Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: I1rSNOS0Gg/VKF8M9xDSxzF6gMuQttjFNVHTgIhXaPc=
Subject key identifier: 33:90:FF:9D:2F:DA:0D:C2:F1:0A:28:81:EB:F3:4C:91:4C:AC:A7:AA
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 019D265EDCA2D76B973408D797DBF1FF08F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:44 +0000
Manifest this update: Wed 25 Mar 2026 19:00:44 +0000
Manifest next update: Thu 26 Mar 2026 19:00:44 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: 0nHze7i0WamhWE37+eU0UzT2ZuhD1lccV04LJ8fuDqk=)
2: ZNgK6rPOYQbiev36cRFB7zB9RWE.roa (hash: w0ez/NTzH8N4Z6kf7bnAilQBpsFXHEVSwqd8OI0nbqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:dc:a2:d7:6b:97:34:08:d7:97:db:f1:ff:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Mar 25 19:00:44 2026 GMT
Not After : Mar 26 19:00:44 2026 GMT
Subject: CN=3390ff9d2fda0dc2f10a2881ebf34c914caca7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:2c:15:99:63:d8:f3:1d:3b:81:c2:f2:de:
b5:b8:71:bb:86:e0:8c:f7:7e:c2:dd:46:ba:41:0b:
71:a0:70:b0:9b:bf:60:c0:eb:93:57:65:b8:b6:9c:
dc:44:3f:82:0b:6b:56:79:b4:3c:a2:cf:32:f3:30:
13:a0:86:0b:1b:f2:e0:5f:57:79:ca:d5:68:a9:7a:
10:c4:51:07:69:58:df:bb:2f:32:96:6f:ac:8d:8d:
5f:5e:b2:8c:c3:71:83:47:47:da:c3:9f:80:3b:57:
cb:30:a4:55:66:7f:d5:ac:e5:89:73:63:a6:df:90:
8b:7e:6e:2d:f5:aa:c4:67:52:37:bb:d1:74:15:8c:
23:e3:ac:11:de:c6:65:20:66:fa:35:e4:ba:76:1f:
6b:40:81:7d:30:3a:71:93:2d:56:83:73:ae:2e:31:
a9:0b:33:fe:e6:be:3e:88:70:0a:21:b2:cf:a8:af:
c1:04:34:7c:38:0e:ce:e4:67:9e:f6:5c:6d:f9:17:
41:a9:cd:a9:e1:45:a4:79:46:1a:fd:0d:c1:e8:bc:
f1:3d:65:5c:bf:d6:d7:ee:65:5b:98:94:c0:53:da:
03:5b:bd:82:98:06:06:6b:c3:c0:28:20:6a:76:f2:
b1:2b:43:f5:46:d2:24:24:8f:78:88:d6:60:e1:74:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:FF:9D:2F:DA:0D:C2:F1:0A:28:81:EB:F3:4C:91:4C:AC:A7:AA
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bb:c8:49:2c:e5:d0:df:d1:5c:78:0c:7c:e8:bc:26:3b:60:
7e:fa:f3:a8:55:32:bf:68:3c:65:a7:8f:87:cf:ff:5f:40:7b:
9a:f6:8d:cc:e9:e3:e6:e6:d4:dc:54:60:60:a9:5e:5a:23:50:
30:b5:3c:62:a2:e2:58:41:26:f4:d5:2b:45:9c:5d:9d:d3:89:
f2:74:4e:31:79:1e:1c:2d:e6:ca:ff:3c:35:2b:ce:8b:66:17:
00:0c:4e:ff:3f:e2:31:ff:bb:fb:89:88:79:5b:bf:0f:d7:c1:
40:02:9c:b5:2d:f9:38:ff:c3:41:6b:6d:27:63:f1:fb:e3:d8:
48:f6:47:88:b3:61:7d:a4:a7:bd:23:c9:c2:66:f4:be:7b:b8:
36:43:41:78:42:8e:88:cf:81:9a:7a:54:5f:a0:24:19:d0:0e:
a5:4c:58:fd:e6:6a:37:bc:e1:39:d7:db:a4:ba:5d:73:51:70:
c8:0a:5e:5d:e6:d8:2f:93:10:49:58:df:ee:ee:1b:9a:9f:ea:
19:b5:5a:ea:d2:81:24:ce:f0:bc:98:57:7e:99:5b:c3:8e:2d:
5c:f4:ab:86:d7:98:0a:78:a7:cf:25:1a:7d:e9:81:0a:9f:90:
2f:ad:37:09:e5:7f:85:8d:50:49:38:9d:bd:aa:92:92:45:65:
96:00:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:50 2026 by rpki-client