Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: wogOvRe3cVMFEJfSgmgMQLzBrH1Hfvn1vZqzms4xFGg=
Subject key identifier: 5B:58:7F:E4:AE:6A:76:CE:B0:89:8F:FC:11:55:7A:B3:95:D4:6A:4B
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 019D262828454D669AD1B90351AF505D72FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: 1-AOMCdmeoYbt2ya7aina0jr4jtY.asa (hash: xTwHqHanvk0kgMpXCUgJVeavuxMbD2EF+e+t7yaNRxM=)
2: 3W7usHsAz5z3pRj0N-iDHGm2czc.roa (hash: E4GnjrWRndz3AnBRx+9OaWV9XAb0zCBKRFe07lFMNTM=)
3: F_BgJOvocs04aWFuQm0POmDC4qk.asa (hash: 8pzNWyrC83klHScR8mmfAawPECea/FNnp40sU7XiI9U=)
4: GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa (hash: 3Lkr3jjmSNfu4xmvpJepQZV62v8KdzELhqGFYD46GB4=)
5: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: TEntPkIFPGRjuT4Yp+Bw/UTQUfn08UbSOzE7z730epA=)
6: m0G5GX11-PLi8Cf5dbRKsch6VxU.roa (hash: B5VOYp4J4pteli5ym2in+54bvDMlgr4itugyDjzngoo=)
7: o1nw85DsZ7czict7FbvJ_kQ779I.roa (hash: SMVCZ8WXzySWtmomiDw5Tx85wLb4riJVskzdAhjKnkA=)
8: s8RwLaAcYW-FcVFkTHdO592EBJw.roa (hash: 23Vx3ChhQtBmCL55miGjdzYucRN+3e2NsCi7uSICISw=)
9: x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa (hash: WjqVws7+vV9QS4+QUh1ff5JcBRwxUgUec5H+AxoP0GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:28:45:4d:66:9a:d1:b9:03:51:af:50:5d:72:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=5b587fe4ae6a76ceb0898ffc11557ab395d46a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:4a:86:23:45:57:4c:74:a7:a3:53:eb:b2:
b8:88:70:b8:dc:fa:64:15:f3:fe:75:ad:20:7c:fb:
43:c8:c8:75:6e:d1:e7:ee:b0:ea:f2:30:d3:82:24:
72:8c:5e:4d:e6:42:02:8a:b1:44:3a:ed:a1:f5:50:
ca:97:9e:b8:59:13:7e:1f:64:34:b2:0f:a6:fb:48:
57:43:11:9e:24:d2:9d:cc:b7:e9:a1:57:50:2c:83:
56:c1:4e:e8:0e:2b:c1:b5:d1:98:86:53:6a:3c:0a:
30:1e:18:0e:8a:c4:55:a3:22:36:98:b3:64:76:b5:
44:2b:56:1a:c9:16:8e:0e:c0:4f:d0:42:c5:d5:0b:
96:75:8d:2f:57:23:8a:14:5a:b7:ee:40:a1:e1:51:
cb:96:cb:ff:9a:a8:c4:e2:c7:65:4a:24:c1:64:a3:
1c:66:d7:ab:6f:ec:45:86:9e:ba:5a:64:18:c1:81:
19:98:28:7a:b5:65:7d:85:37:e8:f4:1e:36:6e:61:
72:33:91:b2:54:fd:c8:f3:28:a1:4f:07:f7:70:6e:
f1:38:9f:70:8d:35:b3:82:70:89:eb:52:6d:8a:f4:
22:af:d5:ba:4a:d1:1d:ff:b2:34:07:13:d9:9f:58:
da:eb:39:8a:46:30:48:5c:75:60:7d:5c:c4:34:5f:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:7F:E4:AE:6A:76:CE:B0:89:8F:FC:11:55:7A:B3:95:D4:6A:4B
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ff:a8:45:fe:e0:75:38:68:1f:dd:64:54:bb:98:03:12:59:
94:30:d8:b1:ff:ef:fc:e4:44:92:02:2e:b3:17:d6:c8:00:d1:
e8:b3:80:aa:cb:f6:a7:df:86:c7:81:fb:8a:69:83:ad:05:af:
df:62:93:a1:56:d1:2d:9c:10:25:5d:65:bb:e8:da:1b:ee:4a:
ac:8c:48:88:9b:69:00:eb:20:2d:0b:19:45:3d:e6:ff:bc:01:
8b:bc:37:05:95:67:03:9f:64:2b:f6:45:6b:76:88:8e:da:44:
8c:32:3e:80:b3:ca:f7:1a:9c:77:24:65:28:ea:08:e1:c3:7a:
98:80:5a:6e:b2:65:af:2f:64:09:10:3b:ef:68:c0:5a:ea:60:
20:ae:00:23:1a:f6:7e:5e:51:89:72:0c:8c:3b:48:08:41:82:
49:d5:19:1e:e8:ce:98:65:0f:d8:36:6e:0c:e5:ee:3f:11:1a:
32:c9:53:e9:67:08:52:3c:b3:b9:71:82:6f:c1:39:0a:bd:98:
23:2d:e6:b0:72:71:e0:50:7d:c8:15:ad:e2:45:94:e3:d8:62:
6b:ae:37:dc:d6:46:05:dd:1a:c3:24:ee:57:26:5a:2a:82:cd:
da:7d:c3:dd:33:b6:80:e3:36:b7:24:85:6c:60:ac:1e:9a:8c:
54:26:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:40:16 2026 by rpki-client