Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: /7AC+KPJHu88671kAGlYfNwjCOKLuWy/367u3Ht5eUo=
Subject key identifier: 5D:60:60:8E:47:06:2E:17:42:57:40:D7:F6:FA:BD:F7:7B:FF:79:86
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 019D273AEAA3ACAB3C77EDC443B5E9A0454B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 0665
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: 6BVTRQ9ySxVgbPvPLhgiu2zCEnTBHwTevk0ZoK774g4=)
2: v8xN2-d0fpKAaThoNW-wrq46cas.roa (hash: w0wQ9b7+xzxFuqPdPpkrYcYWx9TLPMta+onXlpVwk44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ea:a3:ac:ab:3c:77:ed:c4:43:b5:e9:a0:45:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=5d60608e47062e17425740d7f6fabdf77bff7986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:f5:36:78:21:05:de:cf:c5:0c:6e:03:91:
c0:c7:b2:05:51:3a:03:12:c3:a7:b7:cd:f2:9f:f0:
bc:a6:0e:48:e1:95:f6:93:b2:65:48:5c:48:e7:95:
54:dc:e3:5e:23:59:50:67:46:3a:84:4d:c5:ad:d5:
43:83:8c:bc:18:b1:8c:f1:fa:5e:5e:9e:d8:00:a7:
03:ea:e7:d5:45:51:02:43:20:5f:44:a0:63:86:34:
38:33:62:6f:9f:43:ce:4b:e8:0f:79:ef:e9:6a:18:
91:48:b4:2d:e1:5c:f8:cb:f3:d3:23:49:bb:e1:f1:
87:fe:9a:7b:7b:cd:1b:27:3e:56:85:91:52:83:57:
f1:5e:4d:68:af:1f:92:a1:79:37:54:bb:02:82:50:
a9:63:7e:60:07:50:79:72:c1:eb:d3:2e:60:b0:b9:
87:12:da:ba:e6:9b:b2:01:86:15:e0:2f:fa:66:ac:
d1:be:8c:ef:65:3a:38:da:51:d2:5e:7f:da:47:51:
a0:4f:9b:44:b6:3d:47:30:1a:c7:3a:1e:2e:89:15:
45:40:91:14:5b:4c:1d:7b:85:ba:1f:a4:ae:fb:ff:
bd:db:f3:de:4b:48:ec:e0:45:1f:84:5b:a2:c4:6d:
54:82:06:e8:b2:c6:21:80:67:bf:1e:91:ce:7d:04:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:60:8E:47:06:2E:17:42:57:40:D7:F6:FA:BD:F7:7B:FF:79:86
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:2f:a1:1b:55:96:70:5a:93:cc:72:0b:7d:fe:01:71:e6:
a0:89:2c:5c:cd:ec:2b:25:2f:bd:20:0e:f6:bb:52:49:6f:2c:
14:0c:19:6a:e9:2a:80:f8:23:1f:ac:66:e9:69:e5:ff:a5:ed:
63:3e:35:57:1b:18:f9:0b:ae:37:20:09:0a:4a:35:67:10:64:
e7:cb:c7:00:0b:1d:09:a6:87:88:7b:58:3c:a5:4a:54:2f:f6:
8e:88:73:d7:27:e8:e6:35:7c:9f:a9:7b:e2:6a:07:35:6f:52:
a9:5e:86:3b:5c:37:2e:c7:6a:9c:99:89:00:2c:8a:44:96:7a:
de:bf:15:7e:85:84:f6:c4:80:83:4c:30:77:52:b8:16:be:bf:
28:08:fa:df:1d:68:b5:95:4d:ab:ec:35:ed:02:ae:c4:c6:c5:
f4:da:75:63:68:4e:f6:45:e6:3f:f5:ff:cf:47:de:f2:53:02:
01:31:58:cc:d9:47:33:cb:45:8f:a9:a3:15:07:d1:af:b4:0b:
a5:d9:b7:f6:86:7a:3b:0f:a4:c7:ec:72:4f:9e:20:5a:9d:1b:
3b:a3:13:e5:be:f0:5b:78:7f:08:e2:52:f6:0e:12:bc:d5:55:
d3:ce:ec:ff:27:0e:d4:b3:c2:b4:47:aa:f0:b8:e3:93:81:67:
8f:89:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:25 2026 by rpki-client