Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: LwhFtSe9NPY1ex7PBlhaJs5Qd69TMye83G00vM3ZLpI=
Subject key identifier: DF:59:37:78:E8:0B:C0:CD:66:78:2B:52:41:25:B8:03:95:A4:42:28
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019D27DFA74327B8C4EEBFF3CA54E3C52009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:01 +0000
Manifest this update: Thu 26 Mar 2026 02:01:01 +0000
Manifest next update: Fri 27 Mar 2026 02:01:01 +0000
Files and hashes: 1: IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa (hash: JbEdz7DRUOFf0b29xjdSZVDAgz011LT+vbXjqHH3Ipg=)
2: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: RDeHXkyrE6jkwmlAzUs5t4ls+nZ2ttgTc5dsBcSskU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a7:43:27:b8:c4:ee:bf:f3:ca:54:e3:c5:20:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Mar 26 02:01:01 2026 GMT
Not After : Mar 27 02:01:01 2026 GMT
Subject: CN=df593778e80bc0cd66782b524125b80395a44228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:0b:38:43:b3:79:a0:b4:5a:97:8d:15:d0:
be:79:2f:0d:78:c7:44:5b:26:f3:06:94:ed:c6:a5:
eb:15:1e:6d:c2:7e:1e:41:fe:49:6f:01:bd:8a:47:
db:19:57:c2:95:6c:e5:44:ee:4c:d6:86:4e:ca:8c:
df:2f:46:a8:42:a2:4b:e3:1e:d4:70:c7:46:ec:cf:
57:19:7e:ad:3a:01:85:f3:a6:2a:a1:34:61:25:65:
a0:54:22:fe:c9:e7:a0:43:2d:23:f0:24:a1:2e:4e:
3d:49:94:21:9f:7d:f9:3a:74:95:5c:34:e4:bb:30:
d7:4a:08:74:00:85:9b:9c:a0:09:c8:15:e5:a1:a5:
bc:a3:24:a3:1c:c3:dd:1e:0a:af:fe:a8:af:0b:9c:
21:53:ab:a7:31:b7:d8:ab:b5:03:ee:bf:4d:7a:a2:
d9:e2:72:15:60:c7:f7:ce:e3:50:75:17:ce:73:db:
e3:e7:a9:f7:02:ea:fd:44:ee:5c:be:ce:1e:b3:82:
a5:cc:48:af:69:76:7c:34:9f:f6:61:bc:e3:0f:c0:
cb:88:02:c1:8e:86:6b:11:eb:07:8b:42:fb:e5:33:
69:dc:d6:ac:ad:78:0b:5e:90:2f:02:83:4f:91:03:
ed:8e:b1:87:e1:00:b4:62:54:da:48:69:07:77:4f:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:37:78:E8:0B:C0:CD:66:78:2B:52:41:25:B8:03:95:A4:42:28
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:45:83:14:21:63:f8:34:5f:29:99:2f:4c:b2:07:ff:71:6a:
12:da:ce:04:de:df:49:1d:41:93:57:38:60:a9:e9:e7:a1:0f:
ab:ce:d3:4e:7d:e9:77:08:8e:97:97:b9:95:06:b6:df:8a:60:
f3:0a:fb:86:23:0f:12:bb:27:51:6b:e8:e4:bb:16:ac:dc:37:
11:f9:c4:37:e3:4f:da:82:16:09:e1:70:bf:b8:70:2e:4c:51:
b5:c6:80:5a:4c:fd:f2:ce:66:37:80:e1:fd:94:04:93:65:90:
3e:c1:c4:5f:e2:aa:2e:25:d4:62:15:76:a8:83:f6:4b:01:1a:
6f:86:cf:88:c3:d8:2a:4f:01:7b:82:c0:9c:2b:2b:76:de:f2:
5a:e9:cb:d1:3c:fd:29:80:f9:5a:ff:5d:1a:69:b5:e1:1d:32:
c9:ae:74:e7:b6:0d:ea:2d:1d:50:eb:46:26:9e:59:54:36:af:
fa:b9:c8:2a:2b:f3:f7:bc:86:ea:20:d5:89:22:58:8f:4c:05:
be:b2:50:96:b7:f6:d9:8a:6e:12:49:b8:49:4a:6b:14:74:5b:
b2:00:b4:1a:86:d9:06:2a:d5:fb:17:7e:82:b7:73:dd:b5:d8:
d7:0f:a5:80:65:43:79:99:f5:45:45:ba:bf:e0:eb:e5:35:9b:
9c:97:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:36 2026 by rpki-client