Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: f9AnkxLsZxR2dM7BxdC/H9+dDaqAKLgYjzcw5QCgJkg=
Subject key identifier: 1C:4A:05:CC:95:42:99:87:18:E8:44:76:68:12:31:EF:29:4B:D9:DD
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019D2960C98ADAAFCDE1DEF341E45CA4D10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: FmTQzwwpZa6vBs/WRjvB3cZtWBRg4OTHoaGhbeLUCuI=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c9:8a:da:af:cd:e1:de:f3:41:e4:5c:a4:d1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=1c4a05cc9542998718e84476681231ef294bd9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:5d:f5:12:41:bc:98:ce:5d:70:9a:ba:82:
33:6b:fb:10:bb:73:e0:13:05:be:3d:4c:a3:ed:49:
f9:07:df:c9:eb:a8:16:4c:ea:e5:3c:98:83:a6:48:
92:b5:8e:77:4d:24:ab:e8:d0:06:29:79:d6:dd:1d:
12:47:fb:38:ec:91:26:7e:fb:45:6a:c7:c6:50:a1:
3e:22:9c:16:4d:a0:e4:16:39:5a:65:d9:3f:0b:44:
a0:10:53:2b:85:a2:63:22:a9:84:47:6b:77:1e:f4:
c7:b3:5d:f2:8d:c0:2f:46:e2:c7:3e:1a:cd:e9:17:
bf:03:0d:f8:77:70:e7:ef:fc:6c:a3:d3:20:ac:bf:
ee:7c:cd:cb:b6:a7:98:93:1e:d0:d9:89:62:32:44:
40:8e:32:cd:53:5f:c7:c3:4e:79:16:5b:52:91:85:
a0:f5:d9:16:67:d3:ca:11:c9:13:48:5c:1c:d0:48:
5e:c6:57:95:bb:5a:3c:8b:0d:a7:03:e2:68:71:68:
3c:49:4c:ea:ab:40:16:2c:6b:3f:9b:57:5b:b0:85:
71:6c:aa:75:d7:29:02:4d:f7:53:2e:19:2a:89:35:
7d:7d:98:fb:75:2e:eb:75:75:a9:e9:90:c2:72:1d:
eb:39:f3:34:bd:01:83:fd:04:08:25:4e:eb:3a:f0:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:05:CC:95:42:99:87:18:E8:44:76:68:12:31:EF:29:4B:D9:DD
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:93:68:b0:c1:f8:46:49:1d:94:df:a2:ef:75:63:ac:26:70:
45:52:7a:f7:bf:ae:f2:4c:b2:49:f1:f0:e8:b4:28:a6:98:06:
23:e7:ac:a7:18:c2:ac:ae:cf:09:39:ef:fd:cf:ba:8e:5a:34:
02:8d:a5:e9:f4:9d:2d:19:de:54:71:56:5c:4c:a8:1a:9e:22:
a6:af:d7:fc:c8:c0:d3:3d:b5:8a:8d:c8:02:23:69:75:96:70:
c0:5e:83:f7:de:8c:b0:11:5c:ad:1c:8f:ad:b1:7a:d2:92:2f:
57:49:68:0e:24:dd:53:6e:49:59:5e:74:d9:87:74:4e:c4:b2:
19:08:fd:c5:3e:d2:c5:d0:3a:10:9c:fa:75:46:72:18:60:a1:
bb:80:df:05:3a:3a:4f:7e:7b:85:49:69:d4:0e:2d:ba:de:c5:
e4:30:dd:af:dc:bc:6f:2a:9a:e0:3b:df:76:61:24:d7:be:3f:
3f:65:8d:67:1f:2e:83:5e:e3:86:b6:63:5d:b6:1a:3a:bb:a5:
f8:b4:ee:10:6d:9b:64:67:27:95:53:23:71:28:d5:5f:29:ff:
81:f3:e6:a3:f5:a8:92:65:fa:8a:39:99:a6:d8:a3:44:21:4e:
71:cb:7e:fa:9c:b2:95:82:e6:f5:0e:59:a9:9d:dc:28:67:41:
57:87:b8:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYMmK2q/N4d7zQeRcpNELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx
MzQwZGYwHhcNMjYwMzI2MDkwMTQxWhcNMjYwMzI3MDkwMTQxWjAzMTEwLwYDVQQD
EygxYzRhMDVjYzk1NDI5OTg3MThlODQ0NzY2ODEyMzFlZjI5NGJkOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8td9RJBvJjOXXCauoIza/sQu3Pg
EwW+PUyj7Un5B9/J66gWTOrlPJiDpkiStY53TSSr6NAGKXnW3R0SR/s47JEmfvtF
asfGUKE+IpwWTaDkFjlaZdk/C0SgEFMrhaJjIqmER2t3HvTHs13yjcAvRuLHPhrN
6Re/Aw34d3Dn7/xso9MgrL/ufM3LtqeYkx7Q2YliMkRAjjLNU1/Hw055FltSkYWg
9dkWZ9PKEckTSFwc0EhexleVu1o8iw2nA+JocWg8SUzqq0AWLGs/m1dbsIVxbKp1
1ykCTfdTLhkqiTV9fZj7dS7rdXWp6ZDCch3rOfM0vQGD/QQIJU7rOvCtnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxKBcyVQpmHGOhEdmgSMe8pS9ndMB8GA1UdIwQY
MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt
NTA4MmMyOGI3MTVmLzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm
LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZNosMH4
RkkdlN+i73VjrCZwRVJ697+u8kyySfHw6LQoppgGI+espxjCrK7PCTnv/c+6jlo0
Ao2l6fSdLRneVHFWXEyoGp4ipq/X/MjA0z21io3IAiNpdZZwwF6D996MsBFcrRyP
rbF60pIvV0loDiTdU25JWV502Yd0TsSyGQj9xT7SxdA6EJz6dUZyGGChu4DfBTo6
T357hUlp1A4tut7F5DDdr9y8byqa4DvfdmEk174/P2WNZx8ug17jhrZjXbYaOrul
+LTuEG2bZGcnlVMjcSjVXyn/gfPmo/WokmX6ijmZptijRCFOcct++pyylYLm9Q5Z
qZ3cKGdBV4e4+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:31 2026 by rpki-client