Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: Ff66WncPKmNKiIq8A4FNA5wQJY+BYWTAaSoyia0JHaw=
Subject key identifier: 22:16:64:02:32:67:38:25:C5:84:A7:14:F5:D8:DB:06:31:CA:CC:9C
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 019D28BB8620CED7120CC17F8F057168AE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 125A
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: fEyQPPeKri3xxIwF-GK2DK9OO9c.roa (hash: 7YArpvgzsRn7tFDaYlxf0t+umiWwVKrDBhvgYPCrlAc=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: BkXfF+sk8CrpW9C4JYj7fnfiQzaKs9ZqTRwxdTIZc7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:86:20:ce:d7:12:0c:c1:7f:8f:05:71:68:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=2216640232673825c584a714f5d8db0631cacc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:45:5f:72:85:f6:da:1c:10:89:67:dc:4c:
bf:7b:60:c5:a1:8a:97:e3:59:50:cd:65:68:07:e2:
49:b2:f4:86:28:a7:6b:56:0b:0f:e3:46:97:3e:ea:
c2:74:a3:1d:ca:f8:23:8e:be:9b:6e:ea:aa:ad:b6:
17:a9:d1:b2:38:c6:4d:ad:8f:8f:a0:2d:d6:01:4c:
fb:2d:bf:ed:34:01:23:59:8e:08:50:81:e3:87:f8:
ac:7e:e8:5d:73:c0:fc:15:f9:51:3f:42:cc:01:9a:
7d:8e:c4:93:af:ae:55:e8:cc:4e:84:25:87:14:d2:
26:fd:34:63:8c:b4:0b:92:1f:c3:d1:a4:0a:6c:a4:
b9:c5:d6:f5:3d:63:0f:ad:7b:0e:49:68:2f:bd:3c:
3f:88:95:e9:71:e0:4f:fc:34:bf:a2:b2:c7:9a:51:
1a:66:b5:8e:50:37:57:71:84:2f:a6:4c:70:69:9c:
96:b5:a5:01:94:e9:46:9a:bc:5d:19:a0:92:f6:6c:
3b:03:a6:78:0b:c9:5b:68:28:bb:b5:93:f8:58:3b:
08:e8:ee:29:4b:47:b5:15:a1:02:97:69:d0:3f:f2:
f7:35:90:a0:82:5f:d3:39:66:93:99:11:5c:2b:cc:
92:59:64:08:a7:f7:ef:89:7c:e2:77:a5:ea:e4:fc:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:64:02:32:67:38:25:C5:84:A7:14:F5:D8:DB:06:31:CA:CC:9C
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:3a:42:18:42:54:b4:59:a7:a7:ab:cc:35:93:38:8c:2d:
a4:b8:bd:4b:c9:9c:81:b3:4c:b9:ed:ff:b3:c1:7d:f8:c6:ee:
b9:9d:d7:b5:8f:96:ad:f1:c6:0c:c2:c1:34:fa:fc:13:57:8c:
25:1e:b9:66:0b:2f:e5:4d:5a:a2:17:4a:21:91:14:ad:eb:df:
32:d8:30:08:e1:f2:54:b9:ab:e3:34:ed:f0:db:f8:b5:05:33:
0a:a6:68:5a:5f:f7:fb:4a:21:f2:7e:e0:ed:c6:a0:c5:ad:15:
a1:7f:4e:2e:c1:2c:74:5e:01:47:69:35:3e:60:1d:c1:48:f5:
2d:b1:a7:14:2e:00:13:cb:89:3f:cd:90:d5:ea:36:46:8e:95:
e7:5a:83:99:2f:cb:cc:01:2e:34:3c:91:f4:2a:d4:59:7d:0d:
9e:67:07:7f:62:99:c0:46:7e:6f:6a:16:bc:86:f9:d7:b1:26:
7f:db:67:22:d3:5c:cb:a6:a2:73:c9:4f:e0:77:b2:58:da:4e:
dd:cd:2b:4d:a8:c2:78:08:21:d9:ad:86:eb:fe:f2:4a:83:f7:
c0:64:5e:65:8b:d1:f1:65:44:27:46:60:38:a1:14:e4:66:da:
0f:2e:08:2c:06:4b:8f:a3:1f:ad:64:19:1b:ee:40:e8:75:ee:
82:33:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:07 2026 by rpki-client