Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: ooUFB77jQDlRMBZkio1TTRqFOztbM7vvZfLiz4f6aVM=
Subject key identifier: 5C:06:D6:84:52:78:7A:9E:97:25:A1:DE:59:05:40:A4:07:96:59:69
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 019D269640549A6087F9EA1A4979FE80BD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 1434
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: 0jTzYvTvypbh1yQ9qTkBShn1rSM.roa (hash: QibTqze93VmbmNq8kPjpcqM+im2jq6u0y0JdEMbhwrI=)
2: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: Bgc0omup+rvx29crgElgXJ2jDvWxQocNUoOLzNI133I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:40:54:9a:60:87:f9:ea:1a:49:79:fe:80:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=5c06d68452787a9e9725a1de590540a407965969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:21:ae:92:5f:4f:10:0c:d5:f3:67:ef:d6:
6d:fa:f3:fa:be:c1:c7:cc:4c:db:ca:12:52:9b:f3:
a4:81:01:cf:42:29:4d:a1:c8:45:3b:56:c2:8b:7b:
96:47:4b:91:57:d7:26:25:f6:09:4f:7b:7e:fc:e7:
9e:76:1c:fe:f6:33:cd:38:8f:4d:44:e1:f4:23:f7:
dd:b3:c9:97:be:ba:93:26:30:6e:2d:e4:bc:be:01:
a2:90:cf:05:56:3a:55:a1:4e:e4:28:d7:6c:36:1a:
94:4c:32:9f:b6:d2:90:cc:6b:12:88:1d:ed:cc:b1:
dc:63:b4:1a:50:95:71:55:92:dc:66:b0:c3:f0:c6:
68:11:3f:95:01:62:d8:c7:69:db:92:94:d2:f4:13:
8e:53:e9:f2:38:ae:d6:fd:4d:5e:60:47:f4:da:77:
e2:e9:97:30:37:d5:86:36:36:89:85:75:79:70:b7:
25:4f:1e:e5:7c:46:a0:65:35:f1:57:4e:a3:fa:c8:
ff:bb:4a:25:6c:50:18:2f:1e:8c:d6:67:2b:3f:d9:
aa:4d:52:bf:4d:ee:2e:71:34:49:1f:eb:a3:e5:5a:
a2:5b:81:3f:69:ca:8c:47:fe:68:9a:ac:f6:62:d0:
26:27:d2:c3:91:4e:0f:7d:89:cd:e9:65:03:25:56:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:06:D6:84:52:78:7A:9E:97:25:A1:DE:59:05:40:A4:07:96:59:69
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:4e:b1:5f:4e:87:d9:6c:89:37:75:68:7f:04:b6:42:f7:
88:d9:33:c1:44:d0:65:ef:bc:66:a3:6c:b6:a9:0c:3f:d8:a4:
2b:4f:10:71:a4:4e:38:27:bf:69:c9:cc:8e:99:7a:b9:93:a9:
ff:b1:07:31:55:18:44:3d:38:f9:29:79:ca:62:74:74:72:d6:
e5:3c:b5:9d:38:c5:b4:78:f1:47:ed:37:79:40:4c:cb:04:ff:
82:2d:bd:6f:e8:8e:52:f3:92:25:e0:19:3b:0b:59:de:1c:b5:
48:c7:e8:df:83:ba:e9:eb:99:94:d7:b7:5f:bc:34:44:64:02:
b1:5e:9d:bb:d1:e9:60:79:ed:4a:15:eb:c3:12:98:63:47:eb:
51:3b:91:b3:50:37:20:32:00:9c:3e:bc:10:53:cd:7e:9f:0a:
64:78:2e:dc:91:b4:84:9d:be:72:50:95:06:72:ca:f6:b5:16:
3b:74:88:5d:f6:32:45:42:75:15:48:4c:d8:8d:9c:24:e0:4b:
c5:63:23:87:27:d2:69:bd:ef:0b:ae:2a:72:b8:b9:92:84:73:
4a:bc:d1:36:de:64:98:74:d0:b9:30:d3:25:d6:f0:80:85:41:
04:39:22:d0:d1:1b:83:0a:dc:42:4b:b3:d8:8d:b6:cf:cb:60:
87:e8:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client