Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier: +zI+/enyn1sw1INCFoXe7GrnB4FReZA49F3Ua5q4/F8=
Subject key identifier: 04:3F:02:B5:59:CD:C0:F7:42:79:02:BB:83:3A:B5:35:0D:53:B7:29
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 019D273AEB37D1B201C0C6FC8159276FD024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number: 1627
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: aO2ZlWLbMjM6ILrdeRaGhaKttR8.roa (hash: Rh3oaacN+KK3Ek4ghfhfmihUkTVyNL5b9I6KnwPFkBY=)
2: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: 6AOxRhOT9gmU2lO9yOXb76svWE8u6rLUYx1NVVGRGE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:eb:37:d1:b2:01:c0:c6:fc:81:59:27:6f:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=043f02b559cdc0f7427902bb833ab5350d53b729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:e3:58:bd:c2:4b:dd:8f:32:79:4d:9a:60:
31:03:9d:fb:66:ee:0a:9f:65:ae:94:2b:c3:f6:b2:
51:96:ef:9b:5c:dd:ab:96:89:26:a9:84:83:75:42:
d3:69:c1:5e:1d:a9:9a:65:90:e8:53:72:ea:08:6a:
ef:4a:9f:85:6f:b5:56:4c:5b:7d:3e:b3:2b:d5:b8:
1a:d2:d6:2d:05:8d:2c:23:dc:02:0a:0a:1e:31:b5:
90:16:59:1d:a2:98:bb:92:b4:72:21:9e:27:cc:84:
73:10:fe:f6:8f:82:8c:44:05:54:f5:40:c8:ae:81:
b2:66:d4:fd:39:79:b1:78:15:fb:99:4f:a0:41:25:
59:c4:3f:7e:ed:8d:13:5a:b1:49:68:39:c3:63:bf:
fb:8e:6e:14:be:60:56:22:9a:51:a8:d5:65:a3:0d:
70:89:e0:82:c8:e7:9e:a9:10:3b:27:6f:d9:94:73:
11:55:74:55:e5:9d:98:23:9c:4f:6f:3a:35:f3:6f:
c8:c0:6c:77:04:b7:96:0c:7a:27:97:14:55:30:4e:
d8:0c:e5:df:e9:e2:29:33:b5:04:75:58:14:7b:75:
70:6a:fa:43:2d:32:1c:5c:11:0f:f6:6f:36:16:32:
69:fb:5c:40:fd:0a:32:09:f6:7c:ca:58:43:2d:2c:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3F:02:B5:59:CD:C0:F7:42:79:02:BB:83:3A:B5:35:0D:53:B7:29
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3d:1b:3b:56:38:d7:c3:f0:f2:21:43:12:c1:d1:ea:4d:34:
74:87:e3:72:3d:75:66:8a:31:1f:93:37:49:fb:68:73:33:e0:
21:fe:4a:84:d9:d0:40:a8:ff:ad:e1:95:da:cd:3a:a6:58:e9:
2e:97:35:9d:69:65:e5:59:d1:0a:d8:fb:ae:a3:95:14:1d:c2:
e8:da:90:49:3b:b8:2c:3b:25:3c:d3:7f:f9:c1:75:a1:77:c4:
b3:5c:f6:97:3b:69:4d:b6:ed:8b:86:77:00:65:9a:77:05:2e:
d7:50:75:47:42:71:aa:3c:95:4e:6c:4e:70:34:78:00:67:a4:
b0:f8:f9:97:5e:6c:b9:da:93:ce:d3:40:bd:d0:58:00:1e:21:
2a:12:90:86:9c:a0:3f:53:da:94:86:36:40:91:51:c7:cd:13:
0b:e7:95:a5:16:4e:8f:c3:77:c7:96:5d:19:ce:8d:4f:c5:c0:
e7:40:7d:af:09:a9:53:da:27:d7:b6:e9:ca:0d:d2:76:67:a7:
81:4f:2b:ff:ec:fc:82:84:59:93:52:20:aa:76:b4:e6:a1:66:
1d:8e:1a:de:e3:17:39:14:88:48:a0:ca:86:5c:09:23:23:61:
67:ad:c5:df:44:76:69:1f:9a:76:fb:d5:0a:d7:63:9f:45:fe:
3b:86:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:59 2026 by rpki-client