Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: w7cwHoqyT8x8L3KI/tEcN1PO3DLtkNs0wZA3F2jkGCI=
Subject key identifier: D6:24:EB:A7:B7:B5:EF:56:75:B5:43:5A:F0:CE:8C:1C:90:57:3E:A3
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 019D25F153568C9D4316D23B1ADD5494947F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 17EF
Signing time: Wed 25 Mar 2026 17:01:05 +0000
Manifest this update: Wed 25 Mar 2026 17:01:05 +0000
Manifest next update: Thu 26 Mar 2026 17:01:05 +0000
Files and hashes: 1: Wazx3LZDxhV9N5q9JPv8h2Qs-YE.roa (hash: KJ3tWSAQqQBPzmhSgtG5aN79Rwb62j6iubPkCvI++ds=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: AAzPfYEHTgEWCYvoDqwphHMHlixx3B8L4Fkhk0cyo4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:53:56:8c:9d:43:16:d2:3b:1a:dd:54:94:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Mar 25 17:01:05 2026 GMT
Not After : Mar 26 17:01:05 2026 GMT
Subject: CN=d624eba7b7b5ef5675b5435af0ce8c1c90573ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:90:e0:d0:54:c0:7f:62:df:bb:cf:97:d9:
0a:d5:0c:c0:26:df:67:05:7d:6c:dc:9a:02:61:05:
0c:7b:8a:a2:7b:8b:47:2c:65:ab:3c:5f:76:c0:e4:
d6:5f:9d:65:fd:a2:21:ec:27:be:16:a4:3c:49:72:
87:fa:b4:16:74:22:bb:82:dc:a0:3a:2d:5b:af:cc:
7c:10:52:e3:b5:3b:db:a6:b0:ac:66:11:4e:cb:28:
6c:53:25:59:4e:1c:6e:dd:01:e9:0e:b4:39:69:fe:
0e:e5:8d:b6:98:d8:44:4f:fe:3d:af:b3:3e:45:3f:
3f:a4:1d:b4:28:7f:43:ec:b7:5b:fb:5d:37:5b:ad:
25:af:d7:34:6e:8f:83:fb:f7:34:f5:0f:ba:d1:ca:
ea:58:f1:ce:79:7f:71:d7:f0:dd:2b:db:90:b2:4b:
2e:ca:0e:a4:e3:38:46:b9:8b:44:71:c3:47:01:9c:
d8:6f:72:b7:87:00:71:0b:a2:fa:e8:1a:dd:3d:71:
0a:e4:fa:9c:72:e5:1a:0f:07:b3:26:a9:dd:0d:67:
7d:83:09:bf:1b:42:34:96:b8:ec:67:cc:1a:5a:26:
92:aa:f4:de:c9:f6:77:63:c0:5e:db:1a:3e:2b:96:
b2:78:79:ef:b1:93:e8:0c:e1:4f:d3:c5:68:9f:48:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:24:EB:A7:B7:B5:EF:56:75:B5:43:5A:F0:CE:8C:1C:90:57:3E:A3
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:04:e3:57:76:d9:d7:41:19:c5:50:25:d4:00:21:b3:65:
c7:92:3d:e2:08:23:10:57:8f:4e:57:e0:f5:e0:e9:f9:73:a6:
75:d6:d8:99:80:d4:af:c3:1f:f8:1e:72:c0:07:37:9a:ea:7b:
0e:10:75:79:cf:6a:f3:c5:87:73:42:48:4c:7e:62:99:23:2b:
5f:d7:45:d5:47:06:32:2b:8c:b1:e9:6b:92:ac:f5:19:f2:7b:
55:1e:b1:b6:84:7f:21:d7:a8:9b:cf:fd:17:c0:71:f7:88:46:
38:b5:03:aa:5c:1a:3c:30:32:8f:21:a3:66:48:6d:12:f7:25:
63:ef:42:47:6d:6f:4b:0f:cf:38:10:1e:e7:2f:e3:94:9d:19:
a6:40:79:61:70:73:2a:98:95:5f:fc:b8:e4:a9:a4:bb:74:91:
44:dd:ce:a3:8b:54:f6:23:77:6b:ba:1d:da:c3:a8:aa:d5:7d:
11:c4:9d:32:39:10:9a:d0:ba:9c:a8:04:48:81:ca:f5:0d:6c:
61:1d:21:6d:60:6f:10:27:a7:4e:38:21:83:90:44:54:8e:a2:
98:09:ab:d4:dd:4b:0d:ff:6d:e9:03:bd:34:0d:95:89:2b:24:
0a:a2:d6:59:6e:0c:c2:6a:22:bd:5f:41:fa:ac:08:b9:04:21:
f1:e1:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:09 2026 by rpki-client