Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: rNp9xaG7aCKFaRNlaX/MJU2dmbNstXaaCP/dtLNDVyI=
Subject key identifier: 0B:13:FD:15:72:B8:C1:F0:C3:4C:3D:78:68:D7:A7:B2:5D:6C:83:A0
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 019D2A72813E858D042ED919DFB7870134F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 14:00:40 +0000
Manifest this update: Thu 26 Mar 2026 14:00:40 +0000
Manifest next update: Fri 27 Mar 2026 14:00:40 +0000
Files and hashes: 1: ih-3YsLOSbY8XiT3lIzOWf-7eTY.roa (hash: 7NJE9V/fbc3b1ZmP0ysm7266DOh/4fJjEJm4cdCDO5o=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: kBqKdz9DxYUmB9TYNF1Cadyu+njs48Hm5O6ZXbOHQbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:81:3e:85:8d:04:2e:d9:19:df:b7:87:01:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Mar 26 14:00:40 2026 GMT
Not After : Mar 27 14:00:40 2026 GMT
Subject: CN=0b13fd1572b8c1f0c34c3d7868d7a7b25d6c83a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:f1:6e:a8:60:30:8b:85:b4:8b:8b:d3:0b:
27:ad:15:64:11:97:f4:e4:c3:e8:47:d0:30:3d:24:
1f:fe:3d:cf:68:44:99:fc:18:ff:a8:eb:fc:e8:f5:
5f:79:80:0c:93:35:22:48:23:81:e6:8e:c1:ac:e8:
de:c9:dc:21:d9:e0:5c:e3:44:8b:af:a3:1b:fc:80:
60:98:38:57:6d:21:a4:32:96:b8:ba:19:a2:df:52:
4d:ba:8b:82:f1:85:bd:1a:0c:29:92:a0:2c:bb:97:
a0:89:d5:3e:83:9a:ce:17:0f:22:c0:79:47:fd:f6:
20:0a:86:30:00:d0:8c:dd:4b:0f:ad:31:05:4a:5e:
75:ae:50:80:4f:d4:69:3e:62:b0:32:33:c1:2e:f2:
c5:1f:4e:60:c3:d1:a3:21:a2:63:fc:37:3c:9e:45:
b5:e9:36:ef:7d:19:81:34:89:98:30:a6:e3:3b:a7:
e6:5b:25:9b:4b:08:de:64:87:30:96:1b:9c:c7:96:
5b:e9:15:57:e8:a4:bd:fc:fe:ef:05:78:0a:d1:d7:
d2:7f:00:15:2e:3f:5a:35:7a:b9:24:f6:d1:15:27:
e7:70:3d:57:1c:79:5d:db:ee:c6:95:0e:e6:3e:ca:
51:d2:b0:fd:54:6d:29:b7:b9:f5:70:a9:59:9c:9e:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:13:FD:15:72:B8:C1:F0:C3:4C:3D:78:68:D7:A7:B2:5D:6C:83:A0
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6e:06:3e:9a:22:ad:b0:8b:db:21:db:b2:5c:e9:10:77:91:
38:79:3e:dd:49:b5:d8:e2:c0:10:cb:49:4d:81:1b:be:d4:27:
4f:52:d6:d2:db:9b:39:fa:45:f0:d7:57:18:69:72:85:b8:ff:
b3:13:60:45:54:c2:ce:0a:7c:28:8a:0c:67:17:2f:b1:ed:80:
97:4d:67:c4:19:ec:5b:66:23:87:49:e2:3a:e4:80:72:f8:73:
92:48:30:0c:e0:c9:53:a5:4a:3e:bb:52:98:a6:60:ef:ec:14:
13:3c:8a:4d:0d:3a:c9:ff:76:0c:55:ac:c4:86:d8:5c:eb:5d:
49:bc:b8:fd:3b:1f:d0:d1:cf:1c:be:e0:a4:92:6c:37:69:d2:
94:c2:1f:cf:c0:27:0d:87:2e:de:86:24:59:52:ad:99:7d:e2:
23:44:38:2d:d3:dd:2c:bc:b2:78:ba:21:ac:05:d7:97:d1:65:
87:27:c9:54:92:43:a5:89:47:15:be:1a:2d:d2:41:6f:95:2b:
93:05:d9:af:c0:c5:f8:81:c3:8f:dc:1b:e5:71:dd:cf:b7:e7:
88:f9:5c:bb:93:fb:d6:a8:a4:16:03:5e:a4:73:58:1f:16:60:
5e:fd:3c:bf:c1:9b:d0:64:57:2f:72:1f:ba:b7:27:be:bb:1c:
0e:d3:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:14 2026 by rpki-client