Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: ZWWlUeDQ/ryybf03okUZaHJ92SqwhpJTmjHtNvnDLN4=
Subject key identifier: 90:D8:AA:09:9D:8D:03:72:F8:B8:ED:4F:14:D4:56:59:95:50:D5:85
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019D254C50B6B04FEF74F7424C972C3CA07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 18AA
Signing time: Wed 25 Mar 2026 14:00:51 +0000
Manifest this update: Wed 25 Mar 2026 14:00:51 +0000
Manifest next update: Thu 26 Mar 2026 14:00:51 +0000
Files and hashes: 1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
2: JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa (hash: byIs4fDxzbStmpUulXvsLFDQrTroJupl22yHc01W9sA=)
3: MIyWfq9gpX_eI_ED1ii5vOGaWmM.roa (hash: u6guXrywPfx5K9H1XrSR92ZwtD6DI3B8S7D6GcWPq6E=)
4: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
5: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: ychQq+WklM7+tSN3woChBU449olc7PMsIEdG3B1vrX8=)
6: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
7: xhbUbHJfWuIcC58a_mlqpEgQiTA.roa (hash: 7RamenGY9nZYZ3O4Ws9uXcb/b++6NDmV6mvSM+ZRA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:50:b6:b0:4f:ef:74:f7:42:4c:97:2c:3c:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 25 14:00:51 2026 GMT
Not After : Mar 26 14:00:51 2026 GMT
Subject: CN=90d8aa099d8d0372f8b8ed4f14d456599550d585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:40:20:6c:d3:d4:98:92:13:4a:50:c1:c8:
77:ce:9a:02:37:2c:c0:e7:a1:0d:40:47:28:ba:cb:
62:a0:67:32:ff:b3:64:06:c5:c9:8a:90:0a:b8:f9:
75:ff:64:c5:87:ad:75:df:87:b1:b7:cc:fb:a2:20:
8d:91:00:50:89:bb:10:0f:06:ab:17:8a:45:01:31:
8f:0f:47:bb:2a:b6:20:6c:c5:00:3c:f8:fc:e1:cf:
16:dd:4a:42:e6:b5:c4:7c:bf:a2:b3:4f:5c:f2:c2:
22:e6:19:a2:61:89:e6:0c:13:5f:21:77:bd:6c:03:
8f:25:3b:a4:89:dc:64:26:2e:c4:cb:4e:da:f8:45:
95:bb:51:73:b6:7b:d0:18:ac:1a:82:a0:35:b9:4c:
08:a4:9f:58:52:43:80:62:16:39:84:23:63:ae:35:
df:17:48:ba:c5:4c:3f:fa:92:f7:99:5e:7e:fd:c0:
e8:ea:89:d1:6c:b9:5d:75:66:67:0f:76:0d:70:34:
24:ff:3e:59:eb:37:2d:43:5d:8f:b9:c7:4d:57:40:
e5:38:af:5e:e7:42:1c:a8:ad:a0:55:00:58:8d:1a:
a9:dc:e1:4f:5c:5b:ad:00:1e:75:19:98:9f:f6:c6:
b9:a4:8a:53:2b:75:05:0e:d5:d4:e0:c5:23:d5:b8:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:AA:09:9D:8D:03:72:F8:B8:ED:4F:14:D4:56:59:95:50:D5:85
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:0b:3f:95:3f:ce:3e:c4:49:e6:6b:a6:dc:f8:1e:a5:d0:
68:fe:be:05:89:8d:90:67:d7:72:a7:e3:e2:79:34:1a:48:26:
1c:6b:bd:51:af:fb:e9:b2:c3:5d:86:82:8f:82:7e:4a:ba:47:
33:aa:cd:8b:55:9a:12:6a:a5:17:ae:38:33:9e:9e:87:0c:21:
f0:0d:86:6c:48:ff:24:8c:70:f6:91:4b:22:0a:c1:bf:03:e9:
a1:ef:7c:61:4c:df:01:36:b2:cd:07:07:e1:f4:84:a7:02:4e:
25:45:b7:6c:b2:bb:f8:fa:0c:92:b3:e6:1c:1e:fe:90:c9:0d:
e6:f5:90:db:e5:d5:07:cb:75:e9:21:4d:30:a5:d9:d3:9a:76:
50:37:5d:bb:5b:6b:48:67:18:91:ef:7d:e9:e1:97:0b:b7:e7:
25:83:5a:c8:b2:d8:93:f8:6c:d8:df:94:b3:65:c5:80:48:4a:
48:a9:2f:88:22:3b:de:90:7c:fc:2b:c5:d1:ef:62:73:eb:c5:
c8:4b:d8:24:78:7a:01:7f:29:86:88:7a:94:da:36:e7:a9:f4:
d0:33:fa:10:26:e5:b1:69:2a:a9:01:56:8b:56:b3:0a:d9:2b:
66:5c:ea:7b:9e:ce:54:3d:db:4f:0f:b9:e2:e3:cb:d0:4d:10:
c9:88:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:43 2026 by rpki-client