Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: vwoSmqSbHHyhqUIAgVFXHhOJduCRF7VLcw2hOMPN1LU=
Subject key identifier: 9C:A0:D6:C4:B8:FB:A0:D1:15:23:E1:9A:29:2F:73:8D:86:EE:3F:CA
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 019D284D55933476470902C0205F34D6282F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: eTc8k4k9i/I1l2QbG+AjCluJgT1OsnEzD4lFLXANaRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:55:93:34:76:47:09:02:c0:20:5f:34:d6:28:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=9ca0d6c4b8fba0d11523e19a292f738d86ee3fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:b2:21:51:a3:0a:cd:3b:08:5b:11:8e:ef:
1e:e9:d2:1e:96:2a:bc:55:35:11:16:02:98:be:46:
96:24:c7:17:32:5c:b3:c1:fe:7b:cd:2d:13:a9:9c:
5b:88:60:f2:ab:d6:54:b4:1e:8d:a0:a9:81:e7:b3:
95:ac:96:2d:f5:99:97:3d:16:36:f2:43:6b:00:01:
72:61:f6:1a:b3:10:82:9a:11:2b:de:fe:31:12:5e:
8a:40:46:f8:e7:7c:de:d1:4e:b7:4e:a1:cf:2a:63:
5e:d3:ac:4b:bb:88:0c:57:af:75:76:67:a8:29:38:
de:87:2f:f6:3b:39:0c:ec:1f:0c:fc:b9:02:fd:d5:
c1:ff:0e:11:8a:f3:6d:40:63:59:61:71:28:75:51:
35:94:1b:50:11:52:f5:94:b0:8f:61:ac:2d:d5:c7:
c4:1e:34:28:a0:50:aa:13:c9:4a:2e:b3:b0:c3:85:
cf:7b:63:d9:e4:88:40:ec:e5:67:21:64:15:65:b5:
66:fa:2f:0b:c7:62:e4:0a:a9:3f:ea:86:75:a4:24:
97:9a:6d:f3:3c:91:36:f7:73:d4:77:a9:93:c7:78:
51:72:a6:ee:f5:51:89:b7:b3:9a:62:55:79:94:47:
b7:5d:a0:b5:57:68:94:e1:c7:f6:26:fe:10:18:ce:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:D6:C4:B8:FB:A0:D1:15:23:E1:9A:29:2F:73:8D:86:EE:3F:CA
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ff:0a:ec:8e:f9:07:52:2c:99:23:c5:79:70:63:a9:5f:05:
99:8a:e4:d2:93:f2:9c:46:8d:ef:ce:0c:24:35:1f:f5:72:95:
1c:3e:b2:c3:26:0e:c9:1f:2b:16:35:73:56:f8:36:95:19:27:
9d:05:b6:18:a8:ef:ee:04:d9:ab:11:e2:b7:c4:73:47:2d:71:
50:6c:77:b1:65:a4:48:9a:e0:56:65:76:9d:80:b2:ce:69:6c:
63:d9:34:f1:2c:a5:d7:49:64:a0:99:6c:c9:5e:f9:5a:ff:1e:
96:7d:3d:32:8b:61:2c:93:0c:fa:43:4d:91:80:df:8f:fe:53:
68:bb:14:fc:d2:4d:bb:b0:72:eb:07:c7:81:f3:73:f1:2b:08:
f6:14:6e:d0:ed:04:1f:59:81:32:d9:70:2a:50:90:b3:d7:53:
60:54:5f:c8:6d:57:48:70:2e:4e:54:c6:42:1c:c5:fd:26:35:
78:72:12:26:d5:1c:ba:36:d3:d3:bd:f0:31:b2:11:9a:b4:10:
d1:e3:5f:90:11:1a:8e:4b:2b:a8:2c:12:90:11:e7:66:04:5f:
96:e0:47:e0:14:c1:37:f1:1d:ce:8b:f7:74:52:59:fb:8e:a6:
48:aa:41:7f:c9:04:cc:cc:f7:85:f2:d4:f9:c5:0b:c0:d9:48:
57:fc:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:06 2026 by rpki-client