
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: WZdESMXsJdsK5ax04L+PNUFgFznIipry3RZ2mo+OFE4=
Subject key identifier: EB:5F:EE:98:88:6C:08:F1:42:FD:61:FE:8C:4F:CC:77:EF:CD:15:E0
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 019D265FE2276A527E6F25560F65337B4FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0B83
Signing time: Wed 25 Mar 2026 19:01:51 +0000
Manifest this update: Wed 25 Mar 2026 19:01:51 +0000
Manifest next update: Thu 26 Mar 2026 19:01:51 +0000
Files and hashes: 1: epkM5me6VO4WBfsP3OBY0X-ejFw.roa (hash: zpYuo9uFqGN49lIwpVPfYA+YcKIr1TU6tf2Nb7fQdzM=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: z5nofM7FTuCVEBGkOSBMaOKXS/tl3y/vzcwPt7vvOu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e2:27:6a:52:7e:6f:25:56:0f:65:33:7b:4f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Mar 25 19:01:51 2026 GMT
Not After : Mar 26 19:01:51 2026 GMT
Subject: CN=eb5fee98886c08f142fd61fe8c4fcc77efcd15e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:65:3a:7c:e8:a8:55:fa:4e:ae:0a:c5:19:
1c:f6:f6:8b:16:a8:f2:f2:0b:df:df:d9:88:44:79:
87:ba:6c:ea:ae:5d:6f:56:ef:7b:f8:e0:3a:87:e7:
c6:33:05:17:27:e5:81:55:80:ae:07:44:c4:06:a0:
49:42:17:4e:c5:00:41:81:75:db:93:5d:8b:51:5a:
ed:dc:82:f8:dd:48:ee:4a:34:0d:59:90:96:b5:dc:
2d:39:5b:b9:fb:63:fc:ed:7f:2a:8b:3e:51:eb:09:
c3:9c:ef:15:67:64:4d:5a:a7:b4:06:83:3f:c8:67:
16:f2:d3:b7:e1:a3:86:19:e7:6e:01:77:63:3c:81:
6b:f8:ea:98:38:f1:3e:6d:28:25:21:07:71:62:1a:
b1:91:99:ab:d2:55:b9:73:83:22:3c:f9:7f:05:80:
a2:e2:de:20:4f:c0:92:28:9e:96:2d:ec:0d:cd:df:
61:e6:76:91:39:a1:9f:36:db:b2:ed:85:27:c1:cd:
2d:17:40:89:fd:4b:a5:91:09:1e:68:ef:11:3a:8e:
be:98:59:e0:9b:6f:38:0d:32:c9:cf:3b:39:31:e5:
be:7d:5e:b8:44:5d:a9:b9:a5:84:d2:88:f5:89:91:
13:ef:c6:04:c3:9c:42:af:be:ec:f1:fe:08:4d:4c:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:EE:98:88:6C:08:F1:42:FD:61:FE:8C:4F:CC:77:EF:CD:15:E0
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:5b:ea:70:8e:5b:9a:06:52:19:ce:f4:68:6e:b3:2e:7a:
a1:11:d4:b3:c9:7d:30:cd:4a:52:a0:6c:cf:3a:28:6c:33:2f:
5e:f6:49:2a:cf:d2:84:8e:fa:70:43:25:2a:ae:e4:03:bd:05:
18:98:92:1a:50:c9:e7:0d:87:bf:93:ca:fe:48:66:8a:86:6d:
4c:ce:20:29:08:49:ab:46:ff:50:e0:ad:78:89:49:3c:01:39:
4e:1f:3a:38:2d:1b:91:e6:8b:1f:6e:2b:ad:32:66:ce:08:73:
0a:be:32:3b:54:ce:69:48:2b:c0:20:95:a4:69:98:fd:71:b1:
8b:b6:6e:5c:9b:97:bd:5e:93:7e:24:00:6e:28:c3:4a:27:83:
5b:6e:92:cd:c7:05:0a:8b:36:8b:1e:83:f7:9a:10:37:71:29:
8d:cc:dd:89:f7:42:a6:f2:25:82:07:b0:eb:c4:cf:a0:d6:bd:
25:72:63:a7:f7:0f:02:00:0b:7e:a7:99:97:ed:ed:99:12:0e:
d2:01:52:cc:66:62:2b:f1:90:fc:3d:2c:aa:50:06:d9:03:b4:
2d:6c:e0:b5:b2:a6:b0:08:37:3e:53:b1:60:c1:36:1d:22:bd:
dc:93:a7:6b:0b:de:50:57:78:c7:fc:45:c6:ed:5a:fe:2c:dd:
5d:74:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:05 2026 by rpki-client