Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
File: kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json)
Hash identifier: s2Kds0q1DfalZ4juJtFXVMo0RqYGpESye5yQYEJ/wyY=
Subject key identifier: 9F:FD:1E:F7:A1:04:AD:E4:11:12:B3:34:41:8F:DD:AF:1C:48:6C:B2
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 019D29CE135E273C6815C4B5AD15C75CB8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
Manifest number: 0D1C
Signing time: Thu 26 Mar 2026 11:01:04 +0000
Manifest this update: Thu 26 Mar 2026 11:01:04 +0000
Manifest next update: Fri 27 Mar 2026 11:01:04 +0000
Files and hashes: 1: bChcbGdFNJLxkL6cWvlOuiphISs.roa (hash: +dNUc4mkY1Ks/wJrUAYjbgs9Kw+RWtpPfvShsAp4TVY=)
2: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: AgyEYMaG8x8Y4oTfiJE++iql0cf/iolSXanyJ/EA574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:13:5e:27:3c:68:15:c4:b5:ad:15:c7:5c:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Mar 26 11:01:04 2026 GMT
Not After : Mar 27 11:01:04 2026 GMT
Subject: CN=9ffd1ef7a104ade41112b334418fddaf1c486cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:b6:5f:13:76:f1:9f:90:a0:2a:d8:bc:50:
6e:ad:63:64:ec:0b:0f:b7:8a:c5:62:39:78:23:3e:
75:a6:87:48:4c:a6:67:ea:78:e0:9f:fb:84:b9:b4:
a0:71:0b:2e:91:6d:58:d2:05:21:17:18:a3:a4:1d:
35:98:24:2e:ea:36:e8:6a:cd:b7:92:90:72:78:da:
39:8f:82:00:e6:49:ba:1e:e7:07:9e:13:cd:9a:e4:
43:8c:6d:ed:3f:0d:55:64:03:c8:be:06:1b:7f:1f:
40:37:d2:5c:43:57:26:26:ca:e7:5f:20:69:0f:fa:
d8:70:31:2b:e6:98:bb:09:87:0c:bf:86:07:81:ff:
14:92:8b:b3:28:74:b2:0e:41:25:60:fc:29:fe:15:
3e:ab:68:af:aa:ae:55:53:75:e3:de:25:33:f0:47:
6f:af:2d:6c:12:17:d4:6d:08:5b:ad:fe:24:57:9d:
cb:9c:fe:fd:9d:d6:c8:31:34:d4:cf:f6:e7:c8:0b:
14:25:75:fa:e0:ca:51:9b:af:6b:84:2b:b2:76:d4:
ea:99:7b:19:ac:32:05:aa:07:cf:a2:f2:3d:15:cd:
99:a0:1d:99:95:c7:59:9c:92:ab:05:a4:98:72:81:
72:95:91:c4:0d:0f:6e:59:c5:19:27:db:29:b8:ad:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:1E:F7:A1:04:AD:E4:11:12:B3:34:41:8F:DD:AF:1C:48:6C:B2
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3a:cb:cb:5c:1b:06:2e:97:99:c4:ca:7e:46:33:11:f6:0d:
87:ee:fe:b9:11:81:1a:4d:35:ed:d5:32:89:82:72:b9:ff:ab:
1b:b4:38:a9:07:2a:77:f9:62:da:a8:ca:bb:7c:1b:0b:65:2f:
ed:0c:2a:4b:dc:ea:56:d1:75:76:d7:8a:90:af:dd:e8:99:71:
90:92:ed:8d:b6:41:c4:8e:40:94:44:ad:29:a0:28:ee:ab:a7:
66:a1:9c:ad:9d:58:b4:5e:63:3c:8f:8e:45:99:0f:aa:59:15:
d9:7e:f9:fe:c9:e4:d7:10:b5:68:1c:d1:9c:94:26:94:ec:9e:
be:20:05:36:ec:8a:d7:be:9e:10:1b:01:1b:5b:7f:4e:35:75:
59:25:d2:64:13:95:43:b3:81:70:c4:bb:7c:48:6f:db:e6:42:
26:99:77:a9:9c:d0:32:b5:9c:08:69:1c:ba:9a:13:e3:a1:88:
19:b1:a3:5f:f9:97:17:7a:06:af:25:b8:9a:30:0a:b1:97:2b:
57:99:cd:2f:c6:73:17:1a:da:e1:6b:a0:62:f1:22:ea:58:32:
f0:da:7f:21:45:f8:d7:29:2b:1a:e6:d5:0c:b7:45:e6:31:f2:
57:a2:fa:e9:f0:4f:63:46:cc:ed:eb:cd:29:f0:82:57:c8:9f:
22:f5:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:19 2026 by rpki-client