:85:71:0e:cb:af:f3:99:fc:92:e8:14:02:ac:69:
70:e4:f1:ff:b2:ea:86:d3:b5:80:0c:d0:63:1d:a6:
f0:00:ee:24:ae:46:11:78:ae:b2:9e:d1:f2:dc:9a:
21:66:8e:4f:c6:74:62:b4:4d:d4:62:7b:44:59:90:
98:4e:90:6b:3e:33:47:0a:36:67:3c:24:1d:81:6e:
1f:64:51:07:b6:d7:4c:ee:05:68:0f:62:dc:20:a7:
e0:0f:00:f3:9e:15:af:83:81:5f:ae:6c:92:0a:19:
65:f3:a8:a8:e3:1d:d2:47:39:0d:3f:3d:5a:d0:6a:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:D8:F6:41:BA:73:DA:65:E2:DE:1A:7B:9B:47:33:6D:8A:9A:0C
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fa:26:d4:9b:07:c8:33:3d:c5:24:05:e2:bd:53:dd:3a:d3:
f4:8c:27:c0:2f:1b:88:15:65:8b:53:e4:75:b2:55:df:81:08:
2b:ac:8a:35:42:b4:ad:b9:c7:16:7f:b1:31:7b:e5:6c:c9:a9:
6e:dc:1b:13:1b:a6:4f:fc:7e:c5:57:b3:1f:6b:5d:7f:b7:13:
77:4d:3d:60:e2:c5:27:3a:a9:79:15:d3:51:4c:b1:1c:47:7e:
42:d2:4f:e6:ce:d4:a8:0a:cd:ab:ea:d8:08:bf:68:52:e6:5c:
24:08:87:35:27:64:bd:6d:eb:d0:c9:52:4c:04:53:60:37:e9:
0c:4b:10:2a:d6:ec:0e:c0:d7:a0:38:9c:78:f6:13:86:69:4d:
74:49:c1:b7:d2:ae:bd:45:58:fb:d1:75:13:12:80:f5:05:c0:
26:59:06:69:6f:ba:44:d3:29:2e:13:9c:68:c1:50:9d:fd:3b:
9f:bb:6f:de:4c:42:07:29:98:8b:25:2e:23:42:4d:65:71:2f:
95:f4:bb:1c:7c:9d:fd:3c:dc:6f:e3:00:33:6c:02:c2:6f:c0:
b7:8b:a5:d5:75:9a:6a:c0:c4:12:ef:3a:d2:7e:41:14:64:a4:
91:33:21:d5:29:47:27:7e:47:11:ca:9b:74:e7:bd:9b:87:cd:
a1:14:b6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg1fVKCW7iXijCC4cFIFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj
OTc2MDEwHhcNMjYwMzI1MTUwMDU3WhcNMjYwMzI2MTUwMDU3WjAzMTEwLwYDVQQD
Eyg2NDM2ZDhmNjQxYmE3M2RhNjVlMmRlMWE3YjliNDczMzZkOGE5YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4jObhnDhkobqvnj+qlpTMHekZQq
rVFlKpYIflxNNyXIrhaBvCS6NM1no68bFtlFYRvHG1pL4VYhwcd98DKnCLHMjej+
kfC/RhL+d4ITdVIYApLtUxTbGKSjSr4dhghPqYR40Mhn4/XojLSeOLFOIEWyeHSL
dmmCPT5PoBUa6MOf5UOTINw7hXEOy6/zmfyS6BQCrGlw5PH/suqG07WADNBjHabw
AO4krkYReK6yntHy3JohZo5PxnRitE3UYntEWZCYTpBrPjNHCjZnPCQdgW4fZFEH
ttdM7gVoD2LcIKfgDwDznhWvg4FfrmySChll86io4x3SRzkNPz1a0GqlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ22PZBunPaZeLeGnubRzNtipoMMB8GA1UdIwQY
MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt
MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx
LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/om1JsH
yDM9xSQF4r1T3TrT9IwnwC8biBVli1PkdbJV34EIK6yKNUK0rbnHFn+xMXvlbMmp
btwbExumT/x+xVezH2tdf7cTd009YOLFJzqpeRXTUUyxHEd+QtJP5s7UqArNq+rY
CL9oUuZcJAiHNSdkvW3r0MlSTARTYDfpDEsQKtbsDsDXoDicePYThmlNdEnBt9Ku
vUVY+9F1ExKA9QXAJlkGaW+6RNMpLhOcaMFQnf07n7tv3kxCBymYiyUuI0JNZXEv
lfS7HHyd/Tzcb+MAM2wCwm/At4ul1XWaasDEEu860n5BFGSkkTMh1SlHJ35HEcqb
dOe9m4fNoRS2zA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:02 2026 by rpki-client