Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: NvUmuQRhX/m8qi5BSfiwCdOeXd4RBpL0lqu7eEVQDag=
Subject key identifier: 45:99:EE:8C:A5:A0:61:0E:92:47:95:B7:C0:7E:CC:DB:9A:6D:A5:CB
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 019D28F33C105A1980FF8DCABABEB038AC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: 2NDM2UnGAd2KPMu3UUA1fO528tk.roa (hash: WD6GmcclgmWq2djvqA2C1xAumTZt22gmy95ALSn/gmc=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: lR1fkii0gUTeAzfqIlX1ymDsfRFBYG7DlKtt/pFi88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3c:10:5a:19:80:ff:8d:ca:ba:be:b0:38:ac:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=4599ee8ca5a0610e924795b7c07eccdb9a6da5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:b7:de:16:3d:1f:9b:3e:24:9c:fe:01:5f:
01:98:1a:e5:44:62:67:f1:67:db:dc:65:16:72:4a:
c3:8f:ff:1c:81:ab:4b:92:e3:8a:27:a8:9c:2b:12:
74:35:cf:18:f8:51:18:5e:af:74:22:0c:21:c0:ab:
64:83:ea:78:1b:8d:eb:9c:34:46:29:a9:e1:c7:74:
44:dc:65:b4:f0:c8:d8:07:95:2c:ca:b3:9a:7f:79:
99:72:a4:4a:fd:a0:60:5b:44:7c:fd:ab:b2:47:76:
a9:dc:26:b6:4b:86:1d:fe:a2:19:92:85:89:8f:fe:
e7:66:49:cd:35:2d:78:46:f1:8d:d0:66:5c:ed:91:
66:74:eb:61:cb:8d:3e:11:75:8d:b7:de:0e:32:2a:
33:e4:36:8a:72:96:28:9c:e2:c9:9a:d2:fc:fa:81:
85:45:48:fc:36:50:81:ed:ef:76:6f:7b:d7:b3:0a:
b4:b1:cb:ae:62:3f:e5:21:16:1f:65:27:9d:ea:07:
08:54:02:20:c5:b9:7d:b2:d2:78:1d:2e:71:74:e4:
df:a4:5a:01:15:15:51:aa:52:ae:f4:dc:34:1c:28:
5f:4e:f8:db:6c:64:b0:70:ad:da:4b:ac:5b:0f:a2:
72:88:6b:8b:4c:8b:13:80:bf:09:e9:98:5a:d1:f9:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:99:EE:8C:A5:A0:61:0E:92:47:95:B7:C0:7E:CC:DB:9A:6D:A5:CB
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3b:80:e7:22:27:73:31:53:a3:e4:a2:c2:7b:7b:6a:50:6d:
39:62:2b:e3:d2:f9:14:b7:40:ac:8b:86:a3:0d:18:8e:fb:e3:
8b:2d:d3:69:1d:2d:81:28:16:a5:4e:b8:1f:a1:0f:84:35:71:
9d:78:d8:6c:cf:95:64:a8:89:3a:63:29:6b:39:4d:92:f6:af:
21:0e:b8:ae:db:a2:0e:21:03:66:0e:e1:bd:f8:b1:0d:9a:c7:
78:ec:94:ba:59:07:06:42:4e:de:15:cf:c4:52:ba:7a:3b:ce:
1b:f6:e9:47:54:46:37:1b:0a:7c:d4:08:f4:da:e8:5a:08:67:
fa:64:07:da:1c:2f:d3:9c:2e:92:ab:b5:71:b9:6c:de:12:16:
b9:d8:a2:1c:43:cc:16:24:e8:f5:69:7f:e8:08:e7:8a:ba:63:
d4:95:d2:3f:cd:bd:9f:46:71:5f:cc:ae:b4:7c:ab:9f:31:f8:
34:91:78:e8:bd:b0:38:c5:8b:16:5c:27:34:ea:93:81:4b:ac:
aa:47:50:16:f7:aa:97:a8:02:cc:fd:cc:0e:1c:ec:ea:a1:85:
a0:4f:9b:e9:c8:d2:cd:80:6f:0b:8e:59:d5:ad:d8:b5:77:20:
1e:61:e6:61:42:17:40:08:29:a0:83:69:74:62:fb:b6:d8:fd:
3b:50:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:42 2026 by rpki-client