Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: z1g7LnInJ03ReA3AQfCoR566feiZuJjiMgsrpOkdI2s=
Subject key identifier: 11:B6:CD:5D:86:5E:18:1C:05:15:CD:33:54:C2:C7:48:D1:75:83:0F
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 019D29CEBF52C7736C43514E20054AE0239A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:48 +0000
Manifest this update: Thu 26 Mar 2026 11:01:48 +0000
Manifest next update: Fri 27 Mar 2026 11:01:48 +0000
Files and hashes: 1: 1f8yNz_6CeZb2_cKtFYjakkUYu0.roa (hash: CQrSvmHUDyMuGsezkRUoXIh9i5m3+0vp+bw6nOrytp0=)
2: eByvcSZKJ0C054yav4nbHodBBYg.roa (hash: iRSBboUDEVdKSWCvgZE0xP0Y8IB0acvS1GqTMfNLmr8=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: x05gkdwmfJ1ynZy25EISllFW37EyngqBRdKSJkIISqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:bf:52:c7:73:6c:43:51:4e:20:05:4a:e0:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Mar 26 11:01:48 2026 GMT
Not After : Mar 27 11:01:48 2026 GMT
Subject: CN=11b6cd5d865e181c0515cd3354c2c748d175830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:da:de:87:47:2a:ac:d7:18:e1:f9:9c:6f:
44:21:33:7d:c1:3e:eb:22:f7:9f:7e:2d:d2:ce:5f:
00:64:3a:da:7d:62:fa:80:b7:b3:ce:72:1f:25:77:
0c:d6:ae:ba:25:0e:db:a1:a6:1b:1e:14:46:9c:c4:
0b:0b:70:14:9e:d0:94:15:08:c6:31:bd:03:5b:e9:
b9:f0:d8:f8:b5:a1:ff:ad:ed:97:eb:0b:f1:6b:aa:
f5:33:de:3e:55:66:1b:da:2a:b4:4e:55:6d:36:9b:
84:cb:00:02:20:4c:78:b2:df:bb:6b:de:7c:e3:9b:
5e:5b:66:92:34:34:74:71:1f:a1:71:f9:2c:f9:6e:
e5:41:13:f2:c2:6e:8c:53:5f:a4:41:54:1b:92:c1:
6d:3c:0e:27:98:e2:85:fd:4e:06:21:8d:64:40:d5:
c9:40:81:5a:92:99:e5:00:64:9c:0f:c0:70:96:4c:
79:26:9c:b0:26:f1:14:a8:f4:0e:51:01:35:4e:5f:
7a:a2:94:f7:ed:9f:f4:96:2f:41:b5:9c:a9:89:3f:
63:a7:a4:72:65:0a:a3:4d:ee:62:d9:ac:db:93:69:
64:d4:a6:eb:67:ec:c8:fb:5a:73:c0:d7:cc:87:98:
c1:ee:d9:7b:e1:66:0e:20:23:3d:74:cb:13:0b:e8:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:CD:5D:86:5E:18:1C:05:15:CD:33:54:C2:C7:48:D1:75:83:0F
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:16:ed:f1:1f:a6:ca:4b:65:68:7e:ed:0d:40:0a:96:72:d6:
ee:bb:9c:41:0b:df:42:10:96:72:5a:40:6d:da:5b:76:54:a0:
a7:19:91:2e:31:f4:e8:98:42:cc:cf:cd:0c:6f:d8:76:6c:75:
27:91:61:97:cd:e2:a2:39:2a:73:0e:2b:04:13:6e:a1:22:c9:
74:3c:99:84:46:6a:1f:5f:bd:db:07:c1:50:e5:b9:6a:74:ac:
2d:fe:50:3f:3b:a4:cc:4b:27:d4:49:27:3e:1f:9b:5d:ba:c8:
2a:d4:0e:c0:48:12:4d:a2:62:d8:85:c8:56:26:3b:85:11:f2:
ba:50:ab:ec:02:8e:a8:2c:5d:95:a4:35:5a:d6:f8:7e:91:ac:
8f:3e:43:8f:73:fa:86:a2:c2:57:de:fe:ee:49:b9:4b:c3:8d:
15:1b:91:ab:ad:b3:32:2b:ce:53:e6:19:ce:b6:c5:86:6a:00:
23:0e:59:02:18:03:f7:33:3c:71:75:15:03:53:55:ff:2e:d8:
7b:18:c3:84:38:da:5f:c9:49:60:1b:12:9d:ad:73:00:ad:ae:
f1:b2:bc:1e:37:bd:f6:19:22:07:3c:3f:f3:b5:d7:1b:9e:a4:
e6:8c:20:07:82:db:7f:72:bb:fd:e5:88:ed:42:f8:32:5b:77:
95:b9:9c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzr9Sx3NsQ1FOIAVK4COaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl
MDgyODcwHhcNMjYwMzI2MTEwMTQ4WhcNMjYwMzI3MTEwMTQ4WjAzMTEwLwYDVQQD
EygxMWI2Y2Q1ZDg2NWUxODFjMDUxNWNkMzM1NGMyYzc0OGQxNzU4MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6ba3odHKqzXGOH5nG9EITN9wT7r
Iveffi3Szl8AZDrafWL6gLezznIfJXcM1q66JQ7boaYbHhRGnMQLC3AUntCUFQjG
Mb0DW+m58Nj4taH/re2X6wvxa6r1M94+VWYb2iq0TlVtNpuEywACIEx4st+7a958
45teW2aSNDR0cR+hcfks+W7lQRPywm6MU1+kQVQbksFtPA4nmOKF/U4GIY1kQNXJ
QIFakpnlAGScD8Bwlkx5JpywJvEUqPQOUQE1Tl96opT37Z/0li9BtZypiT9jp6Ry
ZQqjTe5i2azbk2lk1KbrZ+zI+1pzwNfMh5jB7tl74WYOICM9dMsTC+hW9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG2zV2GXhgcBRXNM1TCx0jRdYMPMB8GA1UdIwQY
MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt
ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi
LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhbt8R+m
yktlaH7tDUAKlnLW7rucQQvfQhCWclpAbdpbdlSgpxmRLjH06JhCzM/NDG/Ydmx1
J5Fhl83iojkqcw4rBBNuoSLJdDyZhEZqH1+92wfBUOW5anSsLf5QPzukzEsn1Ekn
Ph+bXbrIKtQOwEgSTaJi2IXIViY7hRHyulCr7AKOqCxdlaQ1Wtb4fpGsjz5Dj3P6
hqLCV97+7km5S8ONFRuRq62zMivOU+YZzrbFhmoAIw5ZAhgD9zM8cXUVA1NV/y7Y
exjDhDjaX8lJYBsSna1zAK2u8bK8Hje99hkiBzw/87XXG56k5owgB4Lbf3K7/eWI
7UL4Mlt3lbmc6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:49 2026 by rpki-client