Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: hJuLiuONSaDY5bfjvz4ar6CXnK/BZAxbgleGE6DZRkE=
Subject key identifier: 95:5D:30:76:9A:23:1E:1C:38:3D:16:43:C9:BB:5B:EF:12:25:F8:11
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 019D284E2C993C8F53E0AA279F7C1130D2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:44 +0000
Manifest this update: Thu 26 Mar 2026 04:01:44 +0000
Manifest next update: Fri 27 Mar 2026 04:01:44 +0000
Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: a7WPQao76dBnupMTKGp+MdZW1mrBymXVVtC47teenFE=)
2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2c:99:3c:8f:53:e0:aa:27:9f:7c:11:30:d2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Mar 26 04:01:44 2026 GMT
Not After : Mar 27 04:01:44 2026 GMT
Subject: CN=955d30769a231e1c383d1643c9bb5bef1225f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:6f:49:07:86:96:0e:08:c1:60:17:30:54:
09:59:c5:a8:16:de:69:a3:fa:3d:d0:79:70:d5:52:
2d:ee:c5:5e:34:ec:04:0a:35:34:92:97:bc:ae:f1:
15:c3:80:33:90:77:49:71:bf:b7:bb:e3:f4:83:2c:
47:f9:39:ec:fd:35:60:57:7a:f5:26:4d:55:9b:8f:
2f:db:19:ec:ed:02:b2:ea:63:75:d9:06:a2:77:ce:
38:e3:74:55:b0:64:55:97:d9:c1:57:82:01:81:f6:
55:d7:b8:7a:2e:dc:ae:1b:78:23:8d:06:63:c7:08:
6c:0b:d0:1a:6b:02:c6:22:3a:44:83:35:cf:e0:b5:
fc:18:89:97:80:0e:88:1a:e1:93:76:2f:40:a7:65:
fa:41:47:e0:f7:f7:a7:8a:87:80:ea:50:c2:2b:b9:
56:d0:66:b3:8d:cf:1d:be:f2:71:31:5f:39:89:55:
b9:03:2e:b1:10:d9:8a:7b:2a:ef:8b:1c:b4:2a:63:
9b:4f:5f:35:f9:78:41:02:46:c7:e0:82:65:34:c7:
f7:9a:dc:5d:d5:6c:21:d4:bb:75:e9:2a:0e:eb:90:
5a:76:f8:48:37:f2:3c:df:31:43:38:8e:d6:35:18:
13:b1:a8:24:9a:09:71:9a:83:9d:9f:8b:cb:38:b5:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:30:76:9A:23:1E:1C:38:3D:16:43:C9:BB:5B:EF:12:25:F8:11
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:8c:5f:dc:5b:a9:6e:82:b6:9e:00:44:ce:0c:74:28:6e:
70:fe:cc:55:03:4f:8e:7d:77:a0:76:2c:de:db:92:72:89:ed:
5a:2d:7f:2b:82:f4:03:6b:85:04:34:42:60:38:38:02:4f:b8:
2e:7f:7e:9f:c6:6d:7d:11:d8:eb:9d:36:16:1d:9c:dd:ac:31:
11:61:9e:ef:70:78:50:14:0d:ec:df:9e:fb:88:a9:09:93:53:
25:3e:29:86:5f:d2:cd:54:90:e1:eb:5a:a7:88:3f:fe:59:44:
0f:be:b8:77:8f:4f:df:32:0b:90:41:97:51:45:69:d8:81:0d:
2b:32:a4:4c:d0:0d:bc:77:39:97:e8:05:6f:66:79:9a:19:1e:
ae:3b:7a:32:02:e5:72:67:4f:69:d4:83:51:c9:c0:cb:d1:ea:
30:96:10:e8:e9:00:58:f6:6c:9d:c1:cb:4e:9f:1c:eb:fe:5b:
3f:bd:a0:5d:d4:7a:47:a4:e2:27:f9:bb:97:7e:cb:41:41:78:
af:f3:f0:ed:a9:08:07:c2:9f:81:59:90:76:cb:9c:77:0b:94:
ba:63:1c:31:62:3b:18:d3:f8:f3:f8:35:16:32:76:15:32:97:
9b:55:d3:91:9a:1f:81:87:c5:ff:ac:31:3c:0f:4c:ec:a7:36:
33:65:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:29 2026 by rpki-client