Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: n82ykhjLWqqw/yCCWufWXAGdf/0COViYzZKv0/B8ZdQ=
Subject key identifier: 54:74:B5:78:A1:A3:61:E2:12:C6:80:D3:0B:F8:76:3B:7D:84:E5:84
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 019D33759EC04D07A760E25928C541EF6BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 08:00:39 +0000
Manifest this update: Sat 28 Mar 2026 08:00:39 +0000
Manifest next update: Sun 29 Mar 2026 08:00:39 +0000
Files and hashes: 1: 7f9HWbHfqhKkMVw2UaE7IDcT5xA.roa (hash: MU6q45G8RIkk6hXpuabfnJu9W348nwIp4jrNhUdqsUE=)
2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: Hi5RtqIU6zr1bHGPf0gTrJBB3BCWrZkNI53kbJD6dng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:9e:c0:4d:07:a7:60:e2:59:28:c5:41:ef:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Mar 28 08:00:39 2026 GMT
Not After : Mar 29 08:00:39 2026 GMT
Subject: CN=5474b578a1a361e212c680d30bf8763b7d84e584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:d4:03:d4:a3:38:4d:df:95:23:45:dc:63:
d9:72:14:83:72:ae:26:e6:6d:89:a9:6d:22:29:bb:
79:ba:b7:fa:2f:1e:22:85:c0:aa:ab:2a:79:04:40:
fe:93:bd:cc:44:e0:9a:1e:e2:f2:ef:21:da:4a:02:
bb:c5:d6:7e:dc:bb:c5:97:91:15:1f:d6:68:2b:b8:
46:0b:07:9d:51:41:83:24:47:89:e7:ef:60:20:43:
ec:a7:b3:44:d3:ef:5c:45:81:e4:ec:e7:6b:a3:36:
66:5a:e2:bf:7d:7b:36:c2:ee:95:c1:58:d0:71:87:
2b:59:60:c0:57:b3:f5:19:9f:bb:4c:c4:a0:76:b8:
8c:18:d0:2b:c5:ff:9a:76:fe:8a:46:26:22:61:fd:
1f:70:a6:ed:04:75:94:93:59:90:45:81:2c:d5:4c:
13:f6:ca:8f:29:fd:55:92:6c:25:f7:a1:2c:b9:40:
4f:9f:e5:f1:f8:7e:a0:a8:39:4d:81:35:32:73:0b:
17:df:be:a9:f3:75:48:a7:8b:0d:2d:b0:60:44:b9:
47:89:bd:16:f4:bf:87:3c:20:ca:67:15:42:36:8a:
79:9e:12:09:67:d9:0d:2b:b6:18:3d:70:7a:d4:12:
88:f9:30:8d:e2:4f:79:4b:f0:d9:d3:11:36:9b:e2:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:74:B5:78:A1:A3:61:E2:12:C6:80:D3:0B:F8:76:3B:7D:84:E5:84
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:e0:81:c2:85:85:90:10:25:77:07:92:91:15:9c:6a:6e:
5f:58:4e:c1:5e:1b:ce:a8:f9:42:8f:9b:32:76:9e:76:60:90:
5b:d1:8b:f3:5f:03:97:12:ff:88:0b:8a:e8:cf:3e:f8:f0:0a:
c2:45:c2:65:5e:10:f6:b7:e2:be:7b:de:ab:03:fb:45:2b:bd:
05:70:f5:9b:6c:54:ca:b5:a5:18:fd:cd:8d:b7:9b:b1:3c:40:
39:1a:df:94:b9:00:99:f2:11:ec:cc:14:9f:03:d2:29:df:bc:
74:99:33:6f:93:74:cc:a2:e6:80:a0:b9:ae:9c:2e:7d:54:98:
4f:a2:12:2e:47:7b:15:32:51:a7:ae:ad:7f:4f:07:90:99:03:
b2:64:e8:15:80:0d:5b:a5:70:67:95:35:3f:e4:7c:9b:ba:94:
cf:a3:0d:15:36:76:98:c5:07:6b:89:f1:2a:a8:d9:d7:a2:3a:
66:94:90:31:61:6c:55:21:ae:36:ad:d7:02:a7:07:e9:69:75:
39:ac:38:59:87:d8:e7:51:09:ff:60:4d:0f:be:33:3c:5e:78:
5b:d7:51:5d:13:f6:a3:c3:08:2c:32:b7:3e:f7:38:bb:1f:87:
23:f1:60:ba:ee:a1:e2:88:a6:5f:56:5b:c6:21:da:d7:ff:d8:
f7:63:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:19 2026 by rpki-client