Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: LtlmUziIFDPtz4kHhde9hfKdZCniJrTX5DEiFvPS2ko=
Subject key identifier: 6A:21:BD:9B:06:CE:FC:F2:B0:03:79:3B:4F:8A:2E:13:69:7F:00:A0
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019D2772D92F7DFBE79905B908E90FE506CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 15C3
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: 1T1EmzuploW8Hli3F6VvN89444c.roa (hash: 0xB4j4LlwM3o7BHqfHhrdF1w4xBf3JBcz4TO0vz2AeQ=)
2: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: k7WekVzodukF0uHpfe7TuWu3GLk+ETvU2C3A9OGcZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d9:2f:7d:fb:e7:99:05:b9:08:e9:0f:e5:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=6a21bd9b06cefcf2b003793b4f8a2e13697f00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:0b:a8:3d:96:c3:ff:b3:7f:98:55:66:be:
80:92:5c:19:f6:4d:28:b5:8f:37:c9:f5:c6:73:cd:
18:f3:82:c1:ae:5c:d9:d1:6f:2c:a8:e9:05:20:22:
19:50:2c:97:99:06:cd:fb:b3:a3:75:e8:07:28:9a:
43:73:cf:06:de:2f:79:13:60:64:d5:57:f1:dc:3a:
a1:1a:7e:15:5f:59:64:4e:92:b3:38:04:5a:3a:d4:
06:90:67:43:a1:0f:81:bd:b0:3f:4e:d7:76:29:fc:
bf:20:92:7d:9e:b8:c3:ca:e2:86:77:3f:30:98:a4:
5b:6d:5d:83:21:3f:9f:1e:e1:f9:3a:30:76:80:18:
58:69:c9:06:d4:bd:85:79:78:1c:6e:34:b0:9d:b1:
14:dc:9e:97:67:c3:f2:57:9c:18:84:da:62:20:25:
6c:54:a0:19:cc:c4:67:da:21:25:d2:59:9e:95:28:
7d:fa:d1:40:8a:d8:0c:60:75:c9:50:5f:c6:1a:91:
0b:8c:8f:54:ff:ab:18:fc:9e:54:ab:be:88:0c:73:
6a:e5:ca:00:ee:7d:dc:45:aa:48:3c:25:f3:56:f2:
1d:2b:77:5c:38:41:d3:1b:3f:d1:c3:70:e2:2f:7a:
99:8d:bb:eb:c0:da:9c:60:07:37:1a:64:24:66:d2:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:21:BD:9B:06:CE:FC:F2:B0:03:79:3B:4F:8A:2E:13:69:7F:00:A0
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:be:34:43:3d:de:fa:ad:4f:f1:54:e2:67:a2:7a:f5:76:
fe:0c:43:1d:65:cc:f9:b1:14:52:7b:f9:02:6a:87:ed:d4:28:
a3:59:ef:7b:c2:bc:cd:1d:a2:f6:f9:f2:0c:10:fe:2f:eb:20:
fb:a5:45:2a:e3:24:cb:70:1e:8a:7f:44:55:cb:36:88:f5:df:
d6:63:5b:e2:98:e9:0c:cb:bb:0f:e6:e7:96:a3:47:63:f2:57:
cb:53:43:e9:08:57:0b:5e:75:45:42:11:f6:a3:32:7c:4a:1e:
09:1e:1a:20:78:4f:4c:ac:b0:61:4c:17:d9:a8:e1:a6:17:ad:
33:93:d4:b5:a1:28:fc:21:93:91:bc:7d:a1:85:25:e4:8d:a3:
b3:42:7e:50:5f:e9:89:25:58:10:8e:00:c8:4f:c4:00:45:ae:
09:86:28:f5:e7:b3:21:27:8a:64:7f:a8:41:ea:37:81:56:03:
4b:c4:a7:7e:93:91:de:bb:8d:cb:0a:44:98:54:30:07:60:4d:
02:17:07:8f:91:ed:66:17:72:95:16:6e:bb:17:16:ae:95:a5:
50:fa:98:b7:d9:38:e1:dd:8c:40:fd:4e:21:cf:84:f8:17:61:
7f:61:45:a5:f7:e4:08:de:21:43:e7:5c:fc:3d:c8:1f:53:8b:
9a:61:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:14 2026 by rpki-client