Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
File: kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft (raw, json)
Hash identifier: YEJ8D2z50EhgaJsiJflsIxJRibVXHoS2sei8BUtNdcI=
Subject key identifier: F5:60:D6:FB:F6:87:49:83:6B:7F:0C:51:3C:6D:9E:5A:74:E3:7F:57
Authority key identifier: 91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B
Certificate issuer: /CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b
Certificate serial: 019D2A3C456CD6D5DB806271C04F4759C4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
Manifest number: 0162
Signing time: Thu 26 Mar 2026 13:01:26 +0000
Manifest this update: Thu 26 Mar 2026 13:01:26 +0000
Manifest next update: Fri 27 Mar 2026 13:01:26 +0000
Files and hashes: 1: KpOVliaxx-PBOI1CU_TAZ5HhafU.roa (hash: ABc8FPfWa63f8LmgxSlPOmwLetsBlnynj8+00ypF/DQ=)
2: kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl (hash: ewZ0X+V7JpAvxn7aecBxQHGLA1T2YQ76zJAt1wHQoO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:45:6c:d6:d5:db:80:62:71:c0:4f:47:59:c4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b
Validity
Not Before: Mar 26 13:01:26 2026 GMT
Not After : Mar 27 13:01:26 2026 GMT
Subject: CN=f560d6fbf68749836b7f0c513c6d9e5a74e37f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:a5:03:32:c5:69:69:4c:80:7f:c2:04:46:
b6:19:69:6b:a3:ac:76:66:03:05:55:38:65:02:9d:
99:08:23:dc:f5:63:15:da:c1:f7:ae:5b:5f:50:fe:
d3:02:99:b2:27:dd:2e:84:5e:cd:2b:d5:61:58:f3:
f8:7b:30:87:d8:a3:1c:02:f0:05:42:9e:de:e5:b0:
f8:06:23:13:9a:93:ce:68:bd:62:49:3c:71:86:08:
bc:98:b9:7b:4b:43:be:19:26:56:5c:df:29:e0:bb:
4f:3b:ac:12:66:8f:d8:9d:c9:fb:59:6b:69:af:df:
b6:7c:e6:ec:72:17:40:dd:ff:10:70:04:a4:f8:b0:
ae:00:dd:3c:6e:01:09:1d:3c:6b:ab:b0:c2:96:39:
5b:8b:c0:9b:6e:6d:11:46:06:e6:e2:21:f9:33:39:
5e:38:c8:48:e1:55:cf:8c:cb:0b:2c:8c:76:d6:f8:
a8:1f:e7:6b:57:a2:ef:c2:a0:99:bd:7d:4d:51:90:
6c:36:7f:a3:c2:e5:2e:0d:28:97:50:a6:15:41:35:
ce:52:52:90:dc:60:58:f2:f5:49:52:b2:3b:29:32:
f1:94:18:20:55:7a:22:72:94:b1:78:cd:1f:71:9a:
a2:57:a6:33:fb:56:9c:8d:90:2a:3f:29:6e:53:fc:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:D6:FB:F6:87:49:83:6B:7F:0C:51:3C:6D:9E:5A:74:E3:7F:57
X509v3 Authority Key Identifier:
keyid:91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:a1:cd:2c:16:6a:4e:4a:49:db:31:d5:18:c2:08:79:63:
e2:27:d7:ca:c6:db:e2:d1:f0:90:e2:e7:79:84:0e:68:6a:87:
50:6a:f5:90:d0:14:a8:a4:e7:1c:a5:23:13:3b:9e:35:f5:cf:
c4:e0:62:02:b7:4c:93:70:d1:97:81:5d:0b:5d:a7:fe:46:bc:
85:f8:8f:f6:43:7e:e6:7a:52:28:cf:99:3a:b1:c9:90:32:9b:
03:69:aa:0c:72:16:ae:16:fd:17:e0:e1:7f:3d:a2:b5:0a:4a:
4b:eb:23:65:57:fd:e7:7c:c3:35:7d:f3:f4:39:da:a8:2c:cc:
f3:ff:57:1b:90:91:bc:a1:f1:a1:ba:bb:cd:e4:8c:62:af:0a:
71:e3:5c:39:9a:08:8b:1a:fe:d2:94:bb:0b:22:8d:66:6c:2e:
32:41:5e:42:64:50:a8:0b:ad:f7:4d:75:62:15:4f:9c:2a:a3:
cc:a6:5e:68:f0:f5:86:ab:c2:7b:33:6c:84:03:44:82:43:d7:
27:ff:7b:cc:25:5f:37:83:b3:0d:35:da:3e:7e:aa:ab:c3:c3:
61:f9:87:55:54:bf:fb:0a:be:1e:5c:77:9b:cf:51:68:71:31:
5e:53:c2:78:3d:af:ea:76:00:7a:54:8f:3e:e3:98:67:4e:2e:
cd:7f:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:30 2026 by rpki-client