Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: ie8cYeDge/D7HcomrClDs4i6Eab4dckUrs57a2RiA34=
Subject key identifier: 47:25:F3:C7:5A:69:EC:FA:AF:1F:C9:76:6F:3F:A8:51:50:E3:79:CD
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 019D265F42CB20F72E14703B2E870F32B625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 16CB
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: i+UhcB6oMnQk+e1c2tKwDU+aI8podQh3EmDDUHXiHG8=)
2: olOKcJA3lY2C5AHAA9EvwRDOMTk.roa (hash: 2fXZ6uCGSZ0urqxK7sMB+s4D2FSNMW1R9BEHHUDguZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:42:cb:20:f7:2e:14:70:3b:2e:87:0f:32:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=4725f3c75a69ecfaaf1fc9766f3fa85150e379cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:ac:b0:e4:a5:9b:36:b4:01:6b:a6:9b:44:
84:b7:56:62:3c:ee:d7:bf:7b:c4:58:b6:67:13:fd:
b9:64:d5:7b:41:53:04:71:e6:c0:0c:f1:b2:00:b4:
8d:c9:ac:fe:49:14:20:07:28:ac:53:c2:ac:94:0a:
0c:50:2a:e0:08:57:1d:0f:bb:f2:b2:b3:66:32:fc:
82:d1:a0:07:a0:a1:d9:bc:85:ab:28:16:08:5c:9a:
f2:08:69:9c:10:c4:86:ea:18:8c:54:96:09:0c:bd:
e0:76:ea:43:26:e3:52:23:9e:98:42:66:7d:24:1d:
5f:b3:e1:7d:b7:53:87:18:ed:87:06:39:d9:4a:38:
7d:e1:38:c8:fc:2e:4e:ba:65:aa:bd:ec:62:c7:3d:
eb:d5:29:ca:db:72:d5:2c:97:ba:52:bf:08:92:87:
11:0d:4e:8d:3f:dc:eb:d3:4a:58:f1:f4:d5:f6:68:
a6:04:f1:b2:77:d8:f0:de:8d:d4:9b:c0:f4:89:b0:
7b:68:ff:45:6a:f0:0d:a7:a6:ef:c6:c3:01:93:02:
e0:0b:75:98:7c:45:a3:cc:0b:ac:3a:2a:2b:6e:60:
3a:f9:58:81:8a:dd:48:97:3e:55:e0:18:9e:ab:e5:
a5:5e:8e:63:99:31:82:7c:ab:c0:c0:72:ae:98:85:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:F3:C7:5A:69:EC:FA:AF:1F:C9:76:6F:3F:A8:51:50:E3:79:CD
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9e:81:99:83:79:c9:a7:7b:90:5d:ee:63:cb:49:cf:94:17:
6c:b9:7f:23:fd:57:39:c2:6e:e0:d2:f2:2b:7d:e1:d0:ba:12:
19:6a:f3:0c:67:59:6a:dc:b4:64:21:bf:01:ed:ff:44:cb:83:
46:43:3f:4b:3c:72:68:01:58:8e:fb:60:9c:a6:c8:07:1a:49:
46:6f:fb:41:08:e3:5c:f5:4f:4c:b8:0b:7f:d8:4c:ff:ae:9b:
c4:01:f3:80:a0:6f:60:66:c4:36:b8:5c:04:6e:66:ac:fe:66:
63:e8:29:5b:6c:cd:8e:d5:9b:a8:1b:f0:bc:f2:b3:6d:b8:9a:
b3:2b:bc:b4:f3:a4:49:38:71:e7:ca:ff:66:2e:bd:74:86:54:
be:fa:a8:91:bf:1d:4f:83:7b:3c:bd:27:30:24:7e:38:b5:96:
d6:d7:7c:e6:89:a5:fc:be:2b:e0:f8:1c:6f:5c:4e:97:4a:c5:
47:e5:cf:50:e5:53:78:81:17:f0:70:77:53:93:f7:13:33:76:
75:c6:4a:b5:4d:f3:6d:d8:d1:25:17:6d:9e:77:45:04:08:ef:
5f:72:73:ad:29:96:e1:af:14:bd:c1:13:28:95:53:42:ca:fe:
e0:9d:26:65:62:68:9b:a8:ca:d2:af:f3:29:79:f7:76:c3:3f:
6b:24:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:53 2026 by rpki-client