Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: rnrsZxBi54Hj+XJhKNkdzv9Y0lJUZrLh/5mb/QuNwhY=
Subject key identifier: AF:7D:47:F9:42:91:E5:EF:E8:AB:71:B7:66:01:29:D6:E3:AC:0C:B7
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019D25F0EA87E5503FF6DF392C7972ACB964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:00:38 +0000
Manifest this update: Wed 25 Mar 2026 17:00:38 +0000
Manifest next update: Thu 26 Mar 2026 17:00:38 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: wx9jDZ8Ptl3JMIHTtNHL6zpL/sZiBkizKsXRWZQi1+c=)
3: p0olYKK_67ffAzfvQRoSSz8TiKA.asa (hash: JDzRWVmjvJMNN1HKwXLWsrOkuN3FQ3v+/s9RaitfV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ea:87:e5:50:3f:f6:df:39:2c:79:72:ac:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Mar 25 17:00:38 2026 GMT
Not After : Mar 26 17:00:38 2026 GMT
Subject: CN=af7d47f94291e5efe8ab71b7660129d6e3ac0cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:fd:66:e3:ec:6a:90:e3:a2:54:4e:70:a0:
03:53:70:89:c8:38:79:8d:66:7d:b2:05:17:d0:6b:
75:a5:c2:59:6c:1f:32:7b:a8:d8:72:64:be:e5:6f:
31:be:69:26:e0:1d:d0:fe:60:b2:58:0a:f3:45:57:
20:e7:93:21:36:af:a8:eb:7a:dd:d3:ab:9c:d8:dd:
8f:72:75:6e:04:4f:c4:4a:97:d3:77:29:6c:ca:dd:
35:6f:97:25:8e:00:64:bb:07:b4:c1:7d:c6:ad:47:
45:08:e0:6d:38:7a:38:f3:70:1e:28:58:21:99:d7:
2c:41:6d:69:54:22:10:5d:93:f4:ec:e4:ee:52:77:
8b:d9:a6:96:c5:fc:86:4b:0a:7d:18:9b:14:1b:7e:
e1:fc:53:7b:9d:9e:08:99:6b:86:04:c6:71:d0:53:
43:f2:7d:d0:39:7c:bd:c1:23:cf:6e:14:29:56:0c:
cf:1b:71:b2:56:99:ef:32:46:74:b2:da:4e:10:00:
b2:a9:c9:76:9f:1f:d4:5e:6c:b5:b2:60:f0:d5:3e:
01:ca:01:93:39:2a:d2:ef:b8:8f:c5:f7:c2:29:d9:
18:56:6f:e6:c3:3a:d5:c4:b5:20:9d:f4:85:9a:5e:
30:47:a7:25:b3:1e:57:f2:10:82:2c:5c:c9:fd:b5:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:47:F9:42:91:E5:EF:E8:AB:71:B7:66:01:29:D6:E3:AC:0C:B7
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d3:57:38:dc:fc:f5:28:dd:6e:cc:c9:0f:41:07:31:4b:f0:
05:46:0f:62:e9:80:42:bc:a6:4e:e0:43:26:fe:f0:95:83:1a:
db:ac:b3:5b:44:6e:18:ee:f4:fc:87:25:50:0e:22:88:5b:1c:
da:31:0c:eb:47:dc:33:90:5a:14:71:ea:1a:46:60:55:4b:47:
91:ce:3c:7e:8f:f9:5f:7c:61:da:91:22:51:b9:55:4a:6c:35:
ed:95:dd:b9:bb:95:2e:11:3e:04:5e:50:93:5e:e4:84:a7:f5:
a4:ea:df:db:e5:f5:5f:1b:37:f6:a5:0b:60:04:8c:0c:09:a3:
0d:31:49:3f:c1:cb:dc:0a:a2:b2:86:47:87:41:42:67:e8:4b:
0f:92:a1:8b:4a:80:28:c6:7d:93:6f:f2:c8:ec:d8:10:a9:c2:
5e:62:52:8b:50:86:ad:3f:38:b7:ff:13:c3:7d:ba:f8:0e:d8:
d1:4a:96:44:3a:93:32:07:3d:e6:ec:9f:1e:56:c5:b3:bc:16:
d3:d5:6e:69:53:c5:0c:10:95:a5:75:39:2c:37:54:67:b6:67:
d8:53:b8:17:98:21:ea:b0:81:5e:11:77:98:42:44:93:f1:f9:
78:59:7d:04:85:0d:83:db:15:ef:c5:a3:8c:45:fb:4f:49:97:
99:4b:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:48 2026 by rpki-client