Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: f3tx379e7AmrkERUYhmJFoUFIPAJ3WLB9zWoTtEMHzI=
Subject key identifier: 1A:4C:31:55:33:71:74:7A:2A:41:8E:46:26:C0:F7:F6:B3:14:B4:A0
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 019D273AD16239353A265DE11F88B294142A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: 1-OfIae6Kl9oBeMGdITJqUQ0rkzg.roa (hash: 3jq+3AfO5RV/qAlphvq2sROrJnEhMWokYdHjHRQXSo0=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: MOdaYk0x0O8JOiCZGw+svJD8onjbH/Yrn9bxxkuZ1SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d1:62:39:35:3a:26:5d:e1:1f:88:b2:94:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=1a4c31553371747a2a418e4626c0f7f6b314b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:0f:6e:f6:7b:3a:13:7c:b5:63:fd:be:69:
9c:1b:62:b0:2a:de:3f:4e:07:1f:63:f3:79:f6:a2:
d5:ca:71:cc:ae:63:94:af:0d:3e:5e:03:f9:18:35:
db:44:e6:91:53:28:76:e6:a1:33:35:52:b9:6f:08:
15:9f:c6:ba:5e:a2:6b:98:13:ef:3a:b4:dc:98:99:
b4:e4:55:cb:cb:01:c7:96:1d:b1:04:93:64:d6:85:
79:22:c4:b7:08:a6:6a:21:50:d4:d1:50:d7:88:5d:
5c:1b:db:bc:c3:e4:27:df:5b:dd:a0:db:a1:79:28:
16:fc:9a:8a:81:3c:3f:31:6b:f9:a3:08:93:62:9c:
07:d4:3e:5b:a2:94:66:cd:aa:3f:75:95:41:40:a9:
a2:56:74:91:e9:52:f5:46:84:b1:1e:88:0d:13:d3:
e0:d7:d5:0c:b4:7c:17:61:31:d2:33:fc:b3:7f:79:
a0:6c:8a:42:88:c8:02:7c:a0:92:77:1e:bb:9f:16:
79:15:e9:45:19:10:ee:45:be:00:6b:ea:e7:8e:80:
c3:0b:14:bb:6e:4d:55:53:14:59:48:97:a1:29:35:
ea:db:96:cc:30:14:e2:26:88:e0:fb:f1:5f:d5:07:
48:8d:b2:44:82:10:99:d8:72:26:01:61:10:a1:35:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:31:55:33:71:74:7A:2A:41:8E:46:26:C0:F7:F6:B3:14:B4:A0
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:0c:92:88:46:2f:55:ce:0c:07:21:93:ba:02:73:d3:f7:
cf:93:63:a2:37:72:00:de:78:44:d2:0e:99:c2:18:64:50:2e:
a3:a2:a3:12:dd:82:e3:9e:9d:b2:43:43:7d:9a:94:5b:97:c9:
11:30:1e:6e:47:2e:72:ff:00:06:7c:62:1e:1f:22:1b:9f:0d:
ae:c8:e4:e8:8b:40:85:0a:d0:8f:6f:88:02:ed:96:76:97:27:
f2:41:dd:6d:4a:72:5f:68:32:09:56:5c:ca:ee:e0:1d:b9:7c:
6a:33:e1:5b:2d:7d:a5:89:12:b5:86:d5:2b:ae:5c:6d:27:76:
ca:f6:be:c3:d4:b1:bc:f0:e1:93:4b:df:99:26:05:41:7d:22:
ba:24:f9:2e:1b:c0:f6:26:4e:26:e6:63:d0:dc:fb:a0:ee:51:
46:0a:0e:f7:43:8b:ec:41:c6:28:1c:56:c6:fc:7b:b1:2e:7f:
f4:86:97:7d:62:5b:a8:fa:f9:ea:95:4f:15:98:00:ea:27:7b:
77:cd:ed:e0:22:0f:d1:7f:18:87:08:f8:aa:b2:67:4d:53:59:
5e:02:3b:9e:b8:40:af:ca:e2:e8:30:b2:cb:ab:be:d0:97:73:
d7:ac:76:f3:26:22:35:eb:c2:2b:eb:4b:11:de:f1:8e:a8:2a:
33:08:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:18 2026 by rpki-client