Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: Qnil2WyGS+xxfZ2dLu0buQKt0BX93d654IguNTpgTNQ=
Subject key identifier: A5:80:0B:71:19:60:83:DF:BB:9C:98:4F:24:DC:1D:AC:FB:E0:D5:20
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019D2816A2F201F6F6F030AFCB46BC81666C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:05 +0000
Manifest this update: Thu 26 Mar 2026 03:01:05 +0000
Manifest next update: Fri 27 Mar 2026 03:01:05 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: GUtEIB7+UD1XhchLXZ2ozzTyp6sdkjD/t4do15ocYD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a2:f2:01:f6:f6:f0:30:af:cb:46:bc:81:66:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Mar 26 03:01:05 2026 GMT
Not After : Mar 27 03:01:05 2026 GMT
Subject: CN=a5800b71196083dfbb9c984f24dc1dacfbe0d520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:48:32:5b:a6:a2:8f:b6:6a:f6:2d:bb:15:
96:ac:ba:8c:35:56:f5:61:19:ce:0f:fa:14:a1:54:
3a:b6:d7:51:61:5a:8c:cc:02:af:fa:7d:43:ae:d9:
c9:22:89:c1:5e:7c:68:2e:ff:04:c6:9e:8b:8b:bc:
cb:32:dd:37:d9:db:06:5e:b1:39:d7:80:c7:2d:90:
5f:84:b3:08:7f:8f:96:18:30:09:ad:ec:bc:3d:c9:
19:39:bd:6d:31:b1:49:6b:ff:80:92:14:9d:72:93:
4a:f7:ac:dd:e6:1d:f2:2a:9d:89:3e:4c:23:9b:44:
59:d9:80:70:42:79:5e:c0:6d:c0:b5:08:c5:12:77:
8a:aa:d2:bf:97:43:a7:a5:0b:56:b8:b6:cf:fe:41:
b0:ec:fd:7a:00:e9:88:ae:f0:86:8a:d6:1a:3b:8b:
1d:fe:8b:04:2d:8e:17:3b:60:77:96:18:c2:51:be:
69:bc:89:da:7c:d5:43:fc:cf:bd:82:f7:b7:8f:d0:
b1:ad:d4:58:87:8d:67:3d:30:69:5c:a8:08:00:dc:
c2:ad:11:c6:d9:f2:ad:3b:c1:9b:71:6e:77:b6:5d:
f7:07:6e:72:6e:96:d9:29:6a:e4:cd:06:f3:3a:72:
95:71:59:3a:e6:5d:bd:0a:e5:1a:a2:c0:ce:9c:e5:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:0B:71:19:60:83:DF:BB:9C:98:4F:24:DC:1D:AC:FB:E0:D5:20
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:61:71:fc:4f:f0:41:32:ba:f0:97:14:f1:2e:f6:6d:3c:48:
84:c1:dd:91:f2:44:aa:f5:ef:f4:de:35:5a:bf:f6:6e:f1:6e:
68:11:c3:4b:bd:36:77:8b:12:b2:a3:f9:f0:31:72:e1:f3:ff:
aa:bc:16:da:13:84:35:e2:2e:73:cb:0b:97:9f:58:95:e7:84:
07:11:05:98:fb:13:dd:81:2a:f1:33:19:26:e5:ec:9c:22:6f:
cd:dd:ac:40:31:5b:1d:7c:a7:32:76:89:98:b2:0e:20:11:e3:
e8:09:59:a5:4a:7a:72:2a:05:fe:f2:cd:9e:76:fe:f8:10:b2:
a4:17:6f:12:4d:19:00:a1:22:a5:0e:33:00:e7:38:6a:46:93:
76:e2:f8:1c:0e:ce:06:a2:ae:9d:6a:8e:1d:90:cd:c8:5b:18:
6f:c4:cd:b9:63:d4:4b:4e:dc:c1:73:51:e1:8d:d8:94:98:de:
32:73:4d:f4:b9:58:98:67:9e:b5:0c:5c:cf:90:76:50:df:1a:
e8:fb:88:9b:25:ea:60:8d:d4:45:b1:4b:09:37:10:05:9b:1e:
aa:2e:2f:d2:cd:7a:c0:43:86:07:ca:44:65:4c:81:b6:32:cf:
75:41:4a:b2:92:4b:bc:c6:f3:60:c6:72:0c:68:0a:49:a3:f9:
ec:9e:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:52 2026 by rpki-client