Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: uH+WVe8mpcP8fodYqIDT+OXP24srLeaEAqcTMPukoWc=
Subject key identifier: AB:01:1A:5A:5B:CE:68:57:E7:89:5B:03:07:AE:68:C3:84:0A:1E:49
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 019D273AC5BF5FD20DCD5F4EC5CB6E4B7015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 0BF8
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: HedsGQinxKEoucD_-YwSKpsXVyE.roa (hash: Xcrwx8/CkX+Fe5VSYvO/6Sz1NsHEDec2ei5HK0TdHo4=)
2: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: Q9RZByCsR+nO/NJDONbBIHiissbhmYtZkOOkaysu62g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c5:bf:5f:d2:0d:cd:5f:4e:c5:cb:6e:4b:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=ab011a5a5bce6857e7895b0307ae68c3840a1e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:30:25:3c:f0:96:c1:b2:71:c5:a1:79:ea:
e3:c2:7a:e4:d5:61:da:e8:59:84:1b:b8:ac:9d:4e:
77:e7:f8:8f:41:1f:13:72:17:5e:6a:1c:b2:5d:dd:
c9:ec:62:7c:5b:6e:34:b4:92:e2:71:a8:f7:50:e3:
90:e0:82:e7:9f:08:b2:f1:ca:31:97:4f:8d:67:c5:
b4:9f:9f:25:1e:9c:15:95:7b:c1:7f:34:1b:78:b3:
72:6a:d1:40:c7:0e:13:e2:75:ac:47:2e:c9:aa:71:
7a:0c:a2:8a:6b:07:95:49:d1:22:48:ea:24:a4:5a:
aa:a6:eb:07:23:3c:a1:fa:3a:d5:95:19:9c:c2:63:
75:eb:a6:68:a5:98:f0:7c:12:73:f5:95:3b:8d:e0:
63:5f:07:08:8e:07:48:b7:65:ba:68:ed:ef:97:d0:
07:ef:d1:05:ca:8e:90:d0:60:da:21:c0:d5:51:3f:
fd:ad:fa:cf:3a:39:d6:42:73:7e:f3:01:ae:7f:b4:
e8:53:a9:d6:5c:27:f5:1f:f9:fe:75:5b:2c:3e:1d:
36:31:55:30:4f:6a:a4:ec:9a:0d:7a:c8:09:e5:d7:
1b:8d:1b:1a:d2:3b:92:70:39:6e:4e:24:12:c0:dc:
a0:8a:a9:19:d1:ef:39:72:fe:6e:67:c8:3d:9b:16:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:1A:5A:5B:CE:68:57:E7:89:5B:03:07:AE:68:C3:84:0A:1E:49
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1f:05:7a:ae:03:b5:e1:80:45:f3:21:b9:af:64:50:78:aa:
3c:13:aa:77:45:57:1b:ac:ea:a5:48:53:2f:d9:79:79:d9:bf:
4f:bf:3f:06:f5:11:f8:1d:5e:32:6f:d1:95:ca:54:32:3d:f6:
57:e2:3d:64:47:70:b1:07:aa:49:71:1a:17:5f:a6:2a:9e:61:
6e:58:fe:3e:26:51:70:42:e4:e3:44:c5:20:39:e3:74:3d:d5:
b1:72:ce:af:fa:16:71:15:58:44:cb:9d:4a:4c:92:52:e7:02:
e9:d3:df:f1:bb:11:9e:7f:65:85:85:54:79:5c:11:49:fb:3e:
70:10:c3:65:1d:9c:6b:d8:10:c6:f2:c8:dd:7f:9f:80:ed:ad:
55:b8:6c:28:77:c9:d0:d0:28:56:4d:d2:b1:a7:99:ef:12:06:
24:1a:d2:78:e2:69:b4:47:91:4e:92:a1:93:58:03:b6:03:a4:
cf:af:dd:51:b1:3c:60:51:07:be:45:99:ad:0a:ce:d4:fe:18:
57:c0:21:f3:e3:f3:73:50:c5:4b:7f:e6:3c:fb:34:c7:16:db:
04:a4:32:6e:5c:1f:fd:eb:2b:75:ad:0e:12:de:46:6d:37:82:
01:a8:7b:ae:ee:85:8d:c0:04:01:1e:8b:59:8d:f5:51:b5:ac:
5b:10:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:03 2026 by rpki-client