Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: Q5moWkNAk5M4LV95SVmp6X07IGEyetT/PM5pKq8gKnw=
Subject key identifier: F5:C8:F4:95:5D:67:CE:61:50:DA:EE:19:9D:66:72:71:55:7F:1E:3E
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019D2816AA543EF30BA55D72372714C95A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 08AC
Signing time: Thu 26 Mar 2026 03:01:07 +0000
Manifest this update: Thu 26 Mar 2026 03:01:07 +0000
Manifest next update: Fri 27 Mar 2026 03:01:07 +0000
Files and hashes: 1: 5lccFV7z00Cs1oDdNniBnwJlbmg.roa (hash: EKtkvQVGangOVXfHSHz8QSCp4ca+LhVxZlvPGnv/+3A=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: wj6jhr1oC46iN8KRid/Rdb1upQEXRNtluR4yOm7uXns=)
3: h2Nk51GuKgghBJnfq43oIlhnlQU.roa (hash: 7U6ydDPGZOGz+9K+gyHhz/1ZK19NLUr8kgoPbn/12NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:aa:54:3e:f3:0b:a5:5d:72:37:27:14:c9:5a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Mar 26 03:01:07 2026 GMT
Not After : Mar 27 03:01:07 2026 GMT
Subject: CN=f5c8f4955d67ce6150daee199d667271557f1e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:b0:7b:01:b3:db:b4:5b:0e:21:7e:68:21:
67:a8:5a:b6:2c:8e:f0:74:ec:4f:dd:45:35:76:68:
73:1f:35:0b:cf:51:f3:92:c8:fe:3b:c6:4c:ab:45:
6d:af:59:50:c8:2b:ee:d8:ec:b3:ac:62:a0:b3:70:
9a:c2:24:99:f0:f2:53:af:9d:2c:5c:67:07:f9:25:
1c:86:84:3e:a2:3d:48:70:5e:b4:c9:84:87:84:63:
03:9c:97:8a:13:05:d3:81:a0:77:c8:95:f9:e5:4c:
83:98:f0:52:e9:17:e0:61:54:12:67:c2:da:27:4d:
0c:a9:93:04:c1:2b:56:9e:c2:fb:fa:49:f1:11:c6:
db:0e:28:d9:24:ef:e4:c6:12:db:5c:46:f9:ef:5b:
fd:aa:b2:49:22:01:e3:1e:0e:8b:a0:6f:d2:12:c0:
c5:eb:44:90:6f:b7:43:05:38:67:75:c8:ff:4a:11:
4a:14:db:2e:38:ee:d4:d1:1f:ba:17:5f:72:24:12:
99:0a:41:d0:79:e9:22:d5:41:27:dd:cf:b4:5b:6e:
58:ca:9e:60:b5:2e:d3:83:a8:11:57:79:f2:c8:70:
b0:bb:81:e0:b4:05:9c:86:b0:7b:69:e8:f1:91:bb:
b1:ab:84:2a:c8:8b:34:67:85:f3:99:79:de:c2:20:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:F4:95:5D:67:CE:61:50:DA:EE:19:9D:66:72:71:55:7F:1E:3E
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:60:76:f0:aa:5b:11:8c:94:80:95:de:52:ab:1b:09:48:
2a:85:34:dc:12:b2:d9:1b:be:55:62:19:e1:06:d9:9a:9f:77:
1e:4a:23:06:88:ce:87:ed:2f:0d:19:ce:cb:33:74:ac:09:bc:
ae:28:11:b0:8e:b7:59:4b:c6:30:2c:ac:94:f8:15:a7:ba:be:
55:3c:07:51:a7:5d:ff:ca:57:2e:60:41:68:d0:65:37:f4:39:
53:0c:47:fe:c5:bf:02:9e:11:93:8a:6c:21:cb:ce:1b:43:88:
5e:d3:ce:21:32:8b:c0:7f:5f:32:e5:19:93:d0:ec:39:cd:d6:
c6:d2:b2:89:2c:94:b1:b0:04:90:c6:4c:a1:19:c3:71:bf:3f:
0c:7d:5a:a2:cd:2f:a9:a0:c4:7d:c1:08:eb:19:52:3e:11:10:
b9:3b:7e:15:22:04:73:01:72:2a:e6:f9:b1:aa:ad:1b:45:b2:
6f:33:71:52:ad:14:7e:f8:e8:18:8a:58:b6:e0:01:15:a0:1a:
dc:0b:62:21:8e:4e:a0:79:bf:a0:28:d0:90:c8:d1:90:d3:cc:
1d:5c:88:db:1f:48:94:ad:c0:48:db:89:1c:70:f8:d8:a6:ac:
27:1b:30:0c:0a:86:d2:7c:c0:37:e9:4d:8b:55:58:f3:fa:d0:
05:13:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:34 2026 by rpki-client