Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: Vwlef8ikmCiCmSeboMV8c7PI2AvCuMS9smDfPsmli8M=
Subject key identifier: 72:CF:F3:B4:B3:62:5F:37:53:C9:4C:7B:C3:2C:31:D9:0F:2A:AD:87
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019D2583BD281C40322F1D71F97412A2BF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 17EA
Signing time: Wed 25 Mar 2026 15:01:23 +0000
Manifest this update: Wed 25 Mar 2026 15:01:23 +0000
Manifest next update: Thu 26 Mar 2026 15:01:23 +0000
Files and hashes: 1: HdqGeJaEHIIOGidEfUQbYKxZrGM.roa (hash: 3Kt5L7WEjQ8tJGELhy3NdQWPHa66vAzIxlcJB4RUAnY=)
2: RPK9lofx2vpfDz3fVaT_lQtdT8k.roa (hash: c8dHr4W3wR+aiojlJOFNLRKnfR/Yoz1DHFKCuyaqE0M=)
3: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: RjsOe0yFVR/zsOwScrfnU4k+AenKoKquJlzFwuxsRYM=)
4: mP8W7TMyviTbTSoXDcPVC4ui5L4.roa (hash: 6juiOWCmEUWksztqfKv/1hmW4YE+zbFyyfjzUEd04ug=)
5: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (hash: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:bd:28:1c:40:32:2f:1d:71:f9:74:12:a2:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Mar 25 15:01:23 2026 GMT
Not After : Mar 26 15:01:23 2026 GMT
Subject: CN=72cff3b4b3625f3753c94c7bc32c31d90f2aad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:3c:88:d8:b3:49:5a:e8:7c:3a:70:80:ce:
3b:4e:b6:6f:17:04:bf:ce:1f:7d:aa:9e:3c:74:27:
34:ba:b8:16:b7:4d:40:9b:95:17:87:aa:b6:41:f7:
be:39:1a:40:dc:bd:51:16:07:f2:a8:74:2f:70:96:
4d:3f:08:62:24:f8:24:ef:6a:e1:9c:e3:c0:8d:08:
52:0e:8f:da:00:7d:04:68:3f:59:79:8f:65:fa:6d:
d7:12:2c:a6:f3:95:72:71:2d:00:5d:81:2f:c9:92:
d3:57:4c:02:9f:de:1c:1b:44:de:15:11:2b:a8:b9:
38:1f:f2:37:30:bb:d2:37:3a:34:52:34:60:1c:18:
52:4a:50:d5:4d:62:18:a6:f8:fb:fa:03:8f:d4:ce:
66:b2:23:55:3c:fa:8d:f4:96:2e:96:c7:50:c3:7a:
81:26:82:56:59:de:7d:dd:35:08:bb:48:f6:c2:50:
c5:5f:18:d4:bb:50:8b:7f:44:7f:c5:7d:cf:14:d3:
e4:7a:86:fc:3e:a6:0c:7c:05:a3:39:85:5e:84:d0:
9b:51:f1:c4:20:15:82:c5:c0:ba:8f:59:3d:5f:af:
77:41:ce:e5:49:05:cd:cc:42:53:13:1d:a2:26:be:
c4:c6:35:20:17:fa:ef:74:87:21:38:41:6b:e3:8e:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:F3:B4:B3:62:5F:37:53:C9:4C:7B:C3:2C:31:D9:0F:2A:AD:87
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0d:78:81:b3:69:b3:62:bd:4f:aa:19:b6:ed:78:d7:4f:f1:
1a:0a:d7:c6:4e:c2:61:9a:fa:60:0d:09:4f:cf:ec:87:2f:de:
e1:08:2a:fc:38:fe:53:9e:fa:cd:ae:31:a6:da:d3:f5:16:dd:
39:7a:cc:4b:3d:be:b6:7f:36:1b:b8:3f:ac:18:99:5f:46:31:
e3:3b:e2:26:6b:f8:f5:e2:17:e3:91:2d:4e:ef:46:e1:07:db:
86:52:3c:a1:12:ec:3a:5d:e4:8d:eb:46:6a:4b:fa:e0:52:15:
aa:29:0d:e8:c4:9e:7c:ac:9e:66:ad:92:38:3c:e4:d0:66:a7:
2e:7e:5e:0a:9e:02:d3:fd:55:8c:83:63:e4:ed:69:d1:9b:0b:
62:30:5b:39:3c:11:49:58:24:7a:86:5c:fa:69:36:40:79:58:
7d:e6:bf:dd:51:50:ac:89:fc:ff:59:11:df:33:6e:87:69:44:
aa:91:08:ce:60:27:31:80:c2:86:76:9f:97:e3:13:6b:56:71:
79:98:62:80:97:f1:03:f6:57:52:7e:aa:c9:f9:4d:2e:b4:ac:
d2:cd:5d:15:4b:eb:1d:57:ec:1a:eb:8f:bc:52:79:ae:70:cb:
a5:3b:18:84:05:bb:a8:35:9d:57:ec:4c:32:40:fc:10:8c:be:
3b:76:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:18 2026 by rpki-client