Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: t8ZPPhz4r6C/DwkDSKQNP2m3LyaczTOLitXm6tjodZU=
Subject key identifier: 61:0D:11:67:2D:9A:58:18:27:46:A4:27:2F:28:1B:35:3A:AF:68:B3
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 019D2772E3221632546AEDB2997D6C011380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 0B12
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: 9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa (hash: 18cwGXFTJaQbHW96LZdk67APWAeUaMFUp7iHSl3ZJFk=)
2: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: +R4EFRfaPmy3ui1r44tU2DKk7pSCHlo7Qu7nv3T/Kow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e3:22:16:32:54:6a:ed:b2:99:7d:6c:01:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=610d11672d9a58182746a4272f281b353aaf68b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ab:bc:7b:df:40:c0:21:26:7c:a0:11:5f:43:
20:f5:3a:f2:57:5a:ea:db:8a:10:d0:0f:49:28:4f:
84:df:87:af:82:4d:c5:2e:d5:6b:18:16:92:c3:3e:
3e:1c:1e:d9:1c:f9:23:f3:88:a4:d1:2b:72:ac:e0:
e5:94:46:ce:7f:a1:38:46:2e:35:ee:a5:f1:c3:90:
ed:0f:55:09:5f:3e:e9:3a:3a:fc:2d:04:60:c1:34:
71:87:1e:81:39:d1:c4:c9:dd:65:68:a6:23:5e:d9:
7a:48:cd:05:b9:14:ae:26:ca:fd:01:61:5f:fc:60:
c2:a8:3f:7c:ea:e6:da:84:56:30:bd:b5:dd:f7:b2:
e6:66:7d:3c:80:a9:0f:b3:55:05:5b:fa:0b:6b:28:
e9:e2:d5:f6:66:eb:0f:69:32:e3:6a:35:9f:89:a7:
d2:30:5f:aa:86:ba:2c:a2:8a:3a:f3:a6:8e:dd:7b:
2c:62:cb:4c:e7:90:8d:31:d0:71:00:67:6e:ec:a0:
d0:a0:9f:d5:7c:f3:a5:5a:f9:a2:67:a2:47:37:da:
c9:09:71:f8:f4:86:9a:01:ec:ea:b5:02:aa:ea:78:
e8:42:76:b8:86:49:c5:7b:c3:2a:93:bb:0f:e9:68:
35:bc:e0:4c:07:ba:ad:71:e9:bd:de:30:48:9e:46:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0D:11:67:2D:9A:58:18:27:46:A4:27:2F:28:1B:35:3A:AF:68:B3
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:36:e7:39:08:a0:ce:00:ea:79:51:b6:ba:74:74:2d:da:e6:
b6:a6:e8:36:a9:59:cc:d8:22:25:da:31:7f:33:5c:b1:59:a9:
3d:7a:94:ad:11:a1:d9:cd:93:9a:12:c3:3b:c0:62:4a:37:f3:
6f:41:45:e6:60:dd:44:6b:bd:0d:53:2e:a9:b4:16:e8:04:fb:
36:a2:9c:0f:1e:dc:e0:05:44:58:82:67:30:72:fa:d7:3a:2a:
67:41:05:ec:94:5a:64:bd:57:40:1e:63:67:e8:95:0a:35:0d:
3b:fd:7b:09:57:92:17:6c:f4:05:db:13:f1:31:b9:7b:bd:71:
3f:ad:4c:79:20:fc:d6:cb:ba:1f:06:08:77:11:b1:2c:e4:eb:
35:b2:79:f0:9a:fe:42:9c:01:99:02:58:e2:7a:c5:3b:87:56:
d5:08:88:b5:83:25:0c:80:c3:19:e8:33:67:a2:af:83:c6:cf:
eb:40:07:13:8b:8b:fb:4f:14:46:9a:f9:18:6e:e0:cf:76:8b:
33:b9:7b:8f:89:c2:cf:f0:af:1a:94:e9:2d:1d:90:67:94:a6:
41:84:ad:f6:d8:61:9d:88:f3:b2:9c:a9:c0:69:8e:b2:58:72:
f5:dc:f7:22:34:99:af:96:8f:42:44:15:0e:eb:62:b3:58:49:
dd:6a:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:15 2026 by rpki-client