Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
File: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft (raw, json)
Hash identifier: EIbXscQRj8zKgjGP8+bUHVRPRotu4cTdy9+ZSXFoKUc=
Subject key identifier: 12:D4:31:4B:26:C5:EB:77:41:89:EC:56:78:72:8D:FE:1A:C8:5C:A2
Authority key identifier: 91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A
Certificate issuer: /CN=91521bd62c46e9943ec80cb774126d1da8393f3a
Certificate serial: 019D28BB38577A862DA72BFF1713857A76D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
Manifest number: 0106
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: UOrL-fWfhp63hwmPTmyope9X71A.roa (hash: nFYQ4BgnX+b8v7k7hkFu7iArSobGMSHyFyRY+Uph3/4=)
2: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl (hash: 4O2SEZaHGckU9Xspt5mgSK0vPzU75H3ShH6+jbImtSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:38:57:7a:86:2d:a7:2b:ff:17:13:85:7a:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91521bd62c46e9943ec80cb774126d1da8393f3a
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=12d4314b26c5eb774189ec5678728dfe1ac85ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:54:82:39:40:c1:1d:8d:37:22:b6:d7:a0:
fb:61:b8:86:88:ed:e8:3e:5d:82:25:ea:be:a8:62:
39:a7:b2:25:b2:b8:77:e7:4f:bb:ce:fe:64:29:aa:
f0:14:86:9a:5d:a5:e9:6c:23:fa:eb:07:c7:7c:75:
34:89:3a:0a:a1:3c:be:72:13:01:28:48:fb:a9:b4:
d4:10:1c:e1:e0:a5:97:7c:b9:4e:00:21:b6:99:a1:
e7:31:c5:78:bd:0c:77:a2:4a:c1:9d:d5:54:49:c0:
97:3c:94:2f:41:82:35:a2:71:f3:df:66:82:e9:c1:
5d:88:29:de:51:4d:51:e6:a6:0b:51:f4:9e:75:bb:
91:c1:15:47:78:3a:89:3b:22:ce:0c:7d:66:ea:b3:
dd:09:a1:d4:75:b1:3f:08:86:74:0c:e9:c3:2b:38:
ad:a4:52:0f:cf:fe:5d:c6:fc:69:8e:b6:25:06:37:
38:ee:48:a3:a4:61:dd:e1:5f:e8:ce:69:ca:32:e4:
15:4f:66:87:8e:a8:6e:47:e4:af:3b:71:b7:b9:3f:
23:3f:34:e9:72:e9:6f:c8:72:cb:6e:d5:0b:55:83:
db:66:4a:42:97:3a:83:89:4b:c9:2d:75:f7:af:f0:
02:c2:0c:ec:7e:af:0b:4a:3a:24:6a:c7:b8:65:46:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:31:4B:26:C5:EB:77:41:89:EC:56:78:72:8D:FE:1A:C8:5C:A2
X509v3 Authority Key Identifier:
keyid:91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2a:3a:9b:89:ac:ce:89:0b:50:6e:c4:a2:f9:7b:87:23:5b:
ac:24:3c:c6:14:30:4c:b9:8c:d5:a0:f6:c5:ed:d3:1a:6a:db:
ff:ae:72:a1:a3:6a:df:85:31:50:9e:9b:a7:42:18:8f:59:52:
d9:07:27:05:02:ed:46:c1:d8:25:43:b1:a3:be:56:68:07:7e:
4f:16:fe:ce:4f:70:a0:29:d6:d7:cd:f9:7a:eb:ba:f5:3b:85:
70:04:e6:f0:20:5e:e4:b3:40:eb:6b:99:fa:7e:56:54:ed:63:
10:17:53:e8:8a:f7:b5:af:c8:53:29:5a:29:dc:7a:2c:6c:09:
10:a9:f5:47:85:53:1d:ed:ce:77:3c:74:d5:57:f3:02:7a:b1:
e5:ce:54:e8:69:a8:d8:b1:ac:63:71:96:8e:74:ad:f1:41:ed:
89:47:fe:d3:1c:f9:1e:c3:dc:54:65:c5:55:6e:08:d1:df:bf:
1d:67:86:45:bb:c3:7d:38:02:b0:05:f1:25:42:b6:5c:e1:3f:
e0:33:9f:eb:35:d6:7d:22:21:7e:85:09:7a:b7:a1:54:97:45:
09:86:44:b9:d5:8c:6a:e5:a8:de:38:e3:f9:b5:9a:e8:e7:d3:
7a:77:76:aa:69:08:95:62:8e:f0:a4:82:c4:d8:60:85:0a:25:
72:c5:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:53 2026 by rpki-client