Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: hW6hyICg0MlK5S+goHn4DjCJ5FXAw2qAa8G1JuuR29s=
Subject key identifier: F5:BE:6F:DC:41:8C:70:0F:DB:BE:C6:06:C3:DC:C6:E9:37:5A:B3:F4
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019D26CCB4F6E0D8D615AC6CEE75DDBE392C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:42 +0000
Manifest this update: Wed 25 Mar 2026 21:00:42 +0000
Manifest next update: Thu 26 Mar 2026 21:00:42 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: YQSXa/+pw7wR4r9FkPHiNnHJwNRspWdTf59i2arUnCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b4:f6:e0:d8:d6:15:ac:6c:ee:75:dd:be:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Mar 25 21:00:42 2026 GMT
Not After : Mar 26 21:00:42 2026 GMT
Subject: CN=f5be6fdc418c700fdbbec606c3dcc6e9375ab3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:bd:38:79:b4:fe:f5:9e:54:03:f3:c7:5b:
b2:8a:77:08:53:3a:77:e2:57:5c:8c:40:3f:37:62:
3e:74:c8:33:5c:ba:96:61:0a:44:b9:91:c5:8b:f8:
ea:22:ec:f1:24:4e:1d:9e:1f:5b:4d:b3:30:47:8f:
ce:28:a9:f1:fb:2b:fa:c0:8b:59:03:6f:6a:50:e2:
cb:cc:95:66:e2:f5:f5:a9:bc:79:e3:b9:47:80:36:
2e:4f:53:d6:e3:9b:2f:b1:91:96:f4:59:e5:18:fd:
c6:2e:6e:bb:0f:0d:98:06:ab:21:45:6b:6b:aa:15:
49:26:17:7a:c9:d6:dd:85:ce:63:b3:02:e1:68:c8:
9c:2d:0a:cf:ee:0c:31:3b:5e:86:b9:93:cf:5e:5a:
dd:ce:78:80:ff:a1:2f:b1:02:8f:03:9c:db:23:f8:
ca:e6:b4:83:68:b9:4d:c9:12:bc:2e:df:55:7d:26:
06:23:bc:07:5c:21:b1:b0:b3:de:11:31:b1:57:32:
27:20:ca:94:90:dc:70:e2:19:b3:0e:3c:d2:a1:d2:
b8:8c:e6:37:13:64:10:7e:40:58:73:8d:49:14:a9:
8a:93:c9:98:46:bf:f6:5c:83:0a:5e:45:cb:ca:3d:
fa:f9:66:7b:79:5a:3a:d4:a2:2b:d3:00:77:ff:38:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:6F:DC:41:8C:70:0F:DB:BE:C6:06:C3:DC:C6:E9:37:5A:B3:F4
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:de:8e:ec:2d:55:79:a3:a2:64:d7:a1:80:46:11:ff:29:f8:
42:d7:47:ef:84:d7:17:b7:02:87:43:17:69:88:14:64:25:27:
bd:7a:26:5f:27:34:a3:b4:8b:8b:fd:99:62:51:ce:1c:1e:17:
12:fa:b8:02:63:bf:a3:a4:24:97:97:d7:64:4e:95:f6:2f:02:
18:3a:eb:9b:b7:75:ba:1f:dc:01:84:7a:b1:26:3e:de:06:3b:
2b:17:34:32:36:31:58:cd:07:b7:27:02:12:8c:f2:45:b8:8a:
af:fa:03:4e:b0:a3:14:b9:2c:30:ae:89:5b:0a:63:a2:3a:d3:
00:71:3e:14:ca:50:55:25:68:24:7c:31:5b:89:9c:16:5e:0a:
f0:b6:e1:24:32:54:62:31:d0:1d:6f:bb:64:17:7d:c9:ec:81:
71:d7:00:27:fc:34:89:25:7f:b4:58:03:db:90:48:b8:da:50:
10:ca:e2:a4:25:61:7a:ce:96:cd:ed:60:a4:b5:f3:2d:cb:7c:
6f:60:a6:0e:63:0b:72:8b:45:0c:2f:57:cf:b7:0a:d4:91:18:
ae:c1:9c:66:9d:69:27:7b:78:e5:b0:68:70:67:52:ff:c9:89:
34:4d:b7:b2:09:a4:c5:d8:5a:4d:2c:4c:b9:97:5d:a7:3e:5c:
fb:68:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:51 2026 by rpki-client