Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File: kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier: PWJLP0ZIZcnJVkKs826l0mRxosv0PZvy3niRIgBviWc=
Subject key identifier: 90:99:A2:4B:B3:FF:A6:39:9D:3F:64:6D:18:54:5C:28:9D:DC:1E:BF
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer: /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial: 019D28F24A90F347C7336CC43A542004413D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number: 15B3
Signing time: Thu 26 Mar 2026 07:01:00 +0000
Manifest this update: Thu 26 Mar 2026 07:01:00 +0000
Manifest next update: Fri 27 Mar 2026 07:01:00 +0000
Files and hashes: 1: LM_fwTOY3bWKU86K5V8-3VaJ5xo.roa (hash: gJ+6292a/zmiB+7Lg48nmQHbNWGgX6ni2+hF6SfxqDs=)
2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: 3LUCUGyft6NoQOkfJv45D3xEmMmETS+C9Rhpahqmh68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4a:90:f3:47:c7:33:6c:c4:3a:54:20:04:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Validity
Not Before: Mar 26 07:01:00 2026 GMT
Not After : Mar 27 07:01:00 2026 GMT
Subject: CN=9099a24bb3ffa6399d3f646d18545c289ddc1ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:c4:bf:0a:8f:27:82:da:76:48:b7:a2:0d:
f8:1b:4f:17:01:8d:6e:fc:bd:f2:99:70:8a:f1:b4:
0d:7a:43:e9:18:e7:70:e0:17:a1:6a:a8:f5:16:69:
17:f2:96:25:53:ba:07:75:cd:8c:69:d5:b6:10:96:
e2:f2:e1:0e:26:aa:94:57:01:ee:79:76:56:71:40:
a0:ac:2c:b4:5b:bf:b7:cd:a8:21:0e:04:bf:4f:70:
13:1c:4e:f4:78:98:a0:64:08:86:6f:82:c7:9e:09:
a7:01:a2:44:9a:28:b0:95:01:cf:5f:ae:95:1d:d3:
e8:b2:0e:ef:62:01:11:b5:8d:ed:d1:3e:44:c7:19:
8c:1f:c1:cb:e0:52:f6:90:49:29:59:2a:2d:19:44:
80:be:c0:05:fa:39:0b:36:d1:e4:37:e5:c0:24:ba:
88:42:3b:a8:66:7a:eb:c2:26:5f:2f:b6:a0:25:39:
94:7b:76:5f:ea:7f:25:b2:e2:42:b8:11:a2:7f:43:
56:92:87:e1:ce:6b:2a:98:6a:89:f6:1a:db:c7:aa:
0d:69:70:b7:62:d4:bd:e9:9b:f6:93:17:5b:37:05:
3e:18:cc:fb:f0:6b:3b:d4:7e:da:6a:8d:a7:a9:cd:
83:15:89:a9:04:1c:d1:2f:04:74:59:a1:67:91:c1:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:A2:4B:B3:FF:A6:39:9D:3F:64:6D:18:54:5C:28:9D:DC:1E:BF
X509v3 Authority Key Identifier:
keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:72:39:bc:07:96:94:3e:22:69:a6:f8:e3:e4:b5:d4:6f:cc:
b6:0b:82:66:1c:1d:94:21:65:a0:1d:6a:93:22:78:63:3d:65:
de:c6:3a:06:b1:f9:ac:54:a4:93:fc:a4:ce:29:fe:01:d5:a2:
29:ea:e7:44:e8:60:01:ea:86:2c:57:05:63:b6:d2:88:f3:e5:
af:36:52:d8:96:57:7d:42:eb:bd:cc:58:24:ce:22:97:ac:9d:
08:1d:cf:d7:99:92:56:14:1a:5c:98:dd:7c:35:49:73:07:2a:
12:c7:e4:12:37:94:80:e3:5b:62:4a:14:ae:a2:ab:83:cc:ce:
35:c1:79:6f:03:46:16:e4:c2:c2:c1:3d:93:96:96:7f:da:d3:
49:58:0a:1c:d2:1f:74:bb:4e:0d:59:64:87:ea:f7:15:af:41:
ab:84:1f:74:b9:27:59:90:6a:2e:45:79:18:d1:3f:ef:cb:68:
b3:f3:5d:8c:8e:98:71:52:53:c5:b6:ad:79:84:8e:03:e0:61:
3a:47:e5:64:c9:41:28:bb:cd:10:06:70:7f:99:84:80:7b:19:
17:f2:9d:91:5f:2e:20:af:9c:00:77:21:01:b4:fd:d2:14:54:
ce:78:69:85:3e:e2:a1:ae:89:bf:36:06:0d:63:d2:52:04:8f:
fd:84:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:47 2026 by rpki-client