Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: QXvvfhMTrSNXymDDFlMkq0OQxUJRB6J0d16Y5aN29V8=
Subject key identifier: 03:00:46:CD:2B:6F:00:2B:78:69:49:E5:5D:74:3C:AC:98:90:F4:C8
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 019D2B85B01C353FE1D9E29A1209AAAE337E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 140B
Signing time: Thu 26 Mar 2026 19:01:14 +0000
Manifest this update: Thu 26 Mar 2026 19:01:14 +0000
Manifest next update: Fri 27 Mar 2026 19:01:14 +0000
Files and hashes: 1: 5CJG92RL_wOYtceHYto7DpaCLq8.roa (hash: YnVo19Ej3LF/ddSCbBkhgWA4GgWkw1sQBQ9uMvkU5YI=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: UdZd52Om+zFab44x8HlM0O6Fc+fcmeWdhKe69fWbCpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:b0:1c:35:3f:e1:d9:e2:9a:12:09:aa:ae:33:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Mar 26 19:01:14 2026 GMT
Not After : Mar 27 19:01:14 2026 GMT
Subject: CN=030046cd2b6f002b786949e55d743cac9890f4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5d:b1:2b:40:49:c2:51:07:5f:f6:ad:be:ca:
71:20:bf:fe:5f:a8:aa:4d:0b:78:4e:77:76:43:12:
8c:f2:15:04:4f:c8:4b:55:50:ab:f6:46:36:67:cc:
69:22:76:2e:99:2c:75:36:f3:eb:d6:4c:f3:f9:46:
1a:05:54:ee:64:85:e6:a0:83:65:c8:cc:43:21:aa:
ef:8f:01:5a:35:5c:c0:9c:1f:60:8c:cf:12:cb:0f:
4a:5f:83:2a:04:28:65:30:7c:86:c8:c0:d3:2e:d8:
c3:92:fa:b5:7a:9c:a6:43:e5:5d:68:77:3d:6e:21:
fb:ee:b1:ce:42:46:8a:a8:53:5a:70:a2:86:4d:ad:
94:ac:22:5e:58:84:56:f0:76:c0:b6:3f:a1:f9:5d:
08:08:94:8f:7c:b9:4a:5a:ed:f6:a4:6a:8c:0d:f5:
73:77:4f:39:d5:e4:07:d5:9e:8e:a3:1a:4a:c2:89:
0c:ba:a5:01:bd:bf:5d:76:e8:90:d2:3d:d9:db:29:
00:7e:3d:d6:f4:24:3a:e1:7d:f2:1a:3d:42:78:98:
e1:52:5e:1f:d3:f5:2c:f4:ff:b7:36:b5:56:3b:d0:
e9:3f:78:cb:f4:02:6a:7f:4c:33:34:37:f4:48:f8:
2d:dc:8a:bf:0d:99:94:14:10:da:22:4d:03:4d:bb:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:46:CD:2B:6F:00:2B:78:69:49:E5:5D:74:3C:AC:98:90:F4:C8
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:81:a0:f2:85:dc:30:a7:55:d6:45:66:05:ce:9b:24:0f:
78:a8:a9:2e:60:10:52:c0:6a:4b:86:cf:2b:cc:09:d3:b0:49:
09:a3:b6:96:2d:c2:6c:a4:9e:6d:e8:3a:71:96:2e:81:8c:84:
9b:95:56:12:b7:7b:ef:42:27:f4:1f:44:81:3e:57:a9:a3:8f:
39:14:27:88:8a:c8:53:04:e6:15:9c:13:34:5d:3d:c0:83:66:
15:95:ef:66:49:e9:93:9e:8f:e5:e0:cb:44:f9:1e:a3:54:bd:
56:80:11:28:41:d2:b6:05:f5:aa:df:da:3d:50:61:59:e8:5f:
7d:91:25:58:58:3a:0b:56:18:61:e3:d1:96:48:4e:02:f9:0c:
40:85:bd:2c:82:98:47:b1:52:5d:fc:6f:01:77:71:68:20:18:
31:8e:35:cb:69:22:a3:d8:a7:f0:23:58:cc:b0:59:b8:9c:3c:
a0:eb:f6:2e:fe:9c:10:b2:f0:0b:ab:6a:db:b2:ed:02:7c:e0:
0a:af:76:6e:32:01:f8:bb:a6:a0:35:e7:2c:ea:2f:4e:60:6f:
94:ab:a5:29:57:8e:e9:5a:75:a1:46:e3:4b:9b:6c:8d:01:da:
71:86:c3:ec:fa:70:74:8e:f9:6a:76:68:1c:34:d7:ab:b8:4b:
54:b5:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:20 2026 by rpki-client