Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: D9//88ZjtilpRXTuL0iUbm87gR3LH/4sS/DqQt6Q85Q=
Subject key identifier: 89:1C:5F:C5:52:B2:C8:B4:C4:FA:C5:DC:AE:56:9E:3B:A7:17:1C:31
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 019D28165DC6AAD2AE767DE3C3F0D4F98477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 054D
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: Rok7bhVcrvMGmCeWCMtB237UrvA.roa (hash: Xpw27Y+b5oWmTMptkoA1gCQxfXLZzXNMTUlev3rzVHE=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: l03JKxx7naJyDWKHod5+jr1YNJj5gCnWKXlgkQYIBaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5d:c6:aa:d2:ae:76:7d:e3:c3:f0:d4:f9:84:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=891c5fc552b2c8b4c4fac5dcae569e3ba7171c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:e4:8a:6b:fa:a2:aa:21:e2:fc:ae:a0:68:
03:f2:38:a0:03:c8:a5:0d:62:2f:4f:27:48:77:e6:
79:d5:38:13:e2:82:e8:34:f2:ad:c0:be:34:e2:32:
a6:8d:4b:86:c8:1a:e2:24:3c:4c:33:9b:3c:d4:89:
41:ad:21:01:17:3b:7e:16:62:90:bd:d7:ee:0f:c6:
53:ad:70:57:ca:6c:45:78:48:59:e7:0c:14:a3:28:
16:1f:c4:eb:69:00:82:bc:78:5b:d6:84:07:36:c3:
9d:ca:21:f1:3b:ed:f7:e8:bc:9d:00:66:b5:d3:cf:
1c:a5:ce:47:f2:15:59:03:17:c5:09:fb:99:57:80:
a0:a6:5b:04:83:6d:bf:a1:1d:6f:cf:b2:75:02:a2:
0a:32:5b:c9:06:a2:51:c4:f5:e4:35:20:ae:14:a3:
8d:18:d5:c7:c2:2c:e8:e1:fb:e5:5d:79:9f:c4:0f:
21:df:9a:d2:36:27:17:36:82:f5:7e:aa:b3:58:1e:
61:59:bc:00:0e:0c:e4:f1:55:00:b7:bb:f1:a9:78:
05:c4:8a:bb:28:39:3c:14:bb:63:56:43:d9:bb:aa:
48:c9:b9:6b:ce:f0:2f:56:10:e1:12:45:1c:42:90:
82:3b:bf:bd:82:43:82:49:e0:31:85:78:0e:73:10:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:5F:C5:52:B2:C8:B4:C4:FA:C5:DC:AE:56:9E:3B:A7:17:1C:31
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:13:2a:4c:4b:e4:ea:26:92:d9:ba:79:be:22:98:91:1b:43:
d5:2d:ae:12:07:bb:0b:e2:18:af:8c:43:8a:67:d9:6f:2b:fa:
00:8a:b0:a3:02:aa:30:f1:ca:94:5d:d7:48:ce:f9:d2:b0:56:
dc:63:01:59:37:25:e3:ef:0a:bb:19:cc:2e:10:ba:02:89:5f:
17:05:13:cd:63:ab:1f:50:cd:7d:f7:f6:37:ff:77:75:da:85:
4c:10:b7:84:be:d2:06:bb:b9:ee:21:e7:89:b6:5c:66:97:75:
3b:49:31:72:1b:19:46:6b:28:e9:0e:f9:7d:6d:d5:5c:0a:6e:
29:04:90:8a:00:20:1d:d9:a7:37:e8:2d:1b:2f:06:24:4d:cb:
69:e6:b2:c3:79:9a:ed:59:f0:40:03:24:68:3d:ee:3a:69:d2:
44:72:06:ba:44:34:1d:ae:89:7b:cd:0a:da:bc:90:25:70:e2:
7d:35:75:3b:2e:44:0a:94:57:23:c1:10:7d:b6:b2:23:44:7b:
b7:a5:d1:1e:6b:88:0e:45:91:84:54:d0:3b:a4:81:48:79:d9:
4b:8d:0a:64:1d:a4:a0:75:a0:dd:bd:49:33:7a:bb:7d:3d:e8:
56:d8:2c:1d:5d:3e:1c:32:46:58:66:57:01:60:cd:7b:3f:f2:
32:07:2b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFl3GqtKudn3jw/DU+YR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc5MmVhOGZmZjkwNDBiMmNkN2YxNzA3MzZlNDJlNzQ4
M2E3NjcwHhcNMjYwMzI2MDMwMDQ3WhcNMjYwMzI3MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg4OTFjNWZjNTUyYjJjOGI0YzRmYWM1ZGNhZTU2OWUzYmE3MTcxYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspbkimv6oqoh4vyuoGgD8jigA8il
DWIvTydId+Z51TgT4oLoNPKtwL404jKmjUuGyBriJDxMM5s81IlBrSEBFzt+FmKQ
vdfuD8ZTrXBXymxFeEhZ5wwUoygWH8TraQCCvHhb1oQHNsOdyiHxO+336LydAGa1
088cpc5H8hVZAxfFCfuZV4CgplsEg22/oR1vz7J1AqIKMlvJBqJRxPXkNSCuFKON
GNXHwizo4fvlXXmfxA8h35rSNicXNoL1fqqzWB5hWbwADgzk8VUAt7vxqXgFxIq7
KDk8FLtjVkPZu6pIyblrzvAvVhDhEkUcQpCCO7+9gkOCSeAxhXgOcxDyPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkcX8VSssi0xPrF3K5WnjunFxwxMB8GA1UdIwQY
MBaAFJD3kuqP/5BAss1/Fwc25C50g6dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQt
Y2I3NDBkYjA2YjI5LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQtY2I3NDBkYjA2YjI5
LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBMqTEvk
6iaS2bp5viKYkRtD1S2uEge7C+IYr4xDimfZbyv6AIqwowKqMPHKlF3XSM750rBW
3GMBWTcl4+8KuxnMLhC6AolfFwUTzWOrH1DNfff2N/93ddqFTBC3hL7SBru57iHn
ibZcZpd1O0kxchsZRmso6Q75fW3VXApuKQSQigAgHdmnN+gtGy8GJE3Laeayw3ma
7VnwQAMkaD3uOmnSRHIGukQ0Ha6Je80K2ryQJXDifTV1Oy5ECpRXI8EQfbayI0R7
t6XRHmuIDkWRhFTQO6SBSHnZS40KZB2koHWg3b1JM3q7fT3oVtgsHV0+HDJGWGZX
AWDNez/yMgcrRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:58 2026 by rpki-client