Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: 41HrrDB/9jskOW0V5JWwIhV9b70iydvbV5/VDENGJiQ=
Subject key identifier: 08:AA:C7:88:40:12:83:C1:2F:48:B5:8C:2F:76:B9:09:57:11:41:82
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019D24DE5EFE20AB8F173EC5E5F86EB9DF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: A4
Signing time: Wed 25 Mar 2026 12:00:45 +0000
Manifest this update: Wed 25 Mar 2026 12:00:45 +0000
Manifest next update: Thu 26 Mar 2026 12:00:45 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: D87BUDWmH63OKq4l1xebe7+LSqVXZPRIPI0ua3Motqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:5e:fe:20:ab:8f:17:3e:c5:e5:f8:6e:b9:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Mar 25 12:00:45 2026 GMT
Not After : Mar 26 12:00:45 2026 GMT
Subject: CN=08aac788401283c12f48b58c2f76b90957114182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:2c:89:8a:46:d3:72:e7:a3:af:df:fa:ef:
84:88:84:ed:79:07:ee:c4:b2:8b:9f:ed:e1:68:95:
99:da:5a:e2:41:c7:bc:c7:cf:b5:19:5d:3c:b0:a5:
b2:da:16:d3:d5:f4:a0:1d:ab:90:b4:18:62:75:2c:
30:85:73:37:0e:ff:86:ad:8a:a1:0f:c0:70:5e:67:
97:3a:74:ed:35:e8:30:23:ea:a5:8d:54:b4:23:d2:
71:20:3b:81:0a:80:fe:69:7a:60:54:2e:6b:ed:c9:
f1:30:db:9d:aa:01:93:09:a0:ce:f4:ad:94:d9:2a:
84:39:4f:6d:1c:bd:84:6c:4d:90:ee:8a:39:40:b2:
a1:9f:76:51:ad:81:d4:81:70:f1:6b:f7:0a:0f:a4:
be:ca:e4:f9:27:fe:24:18:22:f2:a6:e4:12:4f:52:
69:d2:5c:e1:fe:61:2f:b8:42:26:5f:4b:03:be:6f:
4f:8f:4f:eb:68:83:ca:bd:e5:73:ef:00:6a:d8:9a:
a1:6a:5e:98:ce:53:3a:0c:6b:56:34:b4:8f:24:64:
69:54:97:ad:ad:fa:9e:03:62:a6:3e:d8:53:cd:0a:
7f:fc:78:3b:12:41:33:ef:90:9c:b2:8d:b0:9e:fd:
27:01:80:3b:f4:d8:34:b0:30:62:f3:a9:38:d6:96:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:C7:88:40:12:83:C1:2F:48:B5:8C:2F:76:B9:09:57:11:41:82
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2f:6a:58:43:08:95:82:bd:5e:f3:a7:72:16:33:db:c9:6f:
07:12:78:e3:f3:81:f8:0f:60:e6:b1:32:a7:e0:c2:6c:6f:03:
f8:f0:06:fb:a1:d3:3f:fe:27:f6:fa:d9:d5:64:a0:87:44:22:
0b:6c:da:0e:29:16:6b:cf:8f:53:c3:80:44:02:da:58:67:48:
7d:aa:8a:d3:32:2a:8e:9c:52:2d:d8:ef:d9:f8:2d:a4:5c:96:
ab:4a:16:d2:7b:47:5d:e8:4e:34:bb:2a:12:7c:b1:b3:36:30:
fb:b3:c4:c9:c7:08:7d:23:2d:a4:68:15:0f:11:90:df:60:8c:
fd:7d:f5:f1:4a:c0:c5:55:d8:6e:25:bd:a6:09:de:43:8a:d7:
10:77:24:74:ab:d7:55:ec:0d:e7:9c:d8:b5:36:3c:f5:ad:22:
61:96:aa:d7:91:bf:28:7c:b7:9b:bd:80:2d:3a:4c:0b:90:ca:
6c:f8:7e:2d:d8:ff:83:18:d2:17:4e:56:3e:e4:20:12:7e:3b:
f5:0b:f7:e8:ec:ab:93:09:c4:88:a6:37:c0:8f:00:dc:1f:fe:
59:fb:e3:23:76:bf:8c:d5:7b:4e:cd:b0:fe:e2:cd:a2:5a:19:
67:46:44:5b:a2:ff:47:00:fa:13:39:7e:36:01:68:7b:6d:29:
2c:e5:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:17 2026 by rpki-client