Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: SA6cK32GluFXma6XyUd7Iz4wWxMFSktinCwdAbCzNpQ=
Subject key identifier: C5:BE:AC:F4:B6:CC:84:4D:8F:FB:8D:06:48:DF:BC:57:E1:78:10:61
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019D2695EE8A13EAC6BEE96B8B0FD45E5156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 15D8
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: DJfLC27ZRlLjzQtg9ejcohCVl8k.roa (hash: VymrYhadJDvH9BE1CUEs+UkSRt9NAMcvnOkL0G00Mj8=)
2: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: 4fpMZhDNVNY1+UU9AL31BEHrGBFJaSf8mkC/c6C8E1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ee:8a:13:ea:c6:be:e9:6b:8b:0f:d4:5e:51:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=c5beacf4b6cc844d8ffb8d0648dfbc57e1781061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:aa:6d:cd:b5:83:4a:a3:16:79:7a:ce:38:
62:23:d9:a2:fa:95:8c:f8:92:87:d4:fc:c9:9f:25:
bb:1a:b8:55:8f:07:02:7a:37:b6:62:21:4e:6a:5b:
91:18:ae:b2:45:1d:2c:9e:a9:40:5a:ee:22:78:41:
dc:bd:f4:dd:0e:12:28:08:a7:5f:d6:b0:7c:d0:c5:
3a:31:05:d2:16:ca:d7:e3:56:d2:a5:7b:34:22:9f:
3f:c4:7a:2b:94:e2:16:bc:be:f7:78:92:30:7d:3e:
19:82:f6:98:61:ff:c4:9c:b5:05:a6:eb:21:41:f6:
13:98:39:ae:32:e7:62:26:ad:03:55:83:9b:d7:f5:
fa:4c:aa:6c:ba:f7:2c:35:96:92:2b:e8:d8:19:71:
c3:b7:b3:f8:2a:fd:bc:f2:53:af:dd:af:e5:48:76:
4e:e4:a7:ff:55:ff:5d:4e:8e:47:4c:bd:8b:77:d3:
9b:00:e2:e4:3d:43:a8:39:20:b0:b3:52:2b:04:8a:
3c:b3:ca:78:24:7f:c8:c9:17:e1:97:26:a1:54:7c:
f6:fa:d0:2c:84:3c:52:b9:a7:e6:4f:3d:e3:0c:be:
d2:c0:58:2b:e6:97:48:1a:26:87:62:0e:de:a0:9b:
ed:a3:e2:4f:46:f7:99:5e:5c:1f:fa:b7:15:5b:bc:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BE:AC:F4:B6:CC:84:4D:8F:FB:8D:06:48:DF:BC:57:E1:78:10:61
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:ce:26:fd:fb:e7:99:0a:8f:cd:0f:31:29:d5:cf:10:f1:
ab:a5:99:a4:6a:b2:f1:4a:4e:09:e5:18:8f:85:36:6b:42:71:
b5:66:de:18:c7:9f:52:c8:78:88:52:0c:e6:64:6b:46:2b:64:
b5:90:6f:b0:63:4d:4f:92:e7:dd:a4:e2:7f:e1:b1:f1:a9:f3:
68:1d:78:5d:9b:aa:e2:ea:d5:9c:57:8b:d9:f2:5f:5b:82:8c:
55:ed:b8:2c:78:d3:c5:7c:1c:a5:16:53:2a:1c:b7:df:7b:e2:
c7:1f:b1:be:28:d9:30:71:5d:ca:01:08:64:e9:ca:5f:04:26:
bd:8f:df:73:c0:62:53:14:ab:e5:cf:c0:21:70:0e:87:e8:c0:
63:9d:77:29:0e:5e:eb:7b:c3:6b:2c:0c:e2:84:2d:b5:6c:76:
59:2e:76:24:db:1e:a5:b6:49:ba:d2:b4:5d:ea:5a:2c:55:0b:
c2:dc:db:b3:56:61:f6:58:5f:02:e3:67:e1:e5:52:84:66:ee:
d0:c2:f4:95:88:21:63:7a:34:48:c8:62:f2:4a:d5:ad:5f:8f:
ff:3e:fd:1f:32:ae:25:42:06:86:f6:67:00:d1:23:62:ba:d8:
6f:30:c9:55:b5:42:b2:de:c3:2b:b9:1f:07:d6:17:f5:b1:f0:
4f:07:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:09 2026 by rpki-client