Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: wMv3eqa5eFSwCZtlz20KvuDY70q/QAqkCHB2FwYtxSM=
Subject key identifier: 76:08:D2:D9:8D:39:C6:BB:8C:D5:12:C1:67:5C:22:53:79:F1:1A:E2
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019D2A723EE05E712B3EE80B7F15BB6103DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 06E3
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: 8vpWUhhW9rIfg6XkYlldhI7i/8vNEOcik/SsBKi9w/0=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:3e:e0:5e:71:2b:3e:e8:0b:7f:15:bb:61:03:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=7608d2d98d39c6bb8cd512c1675c225379f11ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:e8:30:f1:09:30:0a:b2:e2:ec:a2:3d:fb:
6e:8c:eb:9b:35:72:60:23:a2:a7:d5:ba:7b:d5:df:
45:67:fd:33:fc:be:88:fc:8c:b9:5f:1f:e7:97:20:
71:be:db:79:5a:d2:8c:ff:de:85:94:e3:19:ed:a5:
ab:b2:b1:cc:16:ae:f2:c0:96:2b:bc:64:2e:dc:c2:
8c:e4:10:2e:92:4c:50:fd:64:c9:9b:01:a6:47:09:
14:d1:a2:a4:13:af:da:10:47:2a:09:4d:c2:54:43:
93:99:34:df:b3:72:18:fe:c6:80:b1:fe:87:62:14:
20:85:e9:c3:6e:88:61:8a:7d:72:24:86:39:ef:85:
a4:df:61:7f:a3:70:14:45:b1:9f:2f:e0:63:b5:98:
14:e7:fa:da:6b:46:ef:bd:c9:d0:70:5a:c0:81:b8:
66:d8:2c:8c:b1:47:d7:71:60:ad:5f:6b:b1:bf:cd:
74:ae:fe:97:df:c1:80:b9:db:35:79:0f:13:8a:21:
ee:93:17:04:d3:d7:cc:af:6e:a5:f9:35:a3:14:72:
c8:30:cd:a9:eb:f7:0c:24:b5:91:fa:b1:82:04:80:
45:7e:bd:7e:ba:09:79:82:58:7b:8a:d8:67:a7:8b:
0b:78:27:a7:db:68:65:6c:4f:c3:14:1c:5c:eb:c7:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:D2:D9:8D:39:C6:BB:8C:D5:12:C1:67:5C:22:53:79:F1:1A:E2
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:71:a9:b4:a5:a8:5f:68:46:98:5e:59:9f:3b:67:3a:58:94:
be:bf:07:c9:5e:d0:48:7e:5c:43:32:af:1b:16:f2:40:51:56:
a1:87:f6:8f:dd:37:92:35:54:00:66:77:f2:88:91:f1:19:55:
6e:01:63:54:3d:26:00:ec:6b:88:d2:70:fa:27:4f:f6:1e:90:
8b:40:e3:e2:af:a4:55:57:b5:53:3e:b9:8c:90:cf:e2:52:3a:
03:e1:81:00:20:14:67:bc:81:8c:ec:7b:de:bb:9e:ed:0d:a7:
1a:53:d1:3d:c4:b1:29:77:08:42:80:50:5f:de:dd:2a:d1:89:
31:e6:77:51:4f:67:37:14:37:43:0b:8c:73:02:9e:f6:f8:f4:
00:5c:6d:f8:56:f1:07:5d:e9:01:46:56:74:2b:a7:a7:eb:0b:
5a:f8:cc:aa:0d:10:91:c3:81:61:0b:e6:ae:cb:82:69:9c:34:
b8:2c:3e:42:dc:c7:f0:d0:89:35:f4:f1:8a:ab:ad:5e:a6:bc:
21:ee:3f:31:46:6e:37:b0:ab:03:a8:a4:84:be:d2:ed:ca:49:
cb:32:5e:ec:4a:24:02:80:45:90:00:af:9c:b2:5e:0c:85:2e:
e5:d9:47:e8:31:62:d0:61:5b:57:a8:49:de:79:f0:8c:02:fb:
18:a8:a0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcj7gXnErPugLfxW7YQPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl
YTZkN2QwHhcNMjYwMzI2MTQwMDIzWhcNMjYwMzI3MTQwMDIzWjAzMTEwLwYDVQQD
Eyg3NjA4ZDJkOThkMzljNmJiOGNkNTEyYzE2NzVjMjI1Mzc5ZjExYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QboMPEJMAqy4uyiPftujOubNXJg
I6Kn1bp71d9FZ/0z/L6I/Iy5Xx/nlyBxvtt5WtKM/96FlOMZ7aWrsrHMFq7ywJYr
vGQu3MKM5BAukkxQ/WTJmwGmRwkU0aKkE6/aEEcqCU3CVEOTmTTfs3IY/saAsf6H
YhQghenDbohhin1yJIY574Wk32F/o3AURbGfL+BjtZgU5/raa0bvvcnQcFrAgbhm
2CyMsUfXcWCtX2uxv810rv6X38GAuds1eQ8TiiHukxcE09fMr26l+TWjFHLIMM2p
6/cMJLWR+rGCBIBFfr1+ugl5glh7ithnp4sLeCen22hlbE/DFBxc68d+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYI0tmNOca7jNUSwWdcIlN58RriMB8GA1UdIwQY
MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt
MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0
LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHGptKWo
X2hGmF5ZnztnOliUvr8HyV7QSH5cQzKvGxbyQFFWoYf2j903kjVUAGZ38oiR8RlV
bgFjVD0mAOxriNJw+idP9h6Qi0Dj4q+kVVe1Uz65jJDP4lI6A+GBACAUZ7yBjOx7
3rue7Q2nGlPRPcSxKXcIQoBQX97dKtGJMeZ3UU9nNxQ3QwuMcwKe9vj0AFxt+Fbx
B13pAUZWdCunp+sLWvjMqg0QkcOBYQvmrsuCaZw0uCw+QtzH8NCJNfTxiqutXqa8
Ie4/MUZuN7CrA6ikhL7S7cpJyzJe7EokAoBFkACvnLJeDIUu5dlH6DFi0GFbV6hJ
3nnwjAL7GKig6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:31 2026 by rpki-client