Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: C/r+gC8jXsd93Pmde7YBHjbTj+fRlqlQdtZMpIzD7XM=
Subject key identifier: 27:0C:98:5B:D3:5E:E5:45:CE:F8:8D:D3:E0:A6:1F:F0:C5:67:66:01
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019D28843B22BB6CF0A8BCEA72AE2B3EFF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 10D8
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 8Ut/Pvo0KuQ4t+zvFoNSrubqw5sZ4s5lpzgFLDqtdys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3b:22:bb:6c:f0:a8:bc:ea:72:ae:2b:3e:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=270c985bd35ee545cef88dd3e0a61ff0c5676601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:34:07:ba:53:23:7c:70:4f:83:48:21:c1:
83:71:15:dd:86:e8:70:97:3c:5e:d3:6a:e7:53:2d:
7f:d1:48:b6:8b:0a:21:f6:dd:e3:24:7c:6f:40:ef:
af:c8:5e:aa:f9:bd:90:af:f9:0c:53:78:be:85:ab:
6c:a7:4c:40:ac:e6:8c:4a:01:14:d7:90:4b:ee:78:
ab:fb:be:c5:97:cb:20:88:ee:d1:64:09:e4:12:1d:
d9:f1:0b:46:0d:80:99:1e:12:b1:46:94:56:13:04:
ef:3d:4f:ec:6b:3a:6a:34:57:53:3c:0b:61:26:5c:
54:b1:df:81:21:34:cf:ac:75:42:43:69:1f:06:62:
4f:c1:8a:76:3f:6f:c4:de:22:69:d7:4f:6e:63:47:
40:03:44:62:1d:a2:dd:db:bf:f4:5a:96:bf:e1:0c:
e4:5d:36:02:64:28:9e:6f:8c:2d:46:06:7b:ae:31:
4f:3d:ae:68:67:10:79:a5:ae:fb:66:0e:37:41:be:
50:f0:f5:0f:62:b0:4b:9c:50:e9:ae:b6:85:e7:1c:
15:ab:a0:b5:d9:d0:3a:95:47:c0:63:63:f9:ba:d5:
70:86:c9:51:e0:be:18:1f:9a:ec:c4:51:5f:30:97:
8e:d5:88:c1:59:62:05:94:c6:19:21:36:49:c5:35:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0C:98:5B:D3:5E:E5:45:CE:F8:8D:D3:E0:A6:1F:F0:C5:67:66:01
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b5:44:e1:46:b8:b8:44:91:11:94:dd:cd:63:68:6e:9a:a3:
e5:b2:b7:31:0d:05:5f:ea:e5:69:09:71:e2:dd:1a:d5:9b:97:
4a:40:c0:b4:43:f8:3a:f4:28:f8:18:6b:51:f0:85:58:53:03:
3a:11:25:07:1d:b8:69:ff:0b:83:bb:33:c9:5d:b4:b1:3d:30:
f9:18:ee:db:ea:a9:cc:4b:32:a7:f0:e6:3b:6e:14:f4:40:f9:
3b:9d:ee:3a:67:fe:af:57:1d:dc:17:f3:23:cb:3b:dd:21:08:
49:b0:b0:5e:97:0b:4d:17:5b:11:7d:d8:90:29:5e:28:01:cd:
05:d4:85:29:48:0e:9c:b0:1a:39:12:17:ed:d2:f3:8f:e8:b4:
4b:a8:96:c8:8e:92:8b:a0:e8:bb:fe:13:b0:14:53:f8:73:6e:
d4:f3:00:2b:20:65:6d:74:ac:58:68:34:7f:66:10:ba:7e:f0:
bf:9c:13:b5:64:6d:1a:9f:04:fd:a3:b6:d2:39:a3:19:1f:c3:
f3:26:d2:65:c8:3e:93:e8:80:b6:1c:c7:86:a2:4d:3d:56:b2:
0c:81:e2:04:a3:fa:d5:f7:81:aa:03:b6:e9:36:e3:13:1e:0c:
36:38:47:eb:04:2a:0c:0f:f5:86:ca:e7:d5:df:ef:c9:39:c9:
39:ac:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:37 2026 by rpki-client