Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: xxX9E/72tPzJ9v3uK7tWmHyCRGjfuVoGHwTLbAJzuro=
Subject key identifier: 89:59:54:8C:EB:C1:60:46:AD:4C:1B:F9:8F:46:AA:0D:BA:5C:5E:63
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 019D2628687B7D5DC4030D602C79CB8E41BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 0494
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: gujpeuXdKQltuUKd7nb7ecCwHu0.roa (hash: 2n9HbUvjLRQ1ByGXuU3L0Iu4zHU5gGJaPtEBGt//aPI=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: ndQAUC1YpQjGRf1nfS4ktEYq5VjuNLNN3GUCx3QJ/e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:68:7b:7d:5d:c4:03:0d:60:2c:79:cb:8e:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=8959548cebc16046ad4c1bf98f46aa0dba5c5e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:ef:78:49:c8:32:90:d0:7d:0d:f7:7a:9d:
ea:4e:45:66:1a:7c:be:5a:5e:29:17:44:4d:7d:2a:
9b:ea:ae:ea:c0:f7:bf:35:5c:cc:8a:f8:4c:a9:c7:
85:52:41:a1:91:16:57:61:18:d9:0d:cf:ca:f9:08:
32:5a:8c:30:6f:c0:7f:5e:83:f2:9a:c4:a8:1f:93:
36:a8:d1:c7:9c:53:23:cc:fb:57:45:8e:68:d3:30:
07:ad:45:a0:67:56:a0:e5:79:93:81:41:f5:39:ce:
ef:03:de:b7:88:f7:8f:cb:a0:8d:11:b7:bb:9f:f3:
1e:78:bd:84:6a:d9:40:8a:93:b4:da:53:90:fe:85:
c1:84:ee:96:76:c5:83:fe:8e:31:b1:0f:ac:d2:87:
16:96:aa:42:3d:89:0d:df:26:55:04:04:88:38:d2:
93:f0:75:dc:45:4f:51:8a:2f:e1:62:e2:12:74:c5:
7a:cd:ec:ff:93:9a:5f:27:38:1d:4e:f8:b0:e8:12:
e4:ce:fe:6a:b3:cf:b0:bd:d9:5d:99:7a:c6:36:e4:
5f:f5:ed:0e:a0:54:02:2a:11:19:81:55:cb:46:2d:
3d:0d:be:d3:de:b1:cd:fe:37:a2:27:8d:26:b3:aa:
74:38:52:e6:15:30:ac:a7:b5:cc:c0:74:88:b6:ca:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:54:8C:EB:C1:60:46:AD:4C:1B:F9:8F:46:AA:0D:BA:5C:5E:63
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:14:3a:c0:2d:07:b6:99:e0:a5:3e:43:4c:f7:71:b7:b9:af:
59:f2:c6:c0:46:06:42:4f:dc:89:ce:6a:d9:a9:bf:61:fa:b1:
ca:1d:50:a9:e3:28:e8:19:a5:e7:08:0b:ca:9e:8c:ea:cc:7e:
8a:69:e4:8b:bc:1d:32:b3:ca:15:32:43:9c:33:f1:e2:55:90:
b4:7a:49:d9:23:14:4c:7d:7e:b9:bc:94:b6:5d:2c:cc:51:6a:
df:0e:66:f8:07:41:d9:3b:53:89:f3:53:a0:d5:56:75:5b:3e:
6b:11:b8:e2:ae:41:7f:14:e8:62:72:a8:25:7e:1d:36:f7:cb:
ea:79:9c:50:8b:57:c7:e3:ac:f1:c0:97:dd:19:52:5f:5b:67:
98:71:c2:57:05:25:f7:20:4d:e1:f8:22:ae:4c:06:3d:79:3f:
3d:36:23:60:07:67:bf:ce:33:90:ce:0d:d0:a9:33:4b:7e:e3:
2d:22:d2:35:1a:db:2e:ab:31:e7:02:6f:7d:03:9b:b6:b5:af:
c5:b5:53:d5:61:9b:53:0a:4c:b1:d7:c2:5c:cd:60:09:4a:34:
0c:62:1d:57:b5:0c:62:8f:7d:04:d5:47:92:5a:f1:0b:07:b8:
4c:c0:39:7e:b3:47:37:d3:68:35:c1:99:2e:c0:c0:63:08:b7:
5b:27:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:48 2026 by rpki-client