Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: 8uZo61pUKUV1jPIoC5Pm5dsRGW3+i+XXqsiXsUP/9t0=
Subject key identifier: DC:BD:9A:26:17:03:15:2C:18:79:0D:29:EB:73:F4:C2:87:F6:12:3D
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019D2772101F04400949D2D025752DEA1670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: pdFF5pRIEnYeOJeeAHv0wDL04J8r8OXXXHD3kDE70Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:10:1f:04:40:09:49:d2:d0:25:75:2d:ea:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=dcbd9a261703152c18790d29eb73f4c287f6123d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:75:f0:93:9d:93:04:c0:ce:a2:49:14:43:
87:f7:25:5b:a7:2b:a1:83:52:44:ee:d6:ca:33:9f:
69:03:e7:69:7f:fb:d7:92:d1:ef:d7:5e:56:79:59:
d3:e4:ad:05:4d:8a:a2:29:63:e7:ee:f2:dc:ab:14:
5c:87:8b:e9:55:5e:c9:4e:fa:62:64:64:60:2e:f6:
9d:ec:82:b4:6f:69:64:77:1a:55:a8:f0:01:42:6b:
83:47:e7:2b:7b:e0:45:d0:6e:f6:1b:ae:e8:14:18:
95:dd:de:0f:f5:b8:f7:d4:d7:98:58:71:65:4d:ca:
d3:c7:ea:51:9e:aa:d7:da:f1:70:1b:5a:78:e3:62:
68:02:91:b4:92:83:d5:7e:c2:61:5c:98:7e:d9:14:
13:f2:2c:18:b5:20:da:9b:2c:38:30:bb:e0:7f:64:
c5:fb:9f:28:53:17:3e:d5:1f:d4:6a:65:bd:4a:87:
b5:80:18:b4:c3:1a:50:4d:d7:80:e6:76:7c:53:ba:
e7:dd:eb:24:f6:8f:f3:1d:1d:43:9c:c3:12:d7:5f:
4f:25:5e:ed:01:53:b8:fb:ec:c9:61:26:38:0d:b9:
74:13:b8:28:5d:79:ec:9b:6d:b8:dd:9a:b2:e4:30:
9e:ae:9f:88:7f:c5:e8:e3:7d:cf:bf:0e:a4:8d:5a:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:9A:26:17:03:15:2C:18:79:0D:29:EB:73:F4:C2:87:F6:12:3D
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:67:d5:1f:75:51:02:94:f7:9f:07:c7:d6:ee:d6:38:7f:d9:
56:b4:e9:6c:46:8a:dc:01:11:77:3c:22:fd:99:f3:85:fa:ae:
86:89:32:c6:2f:31:fa:d1:52:8e:6b:56:04:fa:38:c9:5d:7a:
3c:4a:75:97:01:05:d5:d6:4a:c4:9c:1b:50:19:db:b8:50:3d:
f5:dc:4c:5e:81:f0:eb:ba:c5:1b:ef:ac:de:cd:23:cc:ab:e4:
73:b3:71:0d:99:ff:88:61:05:6f:f9:8e:a4:0a:cc:1f:17:59:
fa:bd:37:94:6c:a5:87:af:90:1a:dc:5f:f1:12:4b:aa:d3:12:
d1:7a:5e:aa:2e:78:6e:1a:2a:ca:b1:04:dd:55:11:eb:95:eb:
98:ab:ab:82:33:6d:ea:98:b0:02:2c:ef:fa:26:fe:34:af:32:
2c:e4:f8:6d:fc:65:cd:0a:2a:51:f2:6c:61:69:61:f0:08:79:
a5:f9:53:46:db:76:2c:af:2a:6c:d9:fe:62:8c:8b:16:15:b5:
0f:04:2a:d2:1f:e2:bf:a5:38:d6:1d:73:17:0d:72:dd:bd:3e:
ef:c1:18:1a:cd:ad:e1:ce:d1:e3:e9:81:07:cb:73:75:67:55:
0c:88:d2:1f:76:f5:b1:be:2d:16:03:bc:28:5e:fd:eb:71:84:
75:d1:42:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nchAfBEAJSdLQJXUt6hZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx
YjRmYzcwHhcNMjYwMzI2MDAwMTE5WhcNMjYwMzI3MDAwMTE5WjAzMTEwLwYDVQQD
EyhkY2JkOWEyNjE3MDMxNTJjMTg3OTBkMjllYjczZjRjMjg3ZjYxMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuN18JOdkwTAzqJJFEOH9yVbpyuh
g1JE7tbKM59pA+dpf/vXktHv115WeVnT5K0FTYqiKWPn7vLcqxRch4vpVV7JTvpi
ZGRgLvad7IK0b2lkdxpVqPABQmuDR+cre+BF0G72G67oFBiV3d4P9bj31NeYWHFl
TcrTx+pRnqrX2vFwG1p442JoApG0koPVfsJhXJh+2RQT8iwYtSDamyw4MLvgf2TF
+58oUxc+1R/UamW9Soe1gBi0wxpQTdeA5nZ8U7rn3esk9o/zHR1DnMMS119PJV7t
AVO4++zJYSY4Dbl0E7goXXnsm2243Zqy5DCerp+If8Xo433Pvw6kjVq2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy9miYXAxUsGHkNKetz9MKH9hI9MB8GA1UdIwQY
MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt
MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk
LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmfVH3VR
ApT3nwfH1u7WOH/ZVrTpbEaK3AERdzwi/Znzhfquhokyxi8x+tFSjmtWBPo4yV16
PEp1lwEF1dZKxJwbUBnbuFA99dxMXoHw67rFG++s3s0jzKvkc7NxDZn/iGEFb/mO
pArMHxdZ+r03lGylh6+QGtxf8RJLqtMS0Xpeqi54bhoqyrEE3VUR65XrmKurgjNt
6piwAizv+ib+NK8yLOT4bfxlzQoqUfJsYWlh8Ah5pflTRtt2LK8qbNn+YoyLFhW1
DwQq0h/iv6U41h1zFw1y3b0+78EYGs2t4c7R4+mBB8tzdWdVDIjSH3b1sb4tFgO8
KF7963GEddFCUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:43 2026 by rpki-client